0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:30:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x4800}, 0x0) 07:30:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) 07:30:47 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 17) 07:30:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000004cffffffff"], 0x38}}, 0x0) [ 2299.905700][T17932] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2299.922803][T17931] FAULT_INJECTION: forcing a failure. [ 2299.922803][T17931] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.964373][T17931] CPU: 1 PID: 17931 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2299.973267][T17931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.983548][T17931] Call Trace: [ 2299.987004][T17931] [ 2299.989941][T17931] dump_stack_lvl+0xcd/0x134 [ 2299.994550][T17931] should_fail.cold+0x5/0xa [ 2299.999166][T17931] ? alloc_workqueue_attrs+0x38/0x80 [ 2300.004457][T17931] should_failslab+0x5/0x10 [ 2300.008976][T17931] kmem_cache_alloc_trace+0x55/0x2c0 [ 2300.014286][T17931] alloc_workqueue_attrs+0x38/0x80 [ 2300.019440][T17931] apply_wqattrs_prepare+0xbc/0x890 [ 2300.024872][T17931] apply_workqueue_attrs_locked+0xc1/0x140 [ 2300.030867][T17931] alloc_workqueue+0xa45/0xf00 [ 2300.035679][T17931] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 2300.041637][T17931] ? vsnprintf+0x283/0x14f0 [ 2300.046161][T17931] hci_register_dev+0x213/0xbd0 [ 2300.051223][T17931] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2300.056275][T17931] tty_ioctl+0xc69/0x1670 [ 2300.060787][T17931] ? hci_uart_init_work+0x170/0x170 [ 2300.066015][T17931] ? tty_lookup_driver+0x550/0x550 [ 2300.071150][T17931] ? lock_downgrade+0x6e0/0x6e0 [ 2300.072264][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2300.076032][T17931] ? __fget_files+0x23d/0x3e0 [ 2300.076076][T17931] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2300.096495][T17931] ? tty_lookup_driver+0x550/0x550 [ 2300.101629][T17931] __x64_sys_ioctl+0x193/0x200 [ 2300.106427][T17931] do_syscall_64+0x35/0xb0 [ 2300.110864][T17931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2300.116773][T17931] RIP: 0033:0x7f0d3da40ae9 [ 2300.121214][T17931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.140925][T17931] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2300.149359][T17931] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2300.157340][T17931] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 07:30:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x4c00}, 0x0) 07:30:47 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:30:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) 07:30:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00006558ffffffff"], 0x38}}, 0x0) 07:30:47 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:30:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000060ffffffff"], 0x38}}, 0x0) [ 2300.165577][T17931] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.170167][T17947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2300.173553][T17931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.173573][T17931] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2300.173619][T17931] [ 2300.280448][T17937] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2300.302982][T17931] Bluetooth: Can't register HCI device [ 2300.338850][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2302.354195][T13286] Bluetooth: hci7: command 0xfc11 tx timeout [ 2302.355004][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) 07:30:50 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:30:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x5865}, 0x0) 07:30:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00008864ffffffff"], 0x38}}, 0x0) 07:30:50 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) 07:30:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000068) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:30:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 18) [ 2302.960106][T17967] FAULT_INJECTION: forcing a failure. [ 2302.960106][T17967] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.962119][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2303.003749][T17967] CPU: 0 PID: 17967 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2303.012562][T17967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.022968][T17967] Call Trace: [ 2303.026249][T17967] [ 2303.029186][T17967] dump_stack_lvl+0xcd/0x134 [ 2303.033802][T17967] should_fail.cold+0x5/0xa [ 2303.038331][T17967] should_failslab+0x5/0x10 [ 2303.042847][T17967] kmem_cache_alloc_node+0x65/0x3f0 [ 2303.048057][T17967] ? alloc_unbound_pwq+0x4a5/0xce0 [ 2303.053186][T17967] alloc_unbound_pwq+0x4a5/0xce0 [ 2303.058146][T17967] apply_wqattrs_prepare+0x2b6/0x890 [ 2303.063464][T17967] apply_workqueue_attrs_locked+0xc1/0x140 [ 2303.069285][T17967] alloc_workqueue+0xa45/0xf00 [ 2303.074070][T17967] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 2303.079832][T17967] ? vsnprintf+0x283/0x14f0 [ 2303.084352][T17967] hci_register_dev+0x213/0xbd0 [ 2303.089233][T17967] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2303.094284][T17967] tty_ioctl+0xc69/0x1670 [ 2303.098625][T17967] ? hci_uart_init_work+0x170/0x170 [ 2303.103845][T17967] ? tty_lookup_driver+0x550/0x550 [ 2303.108981][T17967] ? lock_downgrade+0x6e0/0x6e0 [ 2303.113861][T17967] ? __fget_files+0x23d/0x3e0 [ 2303.118542][T17967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2303.124813][T17967] ? tty_lookup_driver+0x550/0x550 [ 2303.130162][T17967] __x64_sys_ioctl+0x193/0x200 [ 2303.134992][T17967] do_syscall_64+0x35/0xb0 [ 2303.139465][T17967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2303.145456][T17967] RIP: 0033:0x7f0d3da40ae9 [ 2303.150013][T17967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.169718][T17967] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2303.178206][T17967] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2303.186184][T17967] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2303.194142][T17967] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 07:30:50 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:30:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00005865ffffffff"], 0x38}}, 0x0) 07:30:50 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x300}, 0x4) 07:30:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6000}, 0x0) [ 2303.202190][T17967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2303.210150][T17967] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2303.218143][T17967] [ 2303.261402][T17973] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2303.267179][T17967] Bluetooth: Can't register HCI device 07:30:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 19) 07:30:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6558}, 0x0) [ 2303.350794][T17986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:30:51 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:30:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000068ffffffff"], 0x38}}, 0x0) [ 2303.440617][T17991] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2303.456343][T17991] FAULT_INJECTION: forcing a failure. [ 2303.456343][T17991] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.475822][T17991] CPU: 1 PID: 17991 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 07:30:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x600}, 0x4) [ 2303.484805][T17991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.494888][T17991] Call Trace: [ 2303.498172][T17991] [ 2303.501110][T17991] dump_stack_lvl+0xcd/0x134 [ 2303.505718][T17991] should_fail.cold+0x5/0xa [ 2303.510252][T17991] should_failslab+0x5/0x10 [ 2303.514780][T17991] __kmalloc_track_caller+0x79/0x320 [ 2303.520081][T17991] ? kstrdup_const+0x53/0x80 [ 2303.524692][T17991] kstrdup+0x36/0x70 [ 2303.528602][T17991] kstrdup_const+0x53/0x80 [ 2303.533033][T17991] kvasprintf_const+0x108/0x190 07:30:51 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) [ 2303.537909][T17991] kobject_set_name_vargs+0x56/0x150 [ 2303.543214][T17991] dev_set_name+0xbb/0xf0 [ 2303.547734][T17991] ? device_initialize+0x560/0x560 [ 2303.552872][T17991] ? mntput+0x67/0x90 [ 2303.556870][T17991] ? start_creating.part.0+0x18f/0x290 [ 2303.562360][T17991] hci_register_dev+0x2eb/0xbd0 [ 2303.567237][T17991] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2303.572321][T17991] tty_ioctl+0xc69/0x1670 [ 2303.576664][T17991] ? hci_uart_init_work+0x170/0x170 [ 2303.581891][T17991] ? tty_lookup_driver+0x550/0x550 [ 2303.587363][T17991] ? lock_downgrade+0x6e0/0x6e0 [ 2303.592251][T17991] ? __fget_files+0x23d/0x3e0 [ 2303.596952][T17991] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2303.603210][T17991] ? tty_lookup_driver+0x550/0x550 [ 2303.608346][T17991] __x64_sys_ioctl+0x193/0x200 [ 2303.613133][T17991] do_syscall_64+0x35/0xb0 [ 2303.617568][T17991] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2303.623475][T17991] RIP: 0033:0x7f0d3da40ae9 [ 2303.627897][T17991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.647516][T17991] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2303.656411][T17991] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2303.664630][T17991] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2303.674020][T17991] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2303.682335][T17991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2303.690322][T17991] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2303.698306][T17991] [ 2303.731710][T17991] Bluetooth: Can't register HCI device [ 2305.314371][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2305.839756][T17976] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x1000006c) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:30:55 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:30:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6800}, 0x0) 07:30:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000006cffffffff"], 0x38}}, 0x0) 07:30:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x700}, 0x4) 07:30:55 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 20) [ 2307.884370][T27062] Bluetooth: hci2: command 0xfc11 tx timeout [ 2307.884432][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:30:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000074ffffffff"], 0x38}}, 0x0) [ 2307.978005][T18020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:30:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6c00}, 0x0) [ 2308.077471][T18022] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2308.120261][T18022] FAULT_INJECTION: forcing a failure. [ 2308.120261][T18022] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.120275][T18026] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2308.134447][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2308.196238][T18022] CPU: 0 PID: 18022 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2308.205136][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.215812][T18022] Call Trace: [ 2308.219200][T18022] [ 2308.222222][T18022] dump_stack_lvl+0xcd/0x134 [ 2308.226831][T18022] should_fail.cold+0x5/0xa [ 2308.231357][T18022] ? device_add+0x11a7/0x1ee0 [ 2308.236044][T18022] should_failslab+0x5/0x10 [ 2308.240561][T18022] kmem_cache_alloc_trace+0x55/0x2c0 [ 2308.246044][T18022] device_add+0x11a7/0x1ee0 [ 2308.250562][T18022] ? device_initialize+0x560/0x560 [ 2308.255698][T18022] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2308.261954][T18022] ? start_creating.part.0+0x18f/0x290 [ 2308.267442][T18022] hci_register_dev+0x2f3/0xbd0 [ 2308.272325][T18022] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2308.277709][T18022] tty_ioctl+0xc69/0x1670 [ 2308.282048][T18022] ? hci_uart_init_work+0x170/0x170 [ 2308.287268][T18022] ? tty_lookup_driver+0x550/0x550 [ 2308.292403][T18022] ? lock_downgrade+0x6e0/0x6e0 [ 2308.297292][T18022] ? __fget_files+0x23d/0x3e0 [ 2308.301993][T18022] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2308.308461][T18022] ? tty_lookup_driver+0x550/0x550 [ 2308.313601][T18022] __x64_sys_ioctl+0x193/0x200 [ 2308.318391][T18022] do_syscall_64+0x35/0xb0 [ 2308.322828][T18022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2308.328730][T18022] RIP: 0033:0x7f0d3da40ae9 07:30:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 07:30:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x7400}, 0x0) 07:30:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x7a00}, 0x0) [ 2308.333155][T18022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2308.352950][T18022] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2308.361376][T18022] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2308.369358][T18022] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2308.377508][T18022] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.385576][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:30:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000007affffffff"], 0x38}}, 0x0) [ 2308.393644][T18022] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2308.401654][T18022] [ 2308.455282][T18022] Bluetooth: Can't register HCI device [ 2308.487440][T18045] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2310.194148][T27062] Bluetooth: hci7: command 0xfc11 tx timeout [ 2310.205517][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2310.724809][T18035] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2310.739402][ T9762] Bluetooth: hci2: sending frame failed (-49) 07:31:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000074) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:00 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:31:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x20000004) 07:31:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x8100}, 0x0) 07:31:00 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 21) 07:31:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00003580ffffffff"], 0x38}}, 0x0) [ 2312.754427][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2312.763862][T13286] Bluetooth: hci2: command tx timeout [ 2312.848230][T18061] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2312.886772][ T9762] Bluetooth: hci2: sending frame failed (-49) [ 2312.896525][T18062] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2312.907397][T18062] FAULT_INJECTION: forcing a failure. [ 2312.907397][T18062] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.916856][T18066] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2312.921717][T18062] CPU: 0 PID: 18062 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2312.938154][T18062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.948221][T18062] Call Trace: [ 2312.951505][T18062] [ 2312.954440][T18062] dump_stack_lvl+0xcd/0x134 [ 2312.959040][T18062] should_fail.cold+0x5/0xa [ 2312.963584][T18062] ? device_add+0x11a7/0x1ee0 [ 2312.968255][T18062] should_failslab+0x5/0x10 [ 2312.972754][T18062] kmem_cache_alloc_trace+0x55/0x2c0 [ 2312.978048][T18062] device_add+0x11a7/0x1ee0 [ 2312.982718][T18062] ? device_initialize+0x560/0x560 [ 2312.987832][T18062] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2312.994066][T18062] ? start_creating.part.0+0x18f/0x290 [ 2312.999562][T18062] hci_register_dev+0x2f3/0xbd0 [ 2313.004431][T18062] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2313.009461][T18062] tty_ioctl+0xc69/0x1670 [ 2313.013780][T18062] ? hci_uart_init_work+0x170/0x170 [ 2313.018992][T18062] ? tty_lookup_driver+0x550/0x550 [ 2313.024107][T18062] ? lock_downgrade+0x6e0/0x6e0 [ 2313.028972][T18062] ? __fget_files+0x23d/0x3e0 [ 2313.033650][T18062] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2313.039887][T18062] ? tty_lookup_driver+0x550/0x550 [ 2313.045171][T18062] __x64_sys_ioctl+0x193/0x200 [ 2313.049936][T18062] do_syscall_64+0x35/0xb0 [ 2313.054524][T18062] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2313.060411][T18062] RIP: 0033:0x7f0d3da40ae9 [ 2313.064819][T18062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.084440][T18062] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2313.092846][T18062] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2313.100808][T18062] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2313.108873][T18062] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.116837][T18062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.124972][T18062] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2313.132959][T18062] 07:31:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x8103}, 0x0) [ 2313.150321][T18062] Bluetooth: Can't register HCI device 07:31:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:00 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 22) 07:31:00 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:31:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000081ffffffff"], 0x38}}, 0x0) 07:31:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xf000}, 0x0) [ 2313.370620][T18081] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2313.418744][T18082] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2313.444878][T18082] FAULT_INJECTION: forcing a failure. [ 2313.444878][T18082] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.490116][T18082] CPU: 0 PID: 18082 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2313.499650][T18082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2313.510065][T18082] Call Trace: [ 2313.513341][T18082] [ 2313.516427][T18082] dump_stack_lvl+0xcd/0x134 [ 2313.521406][T18082] should_fail.cold+0x5/0xa [ 2313.525941][T18082] ? __kernfs_new_node+0xd4/0x8b0 [ 2313.531061][T18082] should_failslab+0x5/0x10 [ 2313.535682][T18082] kmem_cache_alloc+0x5e/0x3a0 [ 2313.540460][T18082] __kernfs_new_node+0xd4/0x8b0 [ 2313.545315][T18082] ? perf_trace_run_bpf_submit+0x11c/0x210 [ 2313.551255][T18082] ? kernfs_path_from_node+0x60/0x60 [ 2313.556611][T18082] ? perf_trace_lock+0x2ef/0x4d0 [ 2313.561596][T18082] ? check_path.constprop.0+0x50/0x50 [ 2313.567107][T18082] kernfs_create_dir_ns+0x9c/0x220 [ 2313.572233][T18082] sysfs_create_dir_ns+0x128/0x290 [ 2313.577711][T18082] ? sysfs_create_mount_point+0xb0/0xb0 [ 2313.583262][T18082] ? rwlock_bug.part.0+0x90/0x90 [ 2313.588230][T18082] ? class_dir_child_ns_type+0x9/0x60 [ 2313.593780][T18082] kobject_add_internal+0x2d2/0xa60 [ 2313.598989][T18082] kobject_add+0x150/0x1c0 [ 2313.603946][T18082] ? kset_create_and_add+0x1a0/0x1a0 [ 2313.609235][T18082] ? lockdep_init_map_type+0x2c3/0x7b0 [ 2313.614705][T18082] device_add+0x366/0x1ee0 [ 2313.619202][T18082] ? device_initialize+0x560/0x560 [ 2313.624335][T18082] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2313.630659][T18082] ? start_creating.part.0+0x18f/0x290 [ 2313.636303][T18082] hci_register_dev+0x2f3/0xbd0 [ 2313.641163][T18082] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2313.646213][T18082] tty_ioctl+0xc69/0x1670 [ 2313.650537][T18082] ? hci_uart_init_work+0x170/0x170 [ 2313.655741][T18082] ? tty_lookup_driver+0x550/0x550 [ 2313.660951][T18082] ? lock_downgrade+0x6e0/0x6e0 [ 2313.665903][T18082] ? __fget_files+0x23d/0x3e0 [ 2313.670600][T18082] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2313.677075][T18082] ? tty_lookup_driver+0x550/0x550 [ 2313.682214][T18082] __x64_sys_ioctl+0x193/0x200 [ 2313.687093][T18082] do_syscall_64+0x35/0xb0 [ 2313.691516][T18082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2313.697572][T18082] RIP: 0033:0x7f0d3da40ae9 [ 2313.701985][T18082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.721800][T18082] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2313.730250][T18082] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2313.738231][T18082] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2313.746292][T18082] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.754474][T18082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.762584][T18082] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2313.770584][T18082] [ 2313.776823][T18082] kobject_add_internal failed for hci7 (error: -12 parent: bluetooth) [ 2313.792228][T18082] Bluetooth: Can't register HCI device [ 2314.914187][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2314.914320][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x1000007a) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x7, 0xffe}, 0x0, 0x1000001, r2, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 07:31:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00004788ffffffff"], 0x38}}, 0x0) 07:31:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x34000}, 0x0) 07:31:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 23) [ 2315.539029][T18097] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2315.560029][T18099] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2315.581199][T18097] FAULT_INJECTION: forcing a failure. 07:31:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) [ 2315.581199][T18097] name failslab, interval 1, probability 0, space 0, times 0 07:31:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x400300}, 0x0) [ 2315.612719][T18101] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2315.647412][T18097] CPU: 0 PID: 18097 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2315.656477][T18097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2315.666613][T18097] Call Trace: [ 2315.669882][T18097] [ 2315.672803][T18097] dump_stack_lvl+0xcd/0x134 [ 2315.677397][T18097] should_fail.cold+0x5/0xa [ 2315.682096][T18097] ? __kernfs_new_node+0xd4/0x8b0 [ 2315.687133][T18097] should_failslab+0x5/0x10 [ 2315.691913][T18097] kmem_cache_alloc+0x5e/0x3a0 [ 2315.696705][T18097] __kernfs_new_node+0xd4/0x8b0 [ 2315.701569][T18097] ? perf_trace_run_bpf_submit+0x11c/0x210 [ 2315.707377][T18097] ? kernfs_path_from_node+0x60/0x60 [ 2315.712661][T18097] ? perf_trace_lock+0x2ef/0x4d0 [ 2315.717600][T18097] ? check_path.constprop.0+0x50/0x50 [ 2315.722979][T18097] kernfs_create_dir_ns+0x9c/0x220 [ 2315.728090][T18097] sysfs_create_dir_ns+0x128/0x290 [ 2315.733199][T18097] ? sysfs_create_mount_point+0xb0/0xb0 [ 2315.738758][T18097] ? rwlock_bug.part.0+0x90/0x90 [ 2315.743707][T18097] ? class_dir_child_ns_type+0x9/0x60 [ 2315.749081][T18097] kobject_add_internal+0x2d2/0xa60 [ 2315.754374][T18097] kobject_add+0x150/0x1c0 [ 2315.758791][T18097] ? kset_create_and_add+0x1a0/0x1a0 [ 2315.764077][T18097] ? lockdep_init_map_type+0x2c3/0x7b0 [ 2315.769551][T18097] device_add+0x366/0x1ee0 [ 2315.773960][T18097] ? device_initialize+0x560/0x560 [ 2315.779072][T18097] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2315.785308][T18097] ? start_creating.part.0+0x18f/0x290 [ 2315.790777][T18097] hci_register_dev+0x2f3/0xbd0 [ 2315.795641][T18097] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2315.800669][T18097] tty_ioctl+0xc69/0x1670 [ 2315.804990][T18097] ? hci_uart_init_work+0x170/0x170 [ 2315.810187][T18097] ? tty_lookup_driver+0x550/0x550 [ 2315.815300][T18097] ? lock_downgrade+0x6e0/0x6e0 [ 2315.820163][T18097] ? __fget_files+0x23d/0x3e0 [ 2315.824866][T18097] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2315.831109][T18097] ? tty_lookup_driver+0x550/0x550 [ 2315.836215][T18097] __x64_sys_ioctl+0x193/0x200 [ 2315.841003][T18097] do_syscall_64+0x35/0xb0 [ 2315.845523][T18097] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2315.851412][T18097] RIP: 0033:0x7f0d3da40ae9 [ 2315.855822][T18097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.875597][T18097] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2315.884003][T18097] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2315.892224][T18097] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2315.900189][T18097] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 07:31:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00004888ffffffff"], 0x38}}, 0x0) 07:31:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) [ 2315.908323][T18097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2315.916462][T18097] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2315.924446][T18097] [ 2315.974986][T11192] Bluetooth: hci7: Frame reassembly failed (-84) 07:31:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xf0ffff}, 0x0) [ 2316.155445][T18118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2316.169331][T18097] kobject_add_internal failed for hci2 (error: -12 parent: bluetooth) [ 2316.208441][T18097] Bluetooth: Can't register HCI device [ 2318.034567][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) 07:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000300) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x5, 0xf9, 0x2, 0x2, 0x0, 0x100000001, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x4, 0x634e, 0x9522, 0x4, 0x0, 0x3ff, 0x1ea, 0x0, 0x571a, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00006488ffffffff"], 0x38}}, 0x0) 07:31:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x1000000}, 0x0) 07:31:06 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:06 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 24) 07:31:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x2000000}, 0x0) [ 2318.599439][T18130] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2318.626458][T18131] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:31:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00006500000000001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}}, 0x0) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x90) bind$packet(r0, &(0x7f0000000080)={0x11, 0x5, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x11, 0x20, 0x1, 0x9, 0x0, 0x390669a0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x40}, 0xa500, 0x6, 0x4, 0x0, 0xffffffffffffff61, 0xb0b7, 0xffff, 0x0, 0x7, 0x0, 0xecc}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2318.655714][T18131] FAULT_INJECTION: forcing a failure. [ 2318.655714][T18131] name failslab, interval 1, probability 0, space 0, times 0 07:31:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000007) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2318.709576][T18136] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2318.727715][T18131] CPU: 0 PID: 18131 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2318.736504][T18131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2318.746574][T18131] Call Trace: [ 2318.749863][T18131] [ 2318.754286][T18131] dump_stack_lvl+0xcd/0x134 07:31:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x3000000}, 0x0) [ 2318.758899][T18131] should_fail.cold+0x5/0xa [ 2318.763429][T18131] ? __kernfs_new_node+0xd4/0x8b0 [ 2318.768469][T18131] should_failslab+0x5/0x10 [ 2318.773680][T18131] kmem_cache_alloc+0x5e/0x3a0 [ 2318.778478][T18131] __kernfs_new_node+0xd4/0x8b0 [ 2318.783353][T18131] ? kernfs_path_from_node+0x60/0x60 [ 2318.788737][T18131] ? check_path.constprop.0+0x50/0x50 [ 2318.794138][T18131] ? find_held_lock+0x2d/0x110 [ 2318.798967][T18131] ? sysfs_do_create_link_sd+0x82/0x140 [ 2318.804538][T18131] kernfs_new_node+0x93/0x120 [ 2318.809241][T18131] kernfs_create_link+0xcb/0x230 [ 2318.814471][T18131] sysfs_do_create_link_sd+0x90/0x140 [ 2318.819869][T18131] sysfs_create_link+0x5f/0xc0 [ 2318.826221][T18131] device_add+0x667/0x1ee0 [ 2318.830788][T18131] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2318.837046][T18131] ? start_creating.part.0+0x18f/0x290 [ 2318.842550][T18131] hci_register_dev+0x2f3/0xbd0 [ 2318.847437][T18131] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2318.852489][T18131] tty_ioctl+0xc69/0x1670 07:31:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x4000000}, 0x0) [ 2318.857095][T18131] ? hci_uart_init_work+0x170/0x170 [ 2318.862387][T18131] ? tty_lookup_driver+0x550/0x550 [ 2318.867617][T18131] ? lock_downgrade+0x6e0/0x6e0 [ 2318.872512][T18131] ? __fget_files+0x23d/0x3e0 [ 2318.877224][T18131] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2318.881348][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2318.883578][T18131] ? tty_lookup_driver+0x550/0x550 [ 2318.883614][T18131] __x64_sys_ioctl+0x193/0x200 [ 2318.899723][T18131] do_syscall_64+0x35/0xb0 [ 2318.904156][T18131] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2318.910154][T18131] RIP: 0033:0x7f0d3da40ae9 [ 2318.914583][T18131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.934295][T18131] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2318.942727][T18131] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2318.950708][T18131] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 07:31:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000689ffffffff"], 0x38}}, 0x0) [ 2318.958684][T18131] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.966650][T18131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.974794][T18131] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2318.982789][T18131] [ 2319.086596][T18131] Bluetooth: Can't register HCI device [ 2319.089735][T18152] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2319.123626][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2319.138572][ T8757] Bluetooth: hci2: Frame reassembly failed (-84) [ 2320.764385][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2320.773622][ T7618] Bluetooth: hci7: command tx timeout [ 2321.154235][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2321.155648][ T9762] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:31:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000500) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:09 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) close(r0) 07:31:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x5000000}, 0x0) 07:31:09 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 25) 07:31:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="000003c2ffffffff"], 0x38}}, 0x0) 07:31:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6000000}, 0x0) [ 2321.373756][T18174] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2321.386827][T18174] FAULT_INJECTION: forcing a failure. [ 2321.386827][T18174] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.417566][T18178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:09 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x0, 0x9, 0xffffffffffffffff, 0x9) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000002c0)=0x200000) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0x20, 0x6, @random="854ee70be31e"}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe6c, 0xfff1}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x2, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) [ 2321.456343][T18180] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2321.471267][T18174] CPU: 1 PID: 18174 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2321.480399][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.490641][T18174] Call Trace: [ 2321.493931][T18174] [ 2321.496867][T18174] dump_stack_lvl+0xcd/0x134 [ 2321.501466][T18174] should_fail.cold+0x5/0xa [ 2321.505978][T18174] should_failslab+0x5/0x10 [ 2321.510480][T18174] __kmalloc_track_caller+0x79/0x320 [ 2321.515764][T18174] ? kstrdup_const+0x53/0x80 [ 2321.520361][T18174] kstrdup+0x36/0x70 [ 2321.524570][T18174] kstrdup_const+0x53/0x80 [ 2321.529101][T18174] __kernfs_new_node+0x9d/0x8b0 [ 2321.533958][T18174] ? kernfs_path_from_node+0x60/0x60 [ 2321.539245][T18174] ? check_path.constprop.0+0x50/0x50 [ 2321.544727][T18174] ? find_held_lock+0x2d/0x110 [ 2321.549496][T18174] ? sysfs_do_create_link_sd+0x82/0x140 [ 2321.555050][T18174] kernfs_new_node+0x93/0x120 [ 2321.559911][T18174] kernfs_create_link+0xcb/0x230 [ 2321.564855][T18174] sysfs_do_create_link_sd+0x90/0x140 [ 2321.570431][T18174] sysfs_create_link+0x5f/0xc0 [ 2321.575373][T18174] device_add+0x789/0x1ee0 [ 2321.580007][T18174] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2321.586248][T18174] ? start_creating.part.0+0x18f/0x290 [ 2321.592132][T18174] hci_register_dev+0x2f3/0xbd0 [ 2321.596998][T18174] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2321.602034][T18174] tty_ioctl+0xc69/0x1670 [ 2321.606365][T18174] ? hci_uart_init_work+0x170/0x170 [ 2321.611568][T18174] ? tty_lookup_driver+0x550/0x550 [ 2321.616690][T18174] ? lock_downgrade+0x6e0/0x6e0 [ 2321.621564][T18174] ? __fget_files+0x23d/0x3e0 [ 2321.626250][T18174] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2321.632675][T18174] ? tty_lookup_driver+0x550/0x550 [ 2321.637788][T18174] __x64_sys_ioctl+0x193/0x200 [ 2321.642560][T18174] do_syscall_64+0x35/0xb0 [ 2321.647241][T18174] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2321.653139][T18174] RIP: 0033:0x7f0d3da40ae9 [ 2321.657588][T18174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.677889][T18174] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2321.686828][T18174] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2321.694803][T18174] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 07:31:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="000000f0ffffffff"], 0x38}}, 0x0) [ 2321.702804][T18174] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2321.710772][T18174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2321.718766][T18174] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2321.726757][T18174] [ 2321.811609][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2321.892519][T18174] Bluetooth: Can't register HCI device 07:31:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000005) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x7000000}, 0x0) 07:31:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000002ffffffff"], 0x38}}, 0x0) 07:31:09 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 26) [ 2322.023470][T18199] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2322.041427][T18200] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2322.050744][T18200] FAULT_INJECTION: forcing a failure. [ 2322.050744][T18200] name failslab, interval 1, probability 0, space 0, times 0 [ 2322.066195][T18200] CPU: 1 PID: 18200 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2322.074982][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2322.085049][T18200] Call Trace: [ 2322.088156][T18201] debugfs: Directory 'hci8' with parent 'bluetooth' already present! [ 2322.088382][T18200] [ 2322.088393][T18200] dump_stack_lvl+0xcd/0x134 [ 2322.088424][T18200] should_fail.cold+0x5/0xa [ 2322.104879][T11461] Bluetooth: hci8: sending frame failed (-49) [ 2322.109032][T18200] ? __kernfs_new_node+0xd4/0x8b0 [ 2322.120787][T18200] should_failslab+0x5/0x10 [ 2322.125838][T18200] kmem_cache_alloc+0x5e/0x3a0 [ 2322.130628][T18200] __kernfs_new_node+0xd4/0x8b0 [ 2322.135511][T18200] ? kernfs_path_from_node+0x60/0x60 [ 2322.140807][T18200] ? check_path.constprop.0+0x50/0x50 [ 2322.146256][T18200] ? find_held_lock+0x2d/0x110 [ 2322.151063][T18200] ? sysfs_do_create_link_sd+0x82/0x140 [ 2322.156725][T18200] kernfs_new_node+0x93/0x120 [ 2322.161442][T18200] kernfs_create_link+0xcb/0x230 [ 2322.167308][T18200] sysfs_do_create_link_sd+0x90/0x140 [ 2322.172910][T18200] sysfs_create_link+0x5f/0xc0 [ 2322.177682][T18200] device_add+0x789/0x1ee0 [ 2322.182113][T18200] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2322.188356][T18200] ? start_creating.part.0+0x18f/0x290 [ 2322.193861][T18200] hci_register_dev+0x2f3/0xbd0 [ 2322.198727][T18200] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2322.203856][T18200] tty_ioctl+0xc69/0x1670 [ 2322.208297][T18200] ? hci_uart_init_work+0x170/0x170 [ 2322.213507][T18200] ? tty_lookup_driver+0x550/0x550 [ 2322.218632][T18200] ? lock_downgrade+0x6e0/0x6e0 [ 2322.223505][T18200] ? __fget_files+0x23d/0x3e0 [ 2322.228190][T18200] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2322.234438][T18200] ? tty_lookup_driver+0x550/0x550 [ 2322.239577][T18200] __x64_sys_ioctl+0x193/0x200 [ 2322.244355][T18200] do_syscall_64+0x35/0xb0 [ 2322.248784][T18200] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2322.254685][T18200] RIP: 0033:0x7f0d3da40ae9 [ 2322.259105][T18200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2322.278734][T18200] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2322.287153][T18200] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2322.295208][T18200] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2322.303173][T18200] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.311140][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2322.319135][T18200] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2322.327272][T18200] [ 2322.369140][T18200] Bluetooth: Can't register HCI device [ 2323.794408][ T9105] Bluetooth: hci7: command 0xfc11 tx timeout [ 2323.794848][ T9762] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2324.124294][T10631] Bluetooth: hci8: Entering manufacturer mode failed (-110) 07:31:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000600) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:12 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x45, 0x20, 0x0, 0x700000000000, 0x4, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x7fff, 0x3}, 0x100, 0x5, 0x9c0, 0x3, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, r1, 0x2, r0, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = memfd_secret(0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x8000000}, 0x0) 07:31:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000003ffffffff"], 0x38}}, 0x0) 07:31:12 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 27) [ 2324.405478][T18222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2324.409809][T18221] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2324.436022][T18221] FAULT_INJECTION: forcing a failure. [ 2324.436022][T18221] name failslab, interval 1, probability 0, space 0, times 0 07:31:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x9000000}, 0x0) 07:31:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000004ffffffff"], 0x38}}, 0x0) [ 2324.450122][T18224] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2324.459479][T18221] CPU: 1 PID: 18221 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2324.468262][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2324.478328][T18221] Call Trace: [ 2324.481736][T18221] [ 2324.484691][T18221] dump_stack_lvl+0xcd/0x134 [ 2324.489398][T18221] should_fail.cold+0x5/0xa [ 2324.493930][T18221] ? __kernfs_new_node+0xd4/0x8b0 [ 2324.498983][T18221] should_failslab+0x5/0x10 [ 2324.503591][T18221] kmem_cache_alloc+0x5e/0x3a0 [ 2324.508656][T18221] __kernfs_new_node+0xd4/0x8b0 [ 2324.513528][T18221] ? check_path.constprop.0+0x50/0x50 [ 2324.518923][T18221] ? kernfs_path_from_node+0x60/0x60 [ 2324.524232][T18221] ? find_held_lock+0x2d/0x110 [ 2324.529027][T18221] ? kernfs_add_one+0x368/0x4c0 [ 2324.533893][T18221] ? lock_downgrade+0x6e0/0x6e0 [ 2324.538940][T18221] kernfs_create_dir_ns+0x9c/0x220 [ 2324.544076][T18221] internal_create_group+0x787/0xb10 [ 2324.549393][T18221] ? sysfs_remove_group+0x170/0x170 [ 2324.554617][T18221] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2324.560884][T18221] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2324.567837][T18221] ? kernfs_put+0x31/0x50 [ 2324.572317][T18221] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2324.578583][T18221] dpm_sysfs_add+0x7e/0x290 [ 2324.583109][T18221] device_add+0xac4/0x1ee0 [ 2324.587556][T18221] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2324.594189][T18221] ? start_creating.part.0+0x18f/0x290 [ 2324.599770][T18221] hci_register_dev+0x2f3/0xbd0 [ 2324.604661][T18221] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2324.609719][T18221] tty_ioctl+0xc69/0x1670 [ 2324.614071][T18221] ? hci_uart_init_work+0x170/0x170 [ 2324.619292][T18221] ? tty_lookup_driver+0x550/0x550 [ 2324.624424][T18221] ? lock_downgrade+0x6e0/0x6e0 [ 2324.631727][T18221] ? __fget_files+0x23d/0x3e0 [ 2324.636535][T18221] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2324.642787][T18221] ? tty_lookup_driver+0x550/0x550 [ 2324.648053][T18221] __x64_sys_ioctl+0x193/0x200 [ 2324.652827][T18221] do_syscall_64+0x35/0xb0 [ 2324.657245][T18221] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2324.663338][T18221] RIP: 0033:0x7f0d3da40ae9 [ 2324.667784][T18221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.687396][T18221] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2324.696180][T18221] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2324.704871][T18221] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2324.712847][T18221] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.720819][T18221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.728796][T18221] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2324.736801][T18221] 07:31:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000005ffffffff"], 0x38}}, 0x0) 07:31:12 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 1) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xa000000}, 0x0) [ 2324.802237][T18221] Bluetooth: Can't register HCI device 07:31:12 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 28) 07:31:12 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f00000000c0)=""/226, 0xe2}, {&(0x7f0000000440)=""/195, 0xc3}], 0x3) getsockname$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2324.895955][T18241] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2324.925109][T18243] FAULT_INJECTION: forcing a failure. [ 2324.925109][T18243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.939154][T18243] CPU: 1 PID: 18243 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2324.948043][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2324.958283][T18243] Call Trace: [ 2324.961570][T18243] [ 2324.964544][T18243] dump_stack_lvl+0xcd/0x134 [ 2324.969242][T18243] should_fail.cold+0x5/0xa [ 2324.973777][T18243] _copy_from_user+0x2c/0x180 [ 2324.978476][T18243] __copy_msghdr_from_user+0x91/0x4b0 [ 2324.983870][T18243] ? __ia32_sys_shutdown+0x70/0x70 [ 2324.989172][T18243] ? perf_trace_lock+0x2ef/0x4d0 [ 2324.994192][T18243] sendmsg_copy_msghdr+0xa1/0x160 [ 2324.999242][T18243] ? do_recvmmsg+0x6d0/0x6d0 [ 2324.999611][T18249] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2325.003842][T18243] ? perf_trace_lock+0x2ef/0x4d0 [ 2325.003873][T18243] ? lock_chain_count+0x20/0x20 [ 2325.003905][T18243] ? check_path.constprop.0+0x50/0x50 [ 2325.012247][T18249] FAULT_INJECTION: forcing a failure. [ 2325.012247][T18249] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.016902][T18243] ___sys_sendmsg+0xc6/0x170 [ 2325.016941][T18243] ? sendmsg_copy_msghdr+0x160/0x160 [ 2325.016990][T18243] ? __fget_files+0x21b/0x3e0 [ 2325.017017][T18243] ? lock_downgrade+0x6e0/0x6e0 [ 2325.017060][T18243] ? __fget_files+0x23d/0x3e0 [ 2325.017095][T18243] ? __fget_light+0xea/0x280 [ 2325.017123][T18243] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2325.017161][T18243] __sys_sendmsg+0xe5/0x1b0 [ 2325.017190][T18243] ? __sys_sendmsg_sock+0x30/0x30 [ 2325.017250][T18243] ? syscall_enter_from_user_mode+0x21/0x70 [ 2325.017286][T18243] do_syscall_64+0x35/0xb0 [ 2325.017315][T18243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2325.017341][T18243] RIP: 0033:0x7fedd5647ae9 [ 2325.017365][T18243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.017388][T18243] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2325.017415][T18243] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2325.017432][T18243] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2325.017448][T18243] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.017463][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2325.017478][T18243] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2325.017520][T18243] [ 2325.186611][T18249] CPU: 0 PID: 18249 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2325.195394][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2325.205457][T18249] Call Trace: [ 2325.208828][T18249] [ 2325.211754][T18249] dump_stack_lvl+0xcd/0x134 [ 2325.216356][T18249] should_fail.cold+0x5/0xa [ 2325.220864][T18249] ? __kernfs_new_node+0xd4/0x8b0 [ 2325.225928][T18249] should_failslab+0x5/0x10 [ 2325.230440][T18249] kmem_cache_alloc+0x5e/0x3a0 [ 2325.235204][T18249] __kernfs_new_node+0xd4/0x8b0 [ 2325.240059][T18249] ? kernfs_path_from_node+0x60/0x60 [ 2325.245355][T18249] ? perf_trace_lock+0x2ef/0x4d0 [ 2325.250311][T18249] ? check_path.constprop.0+0x50/0x50 [ 2325.255677][T18249] ? lock_release+0x720/0x720 [ 2325.260359][T18249] kernfs_new_node+0x93/0x120 [ 2325.265046][T18249] __kernfs_create_file+0x51/0x350 [ 2325.270187][T18249] sysfs_add_file_mode_ns+0x20f/0x3f0 [ 2325.275574][T18249] sysfs_merge_group+0x196/0x310 [ 2325.280610][T18249] ? sysfs_update_group+0x30/0x30 [ 2325.285728][T18249] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2325.292153][T18249] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2325.298415][T18249] ? kernfs_put+0x31/0x50 [ 2325.302747][T18249] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2325.309086][T18249] dpm_sysfs_add+0x241/0x290 [ 2325.313685][T18249] device_add+0xac4/0x1ee0 [ 2325.318195][T18249] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2325.324436][T18249] ? start_creating.part.0+0x18f/0x290 [ 2325.329918][T18249] hci_register_dev+0x2f3/0xbd0 [ 2325.334785][T18249] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2325.339820][T18249] tty_ioctl+0xc69/0x1670 [ 2325.344144][T18249] ? hci_uart_init_work+0x170/0x170 [ 2325.349383][T18249] ? tty_lookup_driver+0x550/0x550 [ 2325.354504][T18249] ? lock_downgrade+0x6e0/0x6e0 [ 2325.359372][T18249] ? __fget_files+0x23d/0x3e0 [ 2325.364053][T18249] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2325.370300][T18249] ? tty_lookup_driver+0x550/0x550 [ 2325.376106][T18249] __x64_sys_ioctl+0x193/0x200 [ 2325.380907][T18249] do_syscall_64+0x35/0xb0 [ 2325.385325][T18249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2325.391235][T18249] RIP: 0033:0x7f0d3da40ae9 [ 2325.395655][T18249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.415984][T18249] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2325.424402][T18249] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2325.432395][T18249] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2325.440391][T18249] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.448362][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2325.456593][T18249] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2325.464787][T18249] [ 2325.484326][T18249] Bluetooth: Can't register HCI device [ 2326.524411][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) 07:31:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xc000000}, 0x0) 07:31:14 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 2) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000006ffffffff"], 0x38}}, 0x0) 07:31:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) bind$packet(r1, &(0x7f0000000040)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000700) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) (fail_nth: 29) 07:31:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xe000000}, 0x0) [ 2327.127739][T18266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2327.156559][T18265] FAULT_INJECTION: forcing a failure. [ 2327.156559][T18265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2327.201009][T18269] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2327.213467][T18265] CPU: 0 PID: 18265 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2327.222258][T18265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.232329][T18265] Call Trace: [ 2327.235616][T18265] [ 2327.238563][T18265] dump_stack_lvl+0xcd/0x134 [ 2327.241076][T18269] FAULT_INJECTION: forcing a failure. [ 2327.241076][T18269] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.243174][T18265] should_fail.cold+0x5/0xa [ 2327.243213][T18265] _copy_from_user+0x2c/0x180 [ 2327.243252][T18265] iovec_from_user+0x246/0x3d0 [ 2327.269783][T18265] __import_iovec+0x65/0x5c0 [ 2327.274400][T18265] ? perf_trace_lock+0x2ef/0x4d0 [ 2327.279452][T18265] import_iovec+0x10c/0x150 [ 2327.283983][T18265] sendmsg_copy_msghdr+0x12d/0x160 [ 2327.289152][T18265] ? do_recvmmsg+0x6d0/0x6d0 [ 2327.293754][T18265] ? lock_chain_count+0x20/0x20 [ 2327.298625][T18265] ? check_path.constprop.0+0x50/0x50 [ 2327.304016][T18265] ___sys_sendmsg+0xc6/0x170 [ 2327.308627][T18265] ? sendmsg_copy_msghdr+0x160/0x160 [ 2327.313963][T18265] ? __fget_files+0x21b/0x3e0 [ 2327.318657][T18265] ? lock_downgrade+0x6e0/0x6e0 [ 2327.323552][T18265] ? __fget_files+0x23d/0x3e0 [ 2327.328259][T18265] ? __fget_light+0xea/0x280 [ 2327.332955][T18265] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2327.339211][T18265] __sys_sendmsg+0xe5/0x1b0 [ 2327.343724][T18265] ? __sys_sendmsg_sock+0x30/0x30 07:31:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xf000000}, 0x0) 07:31:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000007ffffffff"], 0x38}}, 0x0) [ 2327.348797][T18265] ? syscall_enter_from_user_mode+0x21/0x70 [ 2327.354716][T18265] do_syscall_64+0x35/0xb0 [ 2327.359237][T18265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2327.365139][T18265] RIP: 0033:0x7fedd5647ae9 [ 2327.369601][T18265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2327.376550][T18271] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2327.389479][T18265] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2327.389508][T18265] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2327.389524][T18265] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2327.389540][T18265] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.430389][T18265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2327.438369][T18265] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2327.446375][T18265] [ 2327.449398][T18269] CPU: 1 PID: 18269 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2327.458177][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.468246][T18269] Call Trace: [ 2327.471572][T18269] [ 2327.474553][T18269] dump_stack_lvl+0xcd/0x134 [ 2327.480022][T18269] should_fail.cold+0x5/0xa [ 2327.484534][T18269] ? __kernfs_new_node+0xd4/0x8b0 [ 2327.489606][T18269] should_failslab+0x5/0x10 [ 2327.494112][T18269] kmem_cache_alloc+0x5e/0x3a0 [ 2327.498912][T18269] __kernfs_new_node+0xd4/0x8b0 [ 2327.503767][T18269] ? kernfs_path_from_node+0x60/0x60 [ 2327.509082][T18269] ? perf_trace_lock+0x2ef/0x4d0 [ 2327.514060][T18269] ? check_path.constprop.0+0x50/0x50 [ 2327.519438][T18269] ? lock_release+0x720/0x720 [ 2327.524195][T18269] kernfs_new_node+0x93/0x120 [ 2327.528908][T18269] __kernfs_create_file+0x51/0x350 [ 2327.534029][T18269] sysfs_add_file_mode_ns+0x20f/0x3f0 [ 2327.539416][T18269] sysfs_merge_group+0x196/0x310 [ 2327.544536][T18269] ? sysfs_update_group+0x30/0x30 [ 2327.549561][T18269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2327.555805][T18269] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2327.562134][T18269] ? kernfs_put+0x31/0x50 [ 2327.566614][T18269] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2327.573037][T18269] dpm_sysfs_add+0x241/0x290 [ 2327.577631][T18269] device_add+0xac4/0x1ee0 [ 2327.582231][T18269] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2327.588473][T18269] ? start_creating.part.0+0x18f/0x290 [ 2327.593948][T18269] hci_register_dev+0x2f3/0xbd0 [ 2327.598819][T18269] hci_uart_tty_ioctl+0x8b9/0xc40 [ 2327.603855][T18269] tty_ioctl+0xc69/0x1670 [ 2327.608729][T18269] ? hci_uart_init_work+0x170/0x170 [ 2327.613935][T18269] ? tty_lookup_driver+0x550/0x550 [ 2327.619139][T18269] ? lock_downgrade+0x6e0/0x6e0 [ 2327.624036][T18269] ? __fget_files+0x23d/0x3e0 [ 2327.628728][T18269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2327.635002][T18269] ? tty_lookup_driver+0x550/0x550 [ 2327.640205][T18269] __x64_sys_ioctl+0x193/0x200 [ 2327.645002][T18269] do_syscall_64+0x35/0xb0 [ 2327.649428][T18269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2327.655362][T18269] RIP: 0033:0x7f0d3da40ae9 [ 2327.659984][T18269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2327.679703][T18269] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2327.688296][T18269] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 07:31:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2327.696297][T18269] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2327.704266][T18269] RBP: 00007f0d3afb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.712716][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2327.720707][T18269] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2327.728733][T18269] [ 2327.738559][ T9762] Bluetooth: hci7: sending frame failed (-49) 07:31:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x10000000}, 0x0) 07:31:15 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 3) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2327.853048][T18281] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2327.872125][T18284] FAULT_INJECTION: forcing a failure. [ 2327.872125][T18284] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.872910][T18269] Bluetooth: Can't register HCI device [ 2327.931083][T18284] CPU: 0 PID: 18284 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2327.939919][T18284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.949990][T18284] Call Trace: [ 2327.953360][T18284] [ 2327.956491][T18284] dump_stack_lvl+0xcd/0x134 [ 2327.961096][T18284] should_fail.cold+0x5/0xa [ 2327.965697][T18284] should_failslab+0x5/0x10 [ 2327.970231][T18284] kmem_cache_alloc_node+0x65/0x3f0 [ 2327.975430][T18284] ? __alloc_skb+0x215/0x340 [ 2327.980032][T18284] __alloc_skb+0x215/0x340 [ 2327.984447][T18284] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2327.990704][T18284] netlink_sendmsg+0x967/0xda0 [ 2327.995480][T18284] ? netlink_unicast+0x7d0/0x7d0 [ 2328.000441][T18284] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2328.006716][T18284] ? netlink_unicast+0x7d0/0x7d0 [ 2328.011660][T18284] sock_sendmsg+0xcf/0x120 [ 2328.016170][T18284] ____sys_sendmsg+0x6e8/0x810 [ 2328.020940][T18284] ? kernel_sendmsg+0x50/0x50 [ 2328.025615][T18284] ? do_recvmmsg+0x6d0/0x6d0 [ 2328.030209][T18284] ? lock_chain_count+0x20/0x20 [ 2328.035098][T18284] ? check_path.constprop.0+0x50/0x50 [ 2328.040488][T18284] ___sys_sendmsg+0xf3/0x170 [ 2328.045082][T18284] ? sendmsg_copy_msghdr+0x160/0x160 [ 2328.050380][T18284] ? __fget_files+0x21b/0x3e0 [ 2328.055061][T18284] ? lock_downgrade+0x6e0/0x6e0 [ 2328.059930][T18284] ? __fget_files+0x23d/0x3e0 [ 2328.064614][T18284] ? __fget_light+0xea/0x280 [ 2328.069210][T18284] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2328.075462][T18284] __sys_sendmsg+0xe5/0x1b0 [ 2328.079970][T18284] ? __sys_sendmsg_sock+0x30/0x30 [ 2328.085012][T18284] ? syscall_enter_from_user_mode+0x21/0x70 [ 2328.090913][T18284] do_syscall_64+0x35/0xb0 [ 2328.095333][T18284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2328.101228][T18284] RIP: 0033:0x7fedd5647ae9 [ 2328.105641][T18284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.125253][T18284] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2328.134021][T18284] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2328.141995][T18284] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2328.149967][T18284] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2328.157936][T18284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2328.166152][T18284] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2328.174172][T18284] 07:31:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000008ffffffff"], 0x38}}, 0x0) 07:31:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x1f000000}, 0x0) 07:31:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000009ffffffff"], 0x38}}, 0x0) 07:31:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 2328.307601][T18295] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2328.420624][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2328.439409][T18301] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2328.471422][T11192] Bluetooth: hci2: Frame reassembly failed (-84) [ 2328.481847][T11192] Bluetooth: hci2: Frame reassembly failed (-84) [ 2329.484284][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) 07:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10002000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:17 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 4) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x20000000}, 0x0) 07:31:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000000affffffff"], 0x38}}, 0x0) 07:31:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x43000000}, 0x0) [ 2330.053073][T18313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2330.075102][T18314] FAULT_INJECTION: forcing a failure. [ 2330.075102][T18314] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.123271][T18314] CPU: 0 PID: 18314 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2330.132546][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2330.142957][T18314] Call Trace: [ 2330.146255][T18314] [ 2330.149197][T18314] dump_stack_lvl+0xcd/0x134 [ 2330.153810][T18314] should_fail.cold+0x5/0xa [ 2330.158316][T18314] should_failslab+0x5/0x10 [ 2330.162835][T18314] __kmalloc_node_track_caller+0x7d/0x360 [ 2330.168550][T18314] ? netlink_sendmsg+0x967/0xda0 [ 2330.173490][T18314] __alloc_skb+0xde/0x340 [ 2330.177815][T18314] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2330.184083][T18314] netlink_sendmsg+0x967/0xda0 [ 2330.188876][T18314] ? netlink_unicast+0x7d0/0x7d0 [ 2330.193814][T18314] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2330.200052][T18314] ? netlink_unicast+0x7d0/0x7d0 [ 2330.204983][T18314] sock_sendmsg+0xcf/0x120 [ 2330.209397][T18314] ____sys_sendmsg+0x6e8/0x810 [ 2330.214180][T18314] ? kernel_sendmsg+0x50/0x50 [ 2330.218848][T18314] ? do_recvmmsg+0x6d0/0x6d0 [ 2330.223457][T18314] ? lock_chain_count+0x20/0x20 [ 2330.228308][T18314] ? check_path.constprop.0+0x50/0x50 [ 2330.233701][T18314] ___sys_sendmsg+0xf3/0x170 [ 2330.238295][T18314] ? sendmsg_copy_msghdr+0x160/0x160 [ 2330.243589][T18314] ? __fget_files+0x21b/0x3e0 [ 2330.248267][T18314] ? lock_downgrade+0x6e0/0x6e0 [ 2330.253306][T18314] ? __fget_files+0x23d/0x3e0 [ 2330.258356][T18314] ? __fget_light+0xea/0x280 [ 2330.263029][T18314] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2330.269271][T18314] __sys_sendmsg+0xe5/0x1b0 [ 2330.273772][T18314] ? __sys_sendmsg_sock+0x30/0x30 [ 2330.278817][T18314] ? syscall_enter_from_user_mode+0x21/0x70 [ 2330.284809][T18314] do_syscall_64+0x35/0xb0 [ 2330.289225][T18314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2330.295138][T18314] RIP: 0033:0x7fedd5647ae9 [ 2330.299562][T18314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:31:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000000cffffffff"], 0x38}}, 0x0) [ 2330.319444][T18314] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2330.327862][T18314] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2330.335985][T18314] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2330.343946][T18314] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.352057][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.360379][T18314] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2330.368379][T18314] 07:31:18 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xb2, 0x1, 0x9, 0x9, 0x0, 0x8, 0x1000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x6, @perf_bp={&(0x7f0000000100), 0x3}, 0x2, 0x44879b90, 0x0, 0x2, 0x8344, 0x7, 0x8001, 0x0, 0x10001, 0x0, 0x1d}, 0xffffffffffffffff, 0x8, r0, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="008bf050ef2fb52be80012800b000100690646000f00020000"], 0x3c}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3, 0x9, 0x5, 0xe0, 0x0, 0x0, 0x504, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000280), 0xe}, 0x0, 0x3, 0x80, 0x1, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0xff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x3, 0x5c, 0x20, 0x0, 0xcd, 0x3309, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x6002, 0x8, 0x3, 0x7, 0x401, 0x6, 0xff, 0x0, 0x8001, 0x0, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xb) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x46, 0x6, 0x0, 0xab, 0x11080, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9e, 0x4, @perf_bp={&(0x7f0000000040)}, 0x200, 0x10, 0xb, 0x5, 0xc000000000000000, 0x0, 0x3, 0x0, 0xa91, 0x0, 0x70}) [ 2330.396098][T18319] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2330.416851][ T9762] Bluetooth: hci7: sending frame failed (-49) 07:31:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x48000000}, 0x0) [ 2330.468273][T18329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:18 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 5) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2330.524324][ T9105] Bluetooth: hci2: command 0xfc11 tx timeout [ 2330.530482][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:31:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000000effffffff"], 0x38}}, 0x0) [ 2330.591974][T18339] FAULT_INJECTION: forcing a failure. [ 2330.591974][T18339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2330.607942][T18339] CPU: 0 PID: 18339 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2330.616809][T18339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2330.626871][T18339] Call Trace: [ 2330.630152][T18339] [ 2330.633088][T18339] dump_stack_lvl+0xcd/0x134 [ 2330.635644][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2330.637694][T18339] should_fail.cold+0x5/0xa [ 2330.637732][T18339] _copy_from_iter+0x389/0x1320 [ 2330.656459][T18339] ? hash_and_copy_to_iter+0x200/0x200 [ 2330.661930][T18339] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2330.667485][T18339] ? memset+0x20/0x40 [ 2330.671481][T18339] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2330.677737][T18339] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2330.684005][T18339] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2330.690242][T18339] ? __phys_addr+0xc4/0x140 [ 2330.694745][T18339] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2330.701006][T18339] ? __phys_addr_symbol+0x2c/0x70 [ 2330.706318][T18339] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2330.712040][T18339] ? __check_object_size+0x16e/0x3f0 [ 2330.717328][T18339] netlink_sendmsg+0x7d5/0xda0 [ 2330.722100][T18339] ? netlink_unicast+0x7d0/0x7d0 [ 2330.727129][T18339] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2330.733371][T18339] ? netlink_unicast+0x7d0/0x7d0 [ 2330.738757][T18339] sock_sendmsg+0xcf/0x120 [ 2330.743180][T18339] ____sys_sendmsg+0x6e8/0x810 [ 2330.748196][T18339] ? kernel_sendmsg+0x50/0x50 [ 2330.752879][T18339] ? do_recvmmsg+0x6d0/0x6d0 [ 2330.757494][T18339] ? lock_chain_count+0x20/0x20 [ 2330.762346][T18339] ? check_path.constprop.0+0x50/0x50 [ 2330.767808][T18339] ___sys_sendmsg+0xf3/0x170 [ 2330.772419][T18339] ? sendmsg_copy_msghdr+0x160/0x160 [ 2330.777880][T18339] ? __fget_files+0x21b/0x3e0 [ 2330.782557][T18339] ? lock_downgrade+0x6e0/0x6e0 [ 2330.787420][T18339] ? __fget_files+0x23d/0x3e0 [ 2330.792103][T18339] ? __fget_light+0xea/0x280 [ 2330.796894][T18339] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2330.803138][T18339] __sys_sendmsg+0xe5/0x1b0 [ 2330.807638][T18339] ? __sys_sendmsg_sock+0x30/0x30 [ 2330.812678][T18339] ? syscall_enter_from_user_mode+0x21/0x70 [ 2330.818680][T18339] do_syscall_64+0x35/0xb0 [ 2330.823120][T18339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2330.829035][T18339] RIP: 0033:0x7fedd5647ae9 [ 2330.833464][T18339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.853065][T18339] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2330.861477][T18339] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2330.869458][T18339] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2330.877527][T18339] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 07:31:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x2, 0x9) [ 2330.885579][T18339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.893633][T18339] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2330.901705][T18339] [ 2330.935975][T18341] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2330.990152][T18347] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2332.444413][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2332.453615][ T9105] Bluetooth: hci7: command tx timeout 07:31:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10003f00) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x4c000000}, 0x0) 07:31:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x10, 0x9) 07:31:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000000fffffffff"], 0x38}}, 0x0) 07:31:20 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 6) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x60000000}, 0x0) [ 2333.040312][T18360] FAULT_INJECTION: forcing a failure. [ 2333.040312][T18360] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.081862][T18360] CPU: 1 PID: 18360 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2333.090678][T18360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2333.100853][T18360] Call Trace: [ 2333.104211][T18360] [ 2333.107224][T18360] dump_stack_lvl+0xcd/0x134 [ 2333.111818][T18360] should_fail.cold+0x5/0xa [ 2333.116324][T18360] ? skb_clone+0x170/0x3c0 [ 2333.121369][T18360] should_failslab+0x5/0x10 [ 2333.125869][T18360] kmem_cache_alloc+0x5e/0x3a0 [ 2333.130635][T18360] skb_clone+0x170/0x3c0 [ 2333.134878][T18360] netlink_deliver_tap+0xa63/0xc30 [ 2333.139997][T18360] netlink_unicast+0x5e5/0x7d0 [ 2333.144761][T18360] ? netlink_attachskb+0x880/0x880 [ 2333.149871][T18360] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2333.156114][T18360] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2333.162369][T18360] ? __phys_addr_symbol+0x2c/0x70 [ 2333.167385][T18360] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2333.173098][T18360] ? __check_object_size+0x16e/0x3f0 [ 2333.178385][T18360] netlink_sendmsg+0x86d/0xda0 [ 2333.183150][T18360] ? netlink_unicast+0x7d0/0x7d0 [ 2333.188097][T18360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2333.194355][T18360] ? netlink_unicast+0x7d0/0x7d0 [ 2333.199303][T18360] sock_sendmsg+0xcf/0x120 [ 2333.203718][T18360] ____sys_sendmsg+0x6e8/0x810 [ 2333.208480][T18360] ? kernel_sendmsg+0x50/0x50 [ 2333.213167][T18360] ? do_recvmmsg+0x6d0/0x6d0 [ 2333.217759][T18360] ? lock_chain_count+0x20/0x20 [ 2333.222894][T18360] ? check_path.constprop.0+0x50/0x50 [ 2333.228287][T18360] ___sys_sendmsg+0xf3/0x170 [ 2333.232874][T18360] ? sendmsg_copy_msghdr+0x160/0x160 [ 2333.238158][T18360] ? __fget_files+0x21b/0x3e0 [ 2333.242829][T18360] ? lock_downgrade+0x6e0/0x6e0 [ 2333.247689][T18360] ? __fget_files+0x23d/0x3e0 [ 2333.252369][T18360] ? __fget_light+0xea/0x280 [ 2333.256971][T18360] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2333.263213][T18360] __sys_sendmsg+0xe5/0x1b0 [ 2333.267740][T18360] ? __sys_sendmsg_sock+0x30/0x30 [ 2333.272797][T18360] ? syscall_enter_from_user_mode+0x21/0x70 [ 2333.278696][T18360] do_syscall_64+0x35/0xb0 [ 2333.283109][T18360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2333.288997][T18360] RIP: 0033:0x7fedd5647ae9 [ 2333.293404][T18360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2333.313027][T18360] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2333.321451][T18360] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2333.329518][T18360] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2333.337498][T18360] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2333.345562][T18360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2333.353612][T18360] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2333.361597][T18360] 07:31:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x65580000}, 0x0) [ 2333.376723][T18362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2333.391225][T18364] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2333.408573][T11461] Bluetooth: hci2: sending frame failed (-49) 07:31:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:21 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 7) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4c00, 0x9) 07:31:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000010ffffffff"], 0x38}}, 0x0) [ 2333.631800][T18379] FAULT_INJECTION: forcing a failure. [ 2333.631800][T18379] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.644518][T18379] CPU: 1 PID: 18379 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2333.653468][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2333.663527][T18379] Call Trace: [ 2333.666810][T18379] [ 2333.669743][T18379] dump_stack_lvl+0xcd/0x134 [ 2333.674350][T18379] should_fail.cold+0x5/0xa [ 2333.678875][T18379] ? skb_clone+0x170/0x3c0 [ 2333.681805][T18385] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2333.683304][T18379] should_failslab+0x5/0x10 [ 2333.683333][T18379] kmem_cache_alloc+0x5e/0x3a0 [ 2333.683368][T18379] skb_clone+0x170/0x3c0 [ 2333.706391][T18379] dev_queue_xmit_nit+0x38c/0xa90 [ 2333.711435][T18379] ? validate_xmit_xfrm+0x498/0x1050 [ 2333.716750][T18379] dev_hard_start_xmit+0xad/0x920 [ 2333.721829][T18379] __dev_queue_xmit+0x299a/0x3630 [ 2333.726876][T18379] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2333.733167][T18379] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2333.738666][T18379] ? memcpy+0x39/0x60 [ 2333.743582][T18379] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2333.749897][T18379] ? memcpy+0x39/0x60 [ 2333.753954][T18379] ? __skb_clone+0x597/0x780 [ 2333.758544][T18379] netlink_deliver_tap+0x9cb/0xc30 [ 2333.763651][T18379] netlink_unicast+0x5e5/0x7d0 [ 2333.768408][T18379] ? netlink_attachskb+0x880/0x880 [ 2333.773589][T18379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2333.779823][T18379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2333.786054][T18379] ? __phys_addr_symbol+0x2c/0x70 [ 2333.791084][T18379] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2333.796791][T18379] ? __check_object_size+0x16e/0x3f0 [ 2333.802080][T18379] netlink_sendmsg+0x86d/0xda0 [ 2333.806853][T18379] ? netlink_unicast+0x7d0/0x7d0 [ 2333.811783][T18379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2333.818021][T18379] ? netlink_unicast+0x7d0/0x7d0 [ 2333.823125][T18379] sock_sendmsg+0xcf/0x120 [ 2333.827558][T18379] ____sys_sendmsg+0x6e8/0x810 [ 2333.832316][T18379] ? kernel_sendmsg+0x50/0x50 [ 2333.837076][T18379] ? do_recvmmsg+0x6d0/0x6d0 [ 2333.841677][T18379] ? lock_chain_count+0x20/0x20 [ 2333.846533][T18379] ? check_path.constprop.0+0x50/0x50 [ 2333.851898][T18379] ___sys_sendmsg+0xf3/0x170 [ 2333.856480][T18379] ? sendmsg_copy_msghdr+0x160/0x160 [ 2333.861758][T18379] ? __fget_files+0x21b/0x3e0 [ 2333.866442][T18379] ? lock_downgrade+0x6e0/0x6e0 [ 2333.871397][T18379] ? __fget_files+0x23d/0x3e0 [ 2333.876367][T18379] ? __fget_light+0xea/0x280 [ 2333.881036][T18379] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2333.887362][T18379] __sys_sendmsg+0xe5/0x1b0 [ 2333.891861][T18379] ? __sys_sendmsg_sock+0x30/0x30 [ 2333.896911][T18379] ? syscall_enter_from_user_mode+0x21/0x70 [ 2333.902825][T18379] do_syscall_64+0x35/0xb0 [ 2333.907247][T18379] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2333.913311][T18379] RIP: 0033:0x7fedd5647ae9 [ 2333.917714][T18379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2333.937313][T18379] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2333.945750][T18379] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2333.953707][T18379] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2333.961753][T18379] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2333.969728][T18379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2333.977683][T18379] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2333.985655][T18379] [ 2335.474273][ T9105] Bluetooth: hci2: command 0xfc11 tx timeout [ 2335.474326][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:31:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000048ffffffff"], 0x38}}, 0x0) 07:31:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x68000000}, 0x0) 07:31:23 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4c01, 0x9) 07:31:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) 07:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10004000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:23 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 8) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2336.061092][T18396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2336.085974][T18399] FAULT_INJECTION: forcing a failure. [ 2336.085974][T18399] name failslab, interval 1, probability 0, space 0, times 0 07:31:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6c000000}, 0x0) 07:31:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000004cffffffff"], 0x38}}, 0x0) [ 2336.127808][T18400] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2336.167476][T18399] CPU: 1 PID: 18399 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2336.176456][T18399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2336.186514][T18399] Call Trace: [ 2336.189794][T18399] [ 2336.192726][T18399] dump_stack_lvl+0xcd/0x134 [ 2336.197332][T18399] should_fail.cold+0x5/0xa [ 2336.201845][T18399] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 2336.209158][T18399] should_failslab+0x5/0x10 [ 2336.213842][T18399] __kmalloc+0x72/0x340 [ 2336.218179][T18399] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 2336.225298][T18399] genl_family_rcv_msg_doit+0xda/0x320 [ 2336.230930][T18399] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2336.238294][T18399] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2336.244532][T18399] ? apparmor_capable+0x1d8/0x460 [ 2336.249571][T18399] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2336.255812][T18399] ? security_capable+0x8f/0xc0 [ 2336.260663][T18399] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2336.267063][T18399] ? ns_capable+0xd9/0x100 [ 2336.271481][T18399] genl_rcv_msg+0x328/0x580 [ 2336.275989][T18399] ? genl_get_cmd+0x480/0x480 [ 2336.280664][T18399] ? features_reply_size+0x140/0x140 [ 2336.286040][T18399] ? lock_release+0x720/0x720 [ 2336.290712][T18399] ? check_path.constprop.0+0x50/0x50 [ 2336.296089][T18399] netlink_rcv_skb+0x153/0x420 [ 2336.301111][T18399] ? genl_get_cmd+0x480/0x480 [ 2336.305781][T18399] ? netlink_ack+0xa60/0xa60 [ 2336.310375][T18399] ? netlink_deliver_tap+0x1b1/0xc30 [ 2336.315658][T18399] genl_rcv+0x24/0x40 [ 2336.319630][T18399] netlink_unicast+0x533/0x7d0 [ 2336.324407][T18399] ? netlink_attachskb+0x880/0x880 [ 2336.329509][T18399] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2336.336324][T18399] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2336.342571][T18399] ? __phys_addr_symbol+0x2c/0x70 [ 2336.347589][T18399] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2336.353387][T18399] ? __check_object_size+0x16e/0x3f0 [ 2336.358675][T18399] netlink_sendmsg+0x86d/0xda0 [ 2336.363441][T18399] ? netlink_unicast+0x7d0/0x7d0 [ 2336.368465][T18399] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2336.374892][T18399] ? netlink_unicast+0x7d0/0x7d0 [ 2336.379835][T18399] sock_sendmsg+0xcf/0x120 [ 2336.384252][T18399] ____sys_sendmsg+0x6e8/0x810 [ 2336.389202][T18399] ? kernel_sendmsg+0x50/0x50 [ 2336.393867][T18399] ? do_recvmmsg+0x6d0/0x6d0 [ 2336.398464][T18399] ? lock_chain_count+0x20/0x20 [ 2336.403342][T18399] ? check_path.constprop.0+0x50/0x50 [ 2336.408715][T18399] ___sys_sendmsg+0xf3/0x170 [ 2336.413312][T18399] ? sendmsg_copy_msghdr+0x160/0x160 [ 2336.418597][T18399] ? __fget_files+0x21b/0x3e0 [ 2336.423292][T18399] ? lock_downgrade+0x6e0/0x6e0 [ 2336.428158][T18399] ? __fget_files+0x23d/0x3e0 [ 2336.432837][T18399] ? __fget_light+0xea/0x280 [ 2336.437465][T18399] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2336.443707][T18399] __sys_sendmsg+0xe5/0x1b0 [ 2336.448225][T18399] ? __sys_sendmsg_sock+0x30/0x30 [ 2336.453536][T18399] ? syscall_enter_from_user_mode+0x21/0x70 [ 2336.459517][T18399] do_syscall_64+0x35/0xb0 [ 2336.463946][T18399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2336.469920][T18399] RIP: 0033:0x7fedd5647ae9 [ 2336.474328][T18399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2336.493928][T18399] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2336.502335][T18399] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2336.510294][T18399] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2336.518253][T18399] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2336.526213][T18399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2336.534263][T18399] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2336.542245][T18399] [ 2336.556145][T18400] CPU: 1 PID: 18400 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2336.565009][T18400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2336.575063][T18400] Call Trace: [ 2336.578340][T18400] [ 2336.581272][T18400] dump_stack_lvl+0xcd/0x134 [ 2336.586047][T18400] warn_alloc.cold+0x87/0x17a [ 2336.590729][T18400] ? zone_watermark_ok_safe+0x290/0x290 [ 2336.596469][T18400] ? __kmalloc_node+0x62/0x390 [ 2336.601261][T18400] ? __vmalloc_node_range+0x574/0xab0 [ 2336.606845][T18400] __vmalloc_node_range+0x883/0xab0 [ 2336.612229][T18400] ? vfree_atomic+0xe0/0xe0 [ 2336.616740][T18400] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2336.622741][T18400] ? __ldsem_down_read_nested+0x850/0x850 [ 2336.628570][T18400] ? __wake_up_common+0x650/0x650 [ 2336.633605][T18400] ? n_tty_open+0x16/0x170 [ 2336.638029][T18400] vzalloc+0x67/0x80 [ 2336.641930][T18400] ? n_tty_open+0x16/0x170 [ 2336.646347][T18400] n_tty_open+0x16/0x170 [ 2336.650593][T18400] ? n_tty_set_termios+0x1010/0x1010 [ 2336.655887][T18400] tty_ldisc_open+0x9b/0x110 [ 2336.660670][T18400] tty_ldisc_setup+0x43/0x100 [ 2336.665355][T18400] tty_init_dev.part.0+0x1f4/0x610 [ 2336.670476][T18400] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2336.676031][T18400] tty_init_dev+0x5b/0x80 07:31:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x74000000}, 0x0) 07:31:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x7a000000}, 0x0) [ 2336.680365][T18400] ptmx_open+0x112/0x360 [ 2336.684617][T18400] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2336.690084][T18400] chrdev_open+0x266/0x770 [ 2336.694508][T18400] ? cdev_device_add+0x210/0x210 [ 2336.699455][T18400] ? fsnotify_perm.part.0+0x22d/0x620 [ 2336.704842][T18400] do_dentry_open+0x4c8/0x1250 [ 2336.709614][T18400] ? cdev_device_add+0x210/0x210 [ 2336.714655][T18400] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2336.721165][T18400] ? may_open+0x1f6/0x420 [ 2336.725508][T18400] path_openat+0x1cad/0x2750 07:31:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x81000000}, 0x0) [ 2336.730121][T18400] ? path_lookupat+0x860/0x860 [ 2336.734891][T18400] ? perf_trace_lock+0x2ef/0x4d0 [ 2336.739840][T18400] ? check_path.constprop.0+0x50/0x50 [ 2336.745224][T18400] do_filp_open+0x1aa/0x400 [ 2336.749741][T18400] ? may_open_dev+0xf0/0xf0 [ 2336.754269][T18400] ? rwlock_bug.part.0+0x90/0x90 [ 2336.759305][T18400] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2336.765644][T18400] ? _find_next_bit+0x1e3/0x260 [ 2336.770508][T18400] ? _raw_spin_unlock+0x24/0x40 [ 2336.775363][T18400] ? alloc_fd+0x2f0/0x670 07:31:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x81030000}, 0x0) [ 2336.779712][T18400] do_sys_openat2+0x16d/0x4d0 [ 2336.784401][T18400] ? build_open_flags+0x6f0/0x6f0 [ 2336.789435][T18400] ? __context_tracking_exit+0xb8/0xe0 [ 2336.795176][T18400] ? lock_downgrade+0x6e0/0x6e0 [ 2336.800039][T18400] __x64_sys_openat+0x13f/0x1f0 [ 2336.804984][T18400] ? __ia32_sys_open+0x1c0/0x1c0 [ 2336.810149][T18400] ? syscall_enter_from_user_mode+0x21/0x70 [ 2336.816056][T18400] do_syscall_64+0x35/0xb0 [ 2336.820569][T18400] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2336.826519][T18400] RIP: 0033:0x7f0d3da40ae9 [ 2336.830938][T18400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2336.850924][T18400] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2336.859331][T18400] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2336.867641][T18400] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c 07:31:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 2336.875600][T18400] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2336.883555][T18400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2336.891533][T18400] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2336.899600][T18400] 07:31:24 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x50, 0x28, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x10, 0x6}, {0xfff2, 0xb8fdbcd25976348c}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x74, 0x1}}]}, 0x50}}, 0x20000040) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r2 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x184, &(0x7f0000000000), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0xf1}, 0x0) r6 = syz_mount_image$sysv(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000440)="a3792462878102f42ea952fc2ddafa118da8b25611e0db891c011ace36c133219b455c2147539103d82a26a046da79130d0f59799785905809726b35f2852e35d416bf3acdf2aa577f0c44a71e5fd1356e00066706aabbcdd1be4e6148236a7dca318dda340cfdc7904e4b12f17936c9bff925eba13cbdeea798f7b0506e39584c6ddd130b26259ef18f54e1ab12b5edad5f7f73a9abd4398214fff90f43c17729f2b66a80f75c5e442d6ae068b38f6d060848fca65523647c846b34071f5bb80ff53e6c", 0xc4, 0x6}, {&(0x7f0000000300)="4b14694768dace605efc3c6d2ccbd3f03ba4c2e8918ecd89cd18234f336c5b6efccea219b1654492fdad63aca4b968ffe59fe87130587467d7f468557111cc418282cc85", 0x44, 0x5}, {&(0x7f0000000540)="bd682cd7e25f997b7c176e7cd338e753a0787c347b8f659a06bcf78325076ea8843a230ab8b7902dda8c0c59cc8c1288c1f3db24ec668fcf66aa12c8604dbdf2d775fba10b0304a62d1bcae1d0a537dce8401e91eb4bc4835741c5ce815804", 0x5f, 0x8}], 0x10, &(0x7f0000000640)={[{'[@/$'}, {'ethtool\x00'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fq_codel\x00'}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ethtool\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'drr\x00'}}, {@uid_lt}, {@measure}]}) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = dup3(r8, r7, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x8, 0xf, 0x81, 0x7f, 0x0, 0x40, 0x10004, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4faaca13951e462f, @perf_config_ext={0x0, 0xab1}, 0xf0e613e324523095, 0x8, 0x7, 0x7, 0x1f, 0x10000, 0x7ff, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r9, 0x1) recvfrom$unix(r9, &(0x7f0000000840)=""/128, 0x80, 0x20, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_io_uring_submit(r3, 0x0, &(0x7f0000000800)=@IORING_OP_STATX={0x15, 0x0, 0x0, r6, &(0x7f0000000700), &(0x7f0000000380)='./file0\x00', 0x400, 0x6000, 0x1}, 0x7ff) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2336.979481][T18400] Mem-Info: [ 2337.005522][T18400] active_anon:291 inactive_anon:155164 isolated_anon:0 [ 2337.005522][T18400] active_file:5874 inactive_file:104766 isolated_file:0 [ 2337.005522][T18400] unevictable:768 dirty:118 writeback:0 [ 2337.005522][T18400] slab_reclaimable:23937 slab_unreclaimable:118883 [ 2337.005522][T18400] mapped:63283 shmem:9687 pagetables:1789 bounce:0 [ 2337.005522][T18400] kernel_misc_reclaimable:0 [ 2337.005522][T18400] free:1154054 free_pcp:10633 free_cma:0 [ 2337.055657][T18400] Node 0 active_anon:1164kB inactive_anon:621752kB active_file:23380kB inactive_file:419064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253132kB dirty:468kB writeback:0kB shmem:36300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 276480kB writeback_tmp:0kB kernel_stack:10096kB pagetables:7152kB all_unreclaimable? no [ 2337.088322][T18400] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2337.119829][T18400] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2337.121043][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2337.160894][T18400] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 2337.168423][T18400] Node 0 DMA32 free:649400kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1164kB inactive_anon:621664kB active_file:23380kB inactive_file:419100kB unevictable:1536kB writepending:556kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:39720kB local_pcp:21816kB free_cma:0kB [ 2337.202019][T18400] lowmem_reserve[]: 0 0 0 0 0 [ 2337.207360][T18400] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2337.227174][T18425] VFS: unable to find oldfs superblock on device loop5 [ 2337.253267][T18400] lowmem_reserve[]: 0 0 0 0 0 [ 2337.258323][T18400] Node 1 Normal free:3952192kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2337.288582][T18400] lowmem_reserve[]: 0 0 0 0 0 [ 2337.293404][T18400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2337.306814][T18400] Node 0 DMA32: 476*4kB (UM) 397*8kB (UME) 432*16kB (UM) 218*32kB (UME) 176*64kB (UM) 44*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 0*2048kB 148*4096kB (M) = 649496kB [ 2337.328497][T18400] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2337.340013][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2337.358104][T18400] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 158*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952192kB [ 2337.364904][T18427] VFS: unable to find oldfs superblock on device loop5 [ 2337.377254][T18400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2337.393466][T18400] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2337.410042][T18400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2337.420418][T18400] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2337.435706][T18400] 57273 total pagecache pages [ 2337.440583][T18400] 0 pages in swap cache [ 2337.448373][T18400] Swap cache stats: add 0, delete 0, find 0/0 07:31:25 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x9) 07:31:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x9effffff}, 0x0) [ 2337.457019][T18400] Free swap = 0kB [ 2337.471799][T18400] Total swap = 0kB [ 2337.481105][T18400] 2097051 pages RAM [ 2337.485396][T18400] 0 pages HighMem/MovableOnly [ 2337.490230][T18400] 384517 pages reserved [ 2337.494875][T18400] 0 pages cma reserved [ 2337.499161][T18400] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2338.014396][T18408] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2338.038833][T11461] Bluetooth: hci2: sending frame failed (-49) 07:31:27 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 9) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10004800) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000060ffffffff"], 0x38}}, 0x0) 07:31:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xf0ffffff}, 0x0) 07:31:27 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x9) [ 2340.114355][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2340.114479][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2340.198910][T18454] FAULT_INJECTION: forcing a failure. [ 2340.198910][T18454] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.212059][T18454] CPU: 1 PID: 18454 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2340.220831][T18454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2340.230890][T18454] Call Trace: [ 2340.234172][T18454] [ 2340.237108][T18454] dump_stack_lvl+0xcd/0x134 [ 2340.241713][T18454] should_fail.cold+0x5/0xa [ 2340.246247][T18454] should_failslab+0x5/0x10 [ 2340.250769][T18454] kmem_cache_alloc_node+0x65/0x3f0 [ 2340.255978][T18454] ? __alloc_skb+0x215/0x340 [ 2340.260609][T18454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2340.266963][T18454] __alloc_skb+0x215/0x340 [ 2340.271393][T18454] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2340.277659][T18454] netlink_ack+0x1f0/0xa60 [ 2340.282092][T18454] ? features_reply_size+0x140/0x140 [ 2340.287389][T18454] ? netlink_sendmsg+0xda0/0xda0 [ 2340.292427][T18454] ? lock_release+0x720/0x720 [ 2340.297118][T18454] ? check_path.constprop.0+0x50/0x50 [ 2340.302512][T18454] netlink_rcv_skb+0x33d/0x420 [ 2340.307532][T18454] ? genl_get_cmd+0x480/0x480 [ 2340.312256][T18454] ? netlink_ack+0xa60/0xa60 [ 2340.316866][T18454] ? netlink_deliver_tap+0x1b1/0xc30 [ 2340.322177][T18454] genl_rcv+0x24/0x40 [ 2340.326173][T18454] netlink_unicast+0x533/0x7d0 [ 2340.330962][T18454] ? netlink_attachskb+0x880/0x880 [ 2340.336088][T18454] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2340.342372][T18454] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2340.348799][T18454] ? __phys_addr_symbol+0x2c/0x70 [ 2340.353834][T18454] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2340.359561][T18454] ? __check_object_size+0x16e/0x3f0 [ 2340.365037][T18454] netlink_sendmsg+0x86d/0xda0 [ 2340.369828][T18454] ? netlink_unicast+0x7d0/0x7d0 [ 2340.374793][T18454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2340.381053][T18454] ? netlink_unicast+0x7d0/0x7d0 [ 2340.382849][T18466] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2340.385999][T18454] sock_sendmsg+0xcf/0x120 [ 2340.386034][T18454] ____sys_sendmsg+0x6e8/0x810 [ 2340.386067][T18454] ? kernel_sendmsg+0x50/0x50 [ 2340.386091][T18454] ? do_recvmmsg+0x6d0/0x6d0 [ 2340.412712][T18454] ? lock_chain_count+0x20/0x20 [ 2340.417585][T18454] ? check_path.constprop.0+0x50/0x50 [ 2340.423062][T18454] ___sys_sendmsg+0xf3/0x170 [ 2340.427669][T18454] ? sendmsg_copy_msghdr+0x160/0x160 [ 2340.432978][T18454] ? __fget_files+0x21b/0x3e0 [ 2340.437668][T18454] ? lock_downgrade+0x6e0/0x6e0 [ 2340.442551][T18454] ? __fget_files+0x23d/0x3e0 07:31:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000068ffffffff"], 0x38}}, 0x0) [ 2340.447249][T18454] ? __fget_light+0xea/0x280 [ 2340.451852][T18454] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2340.458115][T18454] __sys_sendmsg+0xe5/0x1b0 [ 2340.462633][T18454] ? __sys_sendmsg_sock+0x30/0x30 [ 2340.467694][T18454] ? syscall_enter_from_user_mode+0x21/0x70 [ 2340.473612][T18454] do_syscall_64+0x35/0xb0 [ 2340.478041][T18454] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2340.483949][T18454] RIP: 0033:0x7fedd5647ae9 [ 2340.488547][T18454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.508256][T18454] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2340.512904][T18472] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2340.516679][T18454] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2340.516699][T18454] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2340.516716][T18454] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 07:31:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000006cffffffff"], 0x38}}, 0x0) 07:31:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xfcffffff}, 0x0) 07:31:28 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x9) [ 2340.516732][T18454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2340.516747][T18454] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2340.516791][T18454] 07:31:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xffffa888}, 0x0) 07:31:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000074ffffffff"], 0x38}}, 0x0) [ 2340.676632][T18482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:28 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 10) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2340.792041][T18488] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2340.836516][T18489] FAULT_INJECTION: forcing a failure. [ 2340.836516][T18489] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.849923][T18489] CPU: 1 PID: 18489 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2340.858696][T18489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2340.868769][T18489] Call Trace: [ 2340.872036][T18489] [ 2340.874970][T18489] dump_stack_lvl+0xcd/0x134 [ 2340.879645][T18489] should_fail.cold+0x5/0xa [ 2340.884163][T18489] should_failslab+0x5/0x10 [ 2340.888660][T18489] __kmalloc_node_track_caller+0x7d/0x360 [ 2340.894370][T18489] ? netlink_ack+0x1f0/0xa60 [ 2340.898975][T18489] __alloc_skb+0xde/0x340 [ 2340.903465][T18489] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2340.909852][T18489] netlink_ack+0x1f0/0xa60 [ 2340.914261][T18489] ? features_reply_size+0x140/0x140 [ 2340.919538][T18489] ? netlink_sendmsg+0xda0/0xda0 [ 2340.924484][T18489] ? lock_release+0x720/0x720 [ 2340.929155][T18489] ? check_path.constprop.0+0x50/0x50 [ 2340.934529][T18489] netlink_rcv_skb+0x33d/0x420 [ 2340.939374][T18489] ? genl_get_cmd+0x480/0x480 [ 2340.944063][T18489] ? netlink_ack+0xa60/0xa60 [ 2340.948657][T18489] ? netlink_deliver_tap+0x1b1/0xc30 [ 2340.953943][T18489] genl_rcv+0x24/0x40 [ 2340.957926][T18489] netlink_unicast+0x533/0x7d0 [ 2340.962689][T18489] ? netlink_attachskb+0x880/0x880 [ 2340.967785][T18489] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2340.974022][T18489] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2340.980256][T18489] ? __phys_addr_symbol+0x2c/0x70 [ 2340.985274][T18489] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2340.990987][T18489] ? __check_object_size+0x16e/0x3f0 [ 2340.996269][T18489] netlink_sendmsg+0x86d/0xda0 [ 2341.001037][T18489] ? netlink_unicast+0x7d0/0x7d0 [ 2341.006063][T18489] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2341.012304][T18489] ? netlink_unicast+0x7d0/0x7d0 [ 2341.017236][T18489] sock_sendmsg+0xcf/0x120 [ 2341.021649][T18489] ____sys_sendmsg+0x6e8/0x810 [ 2341.026497][T18489] ? kernel_sendmsg+0x50/0x50 [ 2341.031165][T18489] ? do_recvmmsg+0x6d0/0x6d0 [ 2341.035759][T18489] ? lock_chain_count+0x20/0x20 [ 2341.040611][T18489] ? check_path.constprop.0+0x50/0x50 [ 2341.045998][T18489] ___sys_sendmsg+0xf3/0x170 [ 2341.050584][T18489] ? sendmsg_copy_msghdr+0x160/0x160 [ 2341.055873][T18489] ? __fget_files+0x21b/0x3e0 [ 2341.060543][T18489] ? lock_downgrade+0x6e0/0x6e0 [ 2341.065406][T18489] ? __fget_files+0x23d/0x3e0 [ 2341.070084][T18489] ? __fget_light+0xea/0x280 [ 2341.074672][T18489] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2341.081012][T18489] __sys_sendmsg+0xe5/0x1b0 [ 2341.085511][T18489] ? __sys_sendmsg_sock+0x30/0x30 [ 2341.090547][T18489] ? syscall_enter_from_user_mode+0x21/0x70 [ 2341.096442][T18489] do_syscall_64+0x35/0xb0 [ 2341.100942][T18489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2341.106825][T18489] RIP: 0033:0x7fedd5647ae9 [ 2341.111249][T18489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.130852][T18489] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2341.139343][T18489] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2341.147302][T18489] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2341.155265][T18489] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2341.163227][T18489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.171187][T18489] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2341.179264][T18489] 07:31:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10004c00) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:29 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000480)={0x5, 0x6, 0x4}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x38900, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0x7, 0x7, 0x3, 0x0, 0xfb6f, 0x80c06, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8474, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x1c90, 0xd3a, 0x7, 0x0, 0x2, 0x80000000, 0x9, 0x0, 0x6, 0x0, 0x7}, r4, 0x1, r5, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f00000001c0)="096e5b0ef091faa9c1632e5e4e39cb6a730b702447c8de64036beb2b0050f7cdb60583bbda4348989efc249337a662f3be2df7c3afc3aa1e4c742736a94bbb11997ffdf358c8d937ec187040082f6dc8649a06bfec16d3e1cd2580b738889b6207c4782d5782dce36fcf0e9213642e1d74fdcbbc1e61f1f9ba815abdd8a0162d87728d3117941daecbf41b561aa4c923277e47602a35efdd6ec23db39e0bb54ea902491c0a3d7e87c96519afdec3f9f560195c3bb1a139a0549192fc2770ff1e8d93d2b6a60b563e0b304da08f71167412ca0a810f7f1948c3ca1e36bc6fbd", 0xdf}, {&(0x7f00000002c0)="ec26a39d13991ca7d50b7ceb419b8f10c85420b80260b2f950b50e825146305e3480b355a31aa6a349f80039979dc14d01db94195bd5919ff35ffa748748e569b899f0ea368d85d5f1455a9ba94c8011ad8e8589f57a08130448d5ebcc3358", 0x5f}, {&(0x7f0000000340)="f0a0785b04d7880214329b90008579bab11ed2d4d7361cc360bad243cd6f3cc7af6a820c2901ab4af99c4e094eccc373", 0x30}, {&(0x7f0000000380)="67022544b32a45c241253eb46b2788b54a1e781b953e8a8e21bb3a6b663f9a2683", 0x21}], 0x4, 0xd) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xfffff000}, 0x0) 07:31:29 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x9) 07:31:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000007affffffff"], 0x38}}, 0x0) 07:31:29 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 11) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2341.499272][T18500] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2341.517237][T18503] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 2341.565038][T18505] FAULT_INJECTION: forcing a failure. [ 2341.565038][T18505] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.601079][T18505] CPU: 0 PID: 18505 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2341.609892][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2341.619950][T18505] Call Trace: [ 2341.623234][T18505] [ 2341.626173][T18505] dump_stack_lvl+0xcd/0x134 [ 2341.631644][T18505] should_fail.cold+0x5/0xa [ 2341.636165][T18505] ? skb_clone+0x170/0x3c0 [ 2341.640596][T18505] should_failslab+0x5/0x10 [ 2341.645106][T18505] kmem_cache_alloc+0x5e/0x3a0 [ 2341.650333][T18505] skb_clone+0x170/0x3c0 [ 2341.654623][T18505] netlink_deliver_tap+0xa63/0xc30 [ 2341.660009][T18505] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2341.666278][T18505] netlink_unicast+0x697/0x7d0 [ 2341.671149][T18505] ? netlink_attachskb+0x880/0x880 [ 2341.676276][T18505] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2341.682094][T18505] ? memset+0x20/0x40 [ 2341.686086][T18505] ? __nlmsg_put+0x155/0x1c0 [ 2341.690692][T18505] netlink_ack+0x5ec/0xa60 [ 2341.695119][T18505] ? features_reply_size+0x140/0x140 [ 2341.700412][T18505] ? netlink_sendmsg+0xda0/0xda0 [ 2341.705360][T18505] ? lock_release+0x720/0x720 [ 2341.710051][T18505] ? check_path.constprop.0+0x50/0x50 [ 2341.715443][T18505] netlink_rcv_skb+0x33d/0x420 [ 2341.720218][T18505] ? genl_get_cmd+0x480/0x480 [ 2341.724907][T18505] ? netlink_ack+0xa60/0xa60 [ 2341.729522][T18505] ? netlink_deliver_tap+0x1b1/0xc30 [ 2341.734829][T18505] genl_rcv+0x24/0x40 [ 2341.738820][T18505] netlink_unicast+0x533/0x7d0 [ 2341.743619][T18505] ? netlink_attachskb+0x880/0x880 [ 2341.748733][T18505] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2341.755003][T18505] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2341.761282][T18505] ? __phys_addr_symbol+0x2c/0x70 [ 2341.766317][T18505] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2341.772054][T18505] ? __check_object_size+0x16e/0x3f0 [ 2341.777447][T18505] netlink_sendmsg+0x86d/0xda0 [ 2341.782231][T18505] ? netlink_unicast+0x7d0/0x7d0 [ 2341.787822][T18505] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2341.794094][T18505] ? netlink_unicast+0x7d0/0x7d0 [ 2341.799047][T18505] sock_sendmsg+0xcf/0x120 [ 2341.803481][T18505] ____sys_sendmsg+0x6e8/0x810 [ 2341.808262][T18505] ? kernel_sendmsg+0x50/0x50 [ 2341.812951][T18505] ? do_recvmmsg+0x6d0/0x6d0 [ 2341.817650][T18505] ? lock_chain_count+0x20/0x20 [ 2341.822523][T18505] ? check_path.constprop.0+0x50/0x50 [ 2341.827928][T18505] ___sys_sendmsg+0xf3/0x170 [ 2341.832630][T18505] ? sendmsg_copy_msghdr+0x160/0x160 [ 2341.837940][T18505] ? __fget_files+0x21b/0x3e0 [ 2341.842635][T18505] ? lock_downgrade+0x6e0/0x6e0 [ 2341.847697][T18505] ? __fget_files+0x23d/0x3e0 [ 2341.852402][T18505] ? __fget_light+0xea/0x280 [ 2341.857099][T18505] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2341.863368][T18505] __sys_sendmsg+0xe5/0x1b0 [ 2341.867917][T18505] ? __sys_sendmsg_sock+0x30/0x30 [ 2341.872980][T18505] ? syscall_enter_from_user_mode+0x21/0x70 [ 2341.878894][T18505] do_syscall_64+0x35/0xb0 [ 2341.883328][T18505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2341.889234][T18505] RIP: 0033:0x7fedd5647ae9 [ 2341.893740][T18505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xffffff9e}, 0x0) 07:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xfffffff0}, 0x0) 07:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xfffffffc}, 0x0) 07:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x40030000000000}, 0x0) 07:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 2341.913368][T18505] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2341.921791][T18505] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2341.929776][T18505] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2341.937753][T18505] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2341.945735][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.953714][T18505] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2341.961898][T18505] [ 2343.554138][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2343.555018][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2343.875283][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 2343.881583][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 07:31:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10006800) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x100000000000000}, 0x0) 07:31:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], 0x38}}, 0x0) 07:31:31 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x9) 07:31:31 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = dup(r0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x81, 0x4, 0x5, 0x0, 0x2, 0x40102, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x400000000008, 0xffffffffffffff52}, 0x40001, 0x0, 0x6, 0x7, 0x8, 0xc5, 0x3, 0x0, 0x9, 0x0, 0x5}, r1, 0x8, r2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x20, 0x1, 0x3f, 0x0, 0x0, 0x3, 0x20400, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x281e, 0x3, 0x9, 0x1, 0x8, 0x80, 0x7fff, 0x0, 0x2, 0x0, 0x5}, r3, 0x8, r4, 0x1) 07:31:31 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 12) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2344.191725][T18541] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2344.220171][T18538] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2344.223291][T18542] FAULT_INJECTION: forcing a failure. [ 2344.223291][T18542] name failslab, interval 1, probability 0, space 0, times 0 07:31:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2344.240171][T18542] CPU: 0 PID: 18542 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2344.248937][T18542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2344.258992][T18542] Call Trace: [ 2344.262268][T18542] [ 2344.265199][T18542] dump_stack_lvl+0xcd/0x134 [ 2344.269807][T18542] should_fail.cold+0x5/0xa [ 2344.274342][T18542] ? skb_clone+0x170/0x3c0 [ 2344.278786][T18542] should_failslab+0x5/0x10 [ 2344.283305][T18542] kmem_cache_alloc+0x5e/0x3a0 07:31:32 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x9) [ 2344.288367][T18542] skb_clone+0x170/0x3c0 [ 2344.292719][T18542] dev_queue_xmit_nit+0x38c/0xa90 [ 2344.297753][T18542] ? validate_xmit_xfrm+0x498/0x1050 [ 2344.303326][T18542] dev_hard_start_xmit+0xad/0x920 [ 2344.308379][T18542] __dev_queue_xmit+0x299a/0x3630 [ 2344.313428][T18542] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2344.319599][T18542] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2344.324921][T18542] ? memcpy+0x39/0x60 [ 2344.328915][T18542] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2344.335176][T18542] ? memcpy+0x39/0x60 [ 2344.339453][T18542] ? __skb_clone+0x597/0x780 [ 2344.344072][T18542] netlink_deliver_tap+0x9cb/0xc30 [ 2344.349205][T18542] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2344.355473][T18542] netlink_unicast+0x697/0x7d0 [ 2344.360261][T18542] ? netlink_attachskb+0x880/0x880 [ 2344.365468][T18542] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2344.371204][T18542] ? memset+0x20/0x40 [ 2344.375202][T18542] ? __nlmsg_put+0x155/0x1c0 [ 2344.379810][T18542] netlink_ack+0x5ec/0xa60 [ 2344.384242][T18542] ? features_reply_size+0x140/0x140 07:31:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2344.389627][T18542] ? netlink_sendmsg+0xda0/0xda0 [ 2344.394677][T18542] ? lock_release+0x720/0x720 [ 2344.399367][T18542] ? check_path.constprop.0+0x50/0x50 [ 2344.404776][T18542] netlink_rcv_skb+0x33d/0x420 [ 2344.409564][T18542] ? genl_get_cmd+0x480/0x480 [ 2344.414259][T18542] ? netlink_ack+0xa60/0xa60 [ 2344.418867][T18542] ? netlink_deliver_tap+0x1b1/0xc30 [ 2344.424299][T18542] genl_rcv+0x24/0x40 [ 2344.428302][T18542] netlink_unicast+0x533/0x7d0 [ 2344.433095][T18542] ? netlink_attachskb+0x880/0x880 07:31:32 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x9) [ 2344.438394][T18542] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2344.444661][T18542] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2344.451077][T18542] ? __phys_addr_symbol+0x2c/0x70 [ 2344.456115][T18542] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2344.461849][T18542] ? __check_object_size+0x16e/0x3f0 [ 2344.467328][T18542] netlink_sendmsg+0x86d/0xda0 [ 2344.472120][T18542] ? netlink_unicast+0x7d0/0x7d0 [ 2344.477430][T18542] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2344.483873][T18542] ? netlink_unicast+0x7d0/0x7d0 [ 2344.488825][T18542] sock_sendmsg+0xcf/0x120 07:31:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 2344.493345][T18542] ____sys_sendmsg+0x6e8/0x810 [ 2344.498219][T18542] ? kernel_sendmsg+0x50/0x50 [ 2344.502906][T18542] ? do_recvmmsg+0x6d0/0x6d0 [ 2344.507517][T18542] ? lock_chain_count+0x20/0x20 [ 2344.512561][T18542] ? check_path.constprop.0+0x50/0x50 [ 2344.517951][T18542] ___sys_sendmsg+0xf3/0x170 [ 2344.522593][T18542] ? sendmsg_copy_msghdr+0x160/0x160 [ 2344.527983][T18542] ? __fget_files+0x21b/0x3e0 [ 2344.532676][T18542] ? lock_downgrade+0x6e0/0x6e0 [ 2344.537648][T18542] ? __fget_files+0x23d/0x3e0 [ 2344.542353][T18542] ? __fget_light+0xea/0x280 [ 2344.546958][T18542] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2344.553391][T18542] __sys_sendmsg+0xe5/0x1b0 [ 2344.557904][T18542] ? __sys_sendmsg_sock+0x30/0x30 [ 2344.563227][T18542] ? syscall_enter_from_user_mode+0x21/0x70 [ 2344.569232][T18542] do_syscall_64+0x35/0xb0 [ 2344.573752][T18542] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2344.579752][T18542] RIP: 0033:0x7fedd5647ae9 07:31:32 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x9) [ 2344.584266][T18542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2344.603974][T18542] RSP: 002b:00007fedd2bbd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2344.612400][T18542] RAX: ffffffffffffffda RBX: 00007fedd575af60 RCX: 00007fedd5647ae9 [ 2344.620379][T18542] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 2344.628357][T18542] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2344.636426][T18542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2344.644574][T18542] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2344.652581][T18542] [ 2344.695429][T18563] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2346.754492][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2347.270069][T18567] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:31:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10006c00) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x500000000000000}, 0x0) 07:31:37 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x9) 07:31:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="000000000e000000"], 0x38}}, 0x0) 07:31:37 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 13) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:37 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0xfe5}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2349.314198][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2349.314401][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:31:37 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x40000, 0x100, 0x0, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x100000, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2349.482220][T18589] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2349.499788][T18591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 2349.546146][T18590] FAULT_INJECTION: forcing a failure. [ 2349.546146][T18590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2349.583815][T18590] CPU: 1 PID: 18590 Comm: syz-executor.2 Not tainted 5.16.0-rc1-syzkaller #0 [ 2349.592623][T18590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2349.602685][T18590] Call Trace: [ 2349.605966][T18590] [ 2349.608895][T18590] dump_stack_lvl+0xcd/0x134 [ 2349.613506][T18590] should_fail.cold+0x5/0xa [ 2349.618031][T18590] _copy_to_user+0x2c/0x150 [ 2349.622576][T18590] simple_read_from_buffer+0xcc/0x160 [ 2349.627971][T18590] proc_fail_nth_read+0x187/0x220 [ 2349.633194][T18590] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 2349.638930][T18590] ? security_file_permission+0xab/0xd0 07:31:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 2349.644498][T18590] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 2349.650563][T18590] vfs_read+0x1b5/0x600 [ 2349.654841][T18590] ksys_read+0x12d/0x250 [ 2349.659179][T18590] ? vfs_write+0xae0/0xae0 [ 2349.663640][T18590] ? syscall_enter_from_user_mode+0x21/0x70 [ 2349.669551][T18590] do_syscall_64+0x35/0xb0 [ 2349.674000][T18590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2349.679908][T18590] RIP: 0033:0x7fedd55fa69c 07:31:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 2349.684334][T18590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2349.703961][T18590] RSP: 002b:00007fedd2bbd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2349.712614][T18590] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007fedd55fa69c [ 2349.720604][T18590] RDX: 000000000000000f RSI: 00007fedd2bbd1e0 RDI: 0000000000000005 [ 2349.728673][T18590] RBP: 00007fedd2bbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2349.736648][T18590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:31:37 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x9) 07:31:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="0000000000000001"], 0x38}}, 0x0) [ 2349.744650][T18590] R13: 00007ffca36bc7cf R14: 00007fedd2bbd300 R15: 0000000000022000 [ 2349.752863][T18590] [ 2349.901444][T18615] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2351.554248][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2351.554541][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout 07:31:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10007400) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:39 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x100010, r0, 0x26351000) r1 = socket$packet(0x11, 0x2, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r8, @ANYBLOB="0000000002000000450012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe6c}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8000, 0x700, 0x1, 0x1, {{0x13, 0x4, 0x3, 0x3, 0x4c, 0x68, 0x0, 0x7c, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x44, [@loopback]}, @ra={0x94, 0x4}, @end, @end, @timestamp_addr={0x44, 0x24, 0x32, 0x1, 0xf, [{@local, 0x5}, {@private=0xa010102}, {@local, 0x80000000}, {@rand_addr=0x64010102, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=@ipv4_newroute={0x1c, 0x18, 0x20, 0x70bd25, 0x25dfdbfb, {0x2, 0x80, 0x80, 0x26, 0xff, 0x0, 0xfe, 0x5, 0x900}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x240000c0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x900000000000000}, 0x0) 07:31:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x38}}, 0x0) 07:31:39 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x9) 07:31:39 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 2352.208397][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2352.236941][T18631] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:31:39 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2352.250038][T18629] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:31:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x9) 07:31:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="000000000000000e"], 0x38}}, 0x0) [ 2352.341793][T18634] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:31:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xc00000000000000}, 0x0) 07:31:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x3ff, 0x4) pipe2(&(0x7f0000001540)={0xffffffffffffffff}, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe6c}}}, 0x24}}, 0x0) bind$packet(r2, &(0x7f0000001580)={0x11, 0x10, r9, 0x1, 0x68, 0x6, @link_local}, 0x14) [ 2352.482536][T18650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2352.599551][T18654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2352.644576][T18654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2354.274242][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2354.275661][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2354.793284][T18639] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2354.820040][ T9050] Bluetooth: hci2: Frame reassembly failed (-84) 07:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10007a00) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:44 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x2, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xe00000000000000}, 0x0) 07:31:44 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x9) 07:31:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000fffffffe"], 0x38}}, 0x0) 07:31:44 executing program 5: r0 = socket(0x10, 0x803, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettaction={0x20, 0x32, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40044) r1 = socket(0x10, 0x803, 0x0) dup3(r1, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01000000000000000400621c21d134000300", @ANYRES32=r4], 0x448}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40480d0}, 0x15) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xe8, 0x3f, 0x1, 0x3, 0x0, 0x3, 0x184, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0x8, 0x9}, 0x40008, 0xf75, 0xffff9b20, 0x0, 0x2, 0x5, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffff61}, 0x0, 0x0, r6, 0xbc7cfb4490a54a41) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = dup3(r8, r7, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x6, 0x1, 0x36, 0x0, 0x7, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x100000000000000, 0x40}, 0x80, 0x0, 0x7, 0x6, 0x0, 0x5, 0x3, 0x0, 0x81}, 0x0, 0xf, r9, 0x1) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2356.834293][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2356.834315][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout 07:31:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2356.987435][T18694] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2357.003015][T18693] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 07:31:44 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x3, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 2357.032356][T18693] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.5'. 07:31:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000feffffff"], 0x38}}, 0x0) 07:31:44 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541b, 0x9) [ 2357.081117][T18700] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:31:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x1f00000000000000}, 0x0) [ 2357.153776][ T8757] Bluetooth: hci2: Frame reassembly failed (-84) [ 2357.288327][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2357.323580][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2359.154333][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2359.163216][ T7618] Bluetooth: hci2: command tx timeout 07:31:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x2000000000000000}, 0x0) 07:31:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200a0000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newrule={0x34, 0x20, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x19}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xfffffffa}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x5}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/63, 0x3f}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000001440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000001580), 0x0, &(0x7f00000015c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001680)=""/91, 0x5b}, {&(0x7f0000001700)=""/255, 0xff}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/77, 0x4d}, {&(0x7f0000002880)=""/89, 0x59}, {&(0x7f0000002900)=""/54, 0x36}], 0x6, &(0x7f00000029c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002a80)=""/42, 0x2a}, {&(0x7f0000002ac0)=""/119, 0x77}], 0x2, &(0x7f0000002b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x5, 0x10000, &(0x7f0000002dc0)={0x77359400}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002ec0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x2d0, 0x200, 0x0, 0x2d0, 0x200, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f0000002e40), {[{{@ipv6={@loopback, @local, [0xff000000, 0xff000000, 0x0, 0xff000000], [0xffff00, 0xff000000, 0x0, 0xffffff00], 'vlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0xc3552376d289351e, 0x3f, 0x1, 0x20}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x39}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}, {[0x20, 0x100], 0x401, 0x10}}, @common=@ah={{0x30}, {[0x4d5, 0x4d5], 0x5, 0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff0000ff, 0xff, 0xff, 0xffffffff], [0xff, 0xffffff00, 0x0, 0xff000000], 'rose0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x2b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xffff}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x1ff, 0x6, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x100}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @local, [0x0, 0xffffff00], [0xff, 0xff, 0x0, 0xffffff00], 'wg1\x00', 'lo\x00', {0xff}, {}, 0x11, 0x7f, 0x6, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@rand_addr=0x64010101, 0x14, 0x1d, 0xfffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e00), 0x20000, 0x0) fcntl$dupfd(r1, 0x406, r3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x11000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:47 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x4, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xa}}, 0x0) 07:31:47 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x9) 07:31:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x4300000000000000}, 0x0) 07:31:47 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x5, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2359.798838][T18733] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2359.836933][T18736] x_tables: duplicate underflow at hook 1 07:31:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xf}}, 0x0) [ 2359.865090][T11461] Bluetooth: hci2: sending frame failed (-49) 07:31:47 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x9) [ 2359.911576][T18736] x_tables: duplicate underflow at hook 1 07:31:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x10}}, 0x0) 07:31:47 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x110, r1, 0x6937c000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0xb4, 0x21, &(0x7f00000005c0)="43fa32ff5bc13e0949bcdbd318992b74f2be6d4be44adaa1f998976bfb76e9d8014badc984f5d661736ed4b125a4eb4e85aba298d1f154eb8f685dda24c1d36519d7e9780c4396a5c7ddb74894740d0520641ed372a8199200ca233b95fe12207b384dd1c0b47bf009637319454af20fe55a05fe4ff7f6d8b7cd0dafb5b516990c58a57daa89cdddb64aa36441178d3cf8b4b83667eeeaa510215175f945ebbfa13444e41d701d2c208cffaa97fb36eb6054b260", &(0x7f0000000040)="8b69eb49475b5dfab2003fa536bbb51495119e010d8bc2dff05965e70000000000", 0x1, 0x794}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[@ANYBLOB="3ea00bcb3c060ba05db032bb3e5464d4aa94f76c718c5d231a859c5adebf804ffa53d589ea296416fc7e314290ea8dbaa588efd34911c584c6b6596654ecf729b8dea6f3e0a24633d3abf963284078cdbf89161849b0a39072564c0271d8c2efe0cbdfea14a0175b19283cd198995f451c2e8e633eac20a70a3c0c8a6bbe85195132f67e32c80fef4560884b85da80627e9d41b9a35fd88bb4a1d9fb49b3cea56c777dcbf19173f4c524c63825d52e80329713fc0483a9ec34a9bbfed5e8f8b9481b853c05b4cd7ba6e65d6cb857a93cb168de12b23dc31a9612580b5ceda1a1e27fdb3186ea4226c0ce222342864be9d6f54afabd2cbe", @ANYRESOCT=r1, @ANYRES32, @ANYRES64=r2, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES64=r1, @ANYRESDEC=r0]) chroot(&(0x7f00000000c0)='./file0\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 07:31:47 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x6, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x4800000000000000}, 0x0) [ 2361.884425][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2361.893281][T10399] Bluetooth: hci2: command tx timeout 07:31:50 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x7, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x23}}, 0x0) 07:31:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x12000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 07:31:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x9) 07:31:50 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x59, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xff, 0x1f, 0x8, 0x0, 0x49d8, 0x20081, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000002500), 0xa}, 0x12000, 0x6, 0x1f, 0x1, 0x2, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, r1, 0x2, r0, 0x8) ptrace$pokeuser(0x6, r1, 0x3, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002940)={0x8001, 0x8, {r1}, {0x0}, 0x7fff, 0xac}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0x0}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c80)={0x0, 0x0}, &(0x7f0000002cc0)=0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000440)="ca37df15cdc81e0d54f19495c1e44404ce02832c29af46b6c7b3471e0da2ea999a8861b92c3cc2e0cd7ffdae0ab9e515406f7cd79487f1bc13f0f57ba630e0a326e89a509e9803a72c13b3255ad8a11c5c9a1c23f2ad2aa16062eeb2edc366b0daae62fa62324b197fa0453be9d636469f3d19fe5be8811e76bcbfac96fd89bb680758577428f2e115a33acd38a0275e99795d7aba2ce0884e516ca99839d6633bd0c8eb01cf246251d4206423e6fea1747e408784fb535148ac4b3a15cfbb5b45bfbfd1213e2c74911892334ed4ce7e4390e2bda8e48d209f932fd1dd49233c10fd36f04f7922f33a1bb9d0aa072d8d6295e133d276d5a4eea2d7a40210d231292682bfa49c9a9da2513cc74354f15f41fbcb37801a8e6b51bce2a42c9267b0e0e3a44ae30c62e5bd30708e0db53569f54488c5072bbdc2437cd422bc9aa88ef8497478abe7ee6686c8ed2a6fd8ade4f782929b77fd2570b10c920b4760424186f6219f748982e48713d4109940f1f415f7dd7b07104fb7224e999fdd1bc17e7e58c8228cb12992ffe004c12b5be0f5107b31cf87c59aea3a01771c82aa23e1b786a18486be58ffcc5075eebd9a5d096a35918b61b924bad9e80823e2604e58256ba4fd302030e31362ab603b21384ec22075590f3773c8453e6b470338c62e6e1c3aaa088dce6e55d5c9093c880b14401f380ad34c3a3116c451eba28423b317cc47afd638b334682f0cac277904f9e5da5ae1744e83cc1556a049da97776375f923a165e770b89c9d6ee7afcc52d34b7b1ff403a0405e25ef97ab27a2503bcc738b39e067b9588a382e20341062dfdd31d6d84d6c10a3120483ad5e855a781bd6975f64960b796146a254ef8b6510440a234b4fba3f4a98ce31e2b384d98b7c77b109b7c9f11d361ffda358c23102eefa305daa7d6d3d83f45babf10cfe07deaacbd0678b6dc6feee27d2f524c77f7cd3aa9431b15fb861ba0263b2234a37b8cd2ff4beacd2a35b1f23f1fa18a6ee953f6a00e5b13fa6a0d30e415dc4dca1551b78e9820218896c800ca4e82a965fa8cc97f5d6e8151cbfc17e614213eb47e4080a39daf8ae8c06372875d2a12598325853cbaa2a89fce0b369217ce3d449b9a4ab7b20a1c215e5a889ee1da815bbf358b7cc86f208104ccc6e4c31d30962d1826b6e6d25947a7adfc042b25530b3d1aea75db0b50ca7fb62dd303106418b055ff17a74e80ab3f44fcbc6024fe59b73e70e1779f2015c3643eacfe6573b45f4e8550658b19ffd7a085c3e98e8edcfd0043cb835748c34990a41b93e01502a4c6272dc4499e4f406711ecb849ef1f689704643cd8cfb1ed390fa6e3338664e769d731e1db495e7cb36ca9ba4a317602f954936050d63f4f2f4be010dbb9725465e62f6b10e443f87a5943a9c3ebaed1c87ebffae1cec538be39c8f4f0c0c4de549511eb32ee8e26c35b03bfc9f1d567c76946bf3feb288740e5a0bd521f94b04d75584ecdb0d9c5e8b14a543b531976a2efebbb3936a085451ef8d27e4d783d82e02c05954615ee515d5abd43ce749820a8d3fbba857aa3eccca62c6d609477f185d7d9663ea74d7070e04aa360027665f4166c9f7b520099499a55d7ab35a95978974ffeaab9ef9a42b9a9b392b87c013dc58a69810c5ed11b484e1e824ba435b3e1d20efcd166dc82a76c9a0e02d5c223ac049543cf7f8891f7d50de160ccd20d0aad9d9065d6476e5eafa9848aa5899e9c2d85dfe2eb5fc187d207e2f94d7e09f01fff72b9914ef9817c33ebe851f76bb0c741f4cc833e35085469b459897e857528b1be3ea42b2b592b4178b892190dd83cf13e6499c6e98635f46d7d523ab6b5317c6a20ea798ff55247c0f8f8a6ed83a362c82ad6f6ccd716a205687b3e21780bdcb1dd68860f5d8b7bd4480506f23d8a96f712020637718bfc083cc528c4467386a345de167419d04ec6e3b9fd3e408a81f5fca2841298be77e7fb9cc12db61088b0d9bc89283b74e7236a7b24c630f6707faf76a68f15c6da49bfc0a2c824a7e3a128ba4ad5466d9119bf568eab9eed32c96c9784bf85c7c0b2ce58d4d9caea953083046c35021cc36798af4dc384a9dda353ca14e45cc4136de3d93ad9f4174785b7937123bb0660d4dff981499d5758b2cc5a456a8d71814690ae89252ffa55814523952aed4243792cf09dd2c25df8639b67b3c21e8ca1a65012794aefa3765fab180670a3d0777a7076b6ce171617bbb940366990c10bba156eded658a497a6b095303a769b0250d730e9ee2c69caa1fa8ba25ef45e4c40b29c9a18dd7069151dd56d19f73b8dc16ff42e6f73766eaf2a96b3c7217bffe377313f558d0e3b5bcbe563ce66c401916e9e8cacd8ef5729461ecb81faa9b25f60ed5b50dbd64c866e00c4014c69855ed1e06976c3df2d5e551576f101a3de3591b0dc5684f51bda16ed0874fa3927d329245ceb466a65e7411c5df68ae9c80900f227d50373548782ee1cce9e0056dbe9f506f0646d9843e488beb971c998bc7915bd631b9c443a29a8dcecc7277f842c52c22539c54e24f0cdb58cfffb23a4460f0da8805fee6e49d2d60261c8112c5be9a105686583593b0ae98e52abb370b7ee80b6de0688c14cf839b7d5d4bce40c1cca9f9d9a995439feca389ee05f6bea45c65f06de27f95615b6fb7a35c704d2cb9a7255deaeddbee4cef34ffba8fb239abae390ffd08f99a416b919693cf8dc2e1eb2f8efd65632c2b23ae518d97a0c9ccff4a8b5a12491cc2e291d768dfa5477ef98db62dd5e986448458d3861c213faa4affa4a82732c7b8990d1506ab1ef8eff2cd106fb188c9aff91337211136fea42030bcf1b4f93ca44997b621d327435c868cb73f3040e396d3285785a169c8cbd3ba8481eb10e2f6df52712e34802f7b15c404e55b0d1ae5852b497da4decf13c9d1fcef5c1396cf2c7a9c352cc5383c282425df332285ec722d68525f50586b3a51cbffb3afcbc3e9484c380936a49281e1e36c9551b8262c729571b4d928541fa89f32bee87cf19b78ad2697c5c782888ad0f41c36109e7c5881bec17174c168a25cc2e59f5b56562c3c7661971da68c1f9a8ab99cfc00db78a25235257baf46757909686fb62fd28d5f769b0aae67aec6e63579ba0342b227759c74096fe80cd094487fb23f57e3f711b09c1c6426a282658f9ad09e032bb0cd133d1f31ee47c2b0c62b70de069666545037fb1fc872ae252e8616e6f5c3f433dc17e1fcf86943f17fa5104d23ab99c0ac73bf70603710ad5a673c675206f98f5487508ef5e46416c187c9dda23429bdc6b036239ec72f785b646dd97638da171cc63be7b68c60596e58620451d65332d510fea0c872812b503dfc3ab75a06e1d7009a917ac43ba5270e2fde87f39eea8eb37a054ba7bbfd8282cac4d5c09a2ae86bf7b6a10a8d89b6d8ba6371c499da94847f0c8417effa9256954df33c81e77381df7f29146d88279f8920977d38c37192f6f224a9201f0f4c075c5ab8c1925534406714581ca866cbdb1673f95683e5e9a0c3160e69bb81236dfe2e8ce2b1a162d6c71360b1806d8834110995c1449ca100001c1dd5c0162a579b02b5e7f4ebf001c81f13fd093878a2d8c8869b5d12825e60f6862071c6682b54d17c7e1fddceb369bb60dcb9d48d2ef500601bff3b73803f80c2f5d4c8495079d7b56c4bcffdaedb43cf83212c55a011220deffbea430a986d43449f89ae3bf9d7792dd8d33fd9ca7383f703176020f21909cc3416583015a73fc8210134291464b23c1c8e6d838dcf1da4ab5a95189af0505cd057ada433dec6306dbdd95ea7d59e2ceb39e4ddeb47d6e3eead412259373c89b9f0a92672010af8d91d7858af4c0a13a9784abb4a12cd4852ddf7c9f8f7d266e72a1bfcc2ef9f2810c59cdb7993cc7a1445575e612bb86a2ca0207ec4555ac8591238807d5432fa3b390a8434ed81371379c11cb0479197de2886e1876e8f145d8ff69f6876e5fa3382f37ce58aeffb38d11cf2476cc61b68f079a88338c88d2ebcf933d90b3ec56b53a52b3220b02d2f3d5aa56e864373bc003828570f3d09bc82cb1c774df2f4b2a7423b96d51640cc13cc400301b134c34499fb5fa4703ada4b92b039028430516a54c772f9129920bc67e625fa0b568aa8cb12cb498d7003ccc5902254ff95ff0fc86e8fd3cb67789792955ac03e1f9ec51fddaf7d28d102fc3885a65dc901332ba97bd9b43e1e60ba8a3ba0363cb020e74c56dfa2ebf4a15df25007f2cecbcbd4a8bc9fb992fd4e5221d19ecd7c28dfe97fff4d3d2ca60f99c464e3791bb2fd82366e7201d6423bdbf2b7a991c1bb21dbc22a1cb22545a9a66fb4415968b0a62b30e23b402f226a92cf5db3c1938e60fe5e09f0dee073e12272e00855d6819c8c5e78d60f1b7a2f9192c14739bdbe33f388b735c7e2f4c9d03e5bc18c5c038ae658d32b0df632f4ac84933c8b4afb2c2a4a1b031c7173534e722c36892123fb2c70eeccdc229018a8fefb6c9ade3d05de9849c8d31512d5943ca767e8f0e01fd4f944e980b5d840017aa0d4f1d720c255b0da909dc2c651bca12b039d04dea94d0118b529aa01a441d602f92955cc18934b9c95e3807235b8eaa0e2e0ff5eb1551060ba92df07830ee17f1f2496792560ed42acef156254fcf655b064fdeae5b84726d5ec6a18e0f376afabba5d09603ea48fa6af8a9033e50165b8b48a9ad89a33727726c5cfbdf362b9c60fa2ba8e9ef429da0ea6164c858e924c53eaa353fcdad79cbc59f5b83980d40cc1c00222bd0b23cd31d7758c671110157934f9f83d78bda4b7fff66e8bedeea353233b2c10c8df41ba2154c1eb4cec0a21857d7e20a62fa6f318a9447040b998fda58a1374d4f327956a514c12dcd807aa5f4991ab09cb6a790044503039aa2eaa5bace057fd5153278a715b0b1ef2edc7e689c7059046b0a7de8fda1dfca42cb5d1c823434961bc2663844c36f20f057e5aa6376c5bbe95a87da12f9d9f109bee378a067c67dca94803e2d4489f03d31eba9689edcf7c1678568ef9e7915016ee849caf0596f7a3fdbd6d1418791d0d75bc90340aba7e43e4ceeb4abe21a29cf464aa8224f01214621b672cb04369ac94da6d8f365a93e26c0bf5686e572c5fc97bc98dd3fc2715c863688e7c9d644d2774bd85582c7d24a47413507f1ebba2d63556d4ba68946fc9fca89cdd3f2e470b04ca665cf3042070dd8ce6914800ae9db0e67bdc29960d8666faccb750490f6e7f411672ecab02420f99e2dfd32311c468933d1a623f924c6eca148e8bfb368aaee693382b285e4a597f1edf9f5a7d38c213b312209463211b31dd4c49332e4ed8cdf59331163ddfb77b2d4b325ea9e3bc6084d0b62391aaba52356b4406f88bce565effc1515d5f2043e34fe873f5ab3f7cec3ac75f19d93ea74b9a1294ee1acd2deab11d4c204eff62afea1b72476242d42380a65061c35704a4345f04839b5216ff9385aba5f36a9e750e2f638d430effce7c790782f8ce5ff15fc407905db36182d5f9d11480e0435c052c491eab30d4fc2ae7d22daf34a7f851e4d7702c710df0072cdfbb3598ba9cfe97053de9c692695a86cd12c787291174239453984103e256b4c553677c1f334c8b5d0acf71a1ff2195badcdab79c00f4efe99d46bd60d1b5d706f69242dc55017c2f4f5ac5daf65b186ce2809e1b6a6accaa7b03b641335a41c6877bcb60a21e06e231d3d8eb41c98758aba731038e0a233a08092d4d0b8e9b209d92ee0b826e1572b15337afae5b511478e7d07c4f0241d63adb3406817c817707f76819c5483f3f49c0e3f0703312da7284d24b98a1fa20f1a20979417f3f3cf8de6486a14444faf2ba25599267702ff4a8d63ee61411038248da97ec9df98f7fd987c84782b0daf615fa636619cc9dcfd2edf55cd6233abeda3b65dfb7a82bb6fc9a7f661af380ccd4d7f432e11a4142d79cc56ae068439a185755c9c3ee683a1ebcf09768a1835ecf62cfd6df7ec98eb6d00b9cd0b1d8847e8df6f92b9fb95e50ed081c1fb091c0d29c911b394a47d0f23bdfb99430c33b53242b37ea5f38ddbf0c84acb26b7a472be9321d5cf14f4dee759717f3681551b015ef5d2e758a9bbb4114e3612d34fe719d6b686dcd2e6c0b5c03990e694cfc5f39cbe7d984af5fd267ef5bee5cbf0ffdeee818a211e499222946650f7b6d8d228dd883a14a4fba29000096cb00a404ad028d4af8a3d0e6b3319af1e54a3d86c111845954b8cd8e14ecba8dcf8807aec1c4c6d2b4fd1268be80d26359179ef4c342e4148465edebce349ce077496a9d00af5fe585070aee0d003eb4c51e771c1febd788b88cc035ac7511d39a43f686a81725d242cb7061087dad4f5b7031e01130e4a4d0b192496ffa2d11c919d084b5538a20e1fecd6993f8e65900f620be31e08c994818067c68acd8de519a6ead01e68d86bdb872ff65e91df9cf47be12892fcc88d22244b6ca0da9e4a25072e5c2511511f3e8526453584109d34acb7abcd26e213f74c3c1afe7b105153db9a6c23a30260046672ffdedd15a2898d8c2c53f21435a6999606583cb646bf2ac41660ecea20bfaf5f7eb2d8e0ab90508ae32fb0e1ce5184062d5beb3080757fc90be71bfe0aa6831b55f913bbccfa6c3e2e3c84643532b040ad0d7461aa298615ed7b3b218265fd872be1acd3eda983a0ca67af1de24c100e95393a182f9c0113142787e3ef8e780680ceb5c26e59dc63e604004c2cbd14b49e8d1c530ff366647db7497fe716d8065376456033403d8aabf1a3242c90cb4c903125e004d81c2f59626136db3895add182e17b8469435860457b0517425f290bc5581869a52a58d745806ab069cb1fb87d5aa79967bd4f173b94b40b0ad47a3525b7460b9650a9e164eeda76b8744b6fc8ea14635d9780ccaed711b863823273b829984c5a2e004abf75c7e34a9b788d5fd9abecc80435d56566bfd179596b1380011f037ee047a4b9d637bea14854bbfd857c27253545bca8958986459c8031c4eec29188eb5c1d1cce0e95437c52733163c5596102683ebb037546276190272beb1983e7f9de70f34c4e981f5a8b31aee8587cd3647d343c6d2d2f7c6769554c6782cafec4c87032712b8bfde3a09caba341e489e2a2989c0891c645e594f99d344ce4d9fa1d95a1e00b849d3fbc2c942c7241ec49ee1e06dafcbfa73bf07532a01b1fc3c1bdd9d2a2af21ce486fb0e69a4ddf6cc33b7be59fcd65c99e520f5b4e6739366ff8a44fdd92d3e7d16db9b38b57557da233c7ea3e735c07203ad63d56df2e1a4877af358732ed3f8388810597c69cc83b5693377802fa1796081967ee13d0f3f6606af6b675fe569fae9097a09e43a0369c04cb9bea3f0aed5343370de6d002bfa1695fbb059decb89c6f0eea815c2f1507a00f30f3b52ed972aaaff7ba84743518c91ba52424f586e053001c86b9e472ed0e31d51aa01c1587d71cef78ddecac7054402a77c3b287bd527908347d273cf2f4f496a66e4c3e90be111d4d7b7aafc02dc3cd8af7b3dd1176967111f6787ac47534bfd247a49bc4f566bc5c0e430f6e05a5eaca8b37bdccbf2b051e64ec27b7c1ea2ecf6c4672e6fccd39aa4135d130f2b56576d44ddfe1d844bb81b766c10bea4773fa33af34619edf93902f619d0b96391119bbf1b4f1cdb7a8db386162a8cd1a3a9e754c689f5de92e016bb71112ac1392386cb5274e75740f877b8e431d9bffbac170c2d0c4c457ddbc34a45a1800f3a612a2a3464d2c3d4b714477938c4040716369202f2c5498a726db8a2f5fc725d7244e40a766d2745be48288ba0a8e2fdb869d8e509a60542f10059a3c1796e46993bbe860d1756c99169e03326918f9d9a0cd6032c982313b99bd68734a0fc3033be9daaeb1d221d676be8dd2ee8b314913b26943f43d61bff509f056fbb7c18347f1a22fdd73ddbf293f62c0339a72c30a46e291131916bdc00d39b4a7ea3315babd4fe71f92901f2e2433e869dcfb572bccc9d2c98f1c91a05bb17456bdda42f897636b5105cb51e58c794fbb027125d0c0f7f23a346dd2b8af0a2f4c8b6fc96c6ccdbc1975f836fd7e3ef29cf84be107f20b173699c3db38cdeb76e76d79928eb952208a885faf2329d6d822024f670229c2de2c8a730c698b8cef32c1d7835ea2fcb8b031ec5f33ef16d0c2874f28c13bd448b0cec0982ce888f914f144a5d9dd3d2cf13210e262c03c3640e332de989ea93bb408835379195da49bc8c3ff679d760c91d86cc297b8d260235930c6b86ac35d4961c9dc5afae3a6ac0a30556e193949970459f869e97cdd552d8cdc2364173a06fa63468d05dbd31483c4ea86ccdeafe38c115b2af73a2cb99c80d973f6fbe09520afed9aa8d404162d9a765edf99db596ff03e9818d675f99b6dbc9a9d333850b7b21750388be75550fd3ba1087eb4a155397c47a4d6b1e126aa3f25a2dfa4a8e6af9288334f6fe5526dc2c545d1ecef8b5555929f8ef7612ed173c63dedc3cf6a2befde94c6d27e5b13592303dec4abd4235e44dafe25bc5d0c65f89b0b8c06995ffdbafb00298cd6297795766312ce24ce5813ab2b968514ac16169cbe01e1491fcd27072a5437348955713be4e657e143f497e0ace9f4dc3a376887cca2512a7f939e11e8223749205504f9022a3fbdbdbe6ee3a4ee24dbe5b6f2ec79d3b9fb2369fe04158464399710980bd4e8af738379e4903834fc1e5d75a7f6ff982224c7bb08837a843c7c9fbcc35e95bdb2c707169c187bb28f4776be38b8239e18bb2ff538887fc22dcb1eb5be4ccd10bc3e76db56c2f8cf81c8140782939991ddc803098971697e9c244c54fc7599ff473905ddc6bc1ba93ce0a9898f8f289b7bfc2cf5a14413e5a54b71da0b39994ec98abc016c47e471e4ff80f41a1af608f909a6ebfd4f0a3ab11c1668d2c6472501fed05d6bf9edad21d8c73179909d99bc820ff715ff2202f3fea73acf78bd388a30f832f6fdef4c5676ab9b7f441a0160caedbd8014dfdfabcc6f88da65307ce44d79a382a4f2aab97671f190d941b2e8f055da96e7dcc9ef7971bf9430196b05caed963a3a3a5677a7182fbf313788f132c6fc834244d3fdc00db5032df381609ee75f73eaf39ddd7d33581796abef1f7c9362018fbf27bccfacd4c76201ba9262a389eea555c4ffbaa73229c576d40b1f8503e122961d4346a2aac451338d2dff133e00c3ae130b2d0db05be8562f1fe72690769ab031d6d766f869196a720b6c2ab51e87ba1d7113081c774e71fa068ba21c39e83f39c2e23b31fc98dfa76e3285ee90d400fb616b4b4c1bb27af00bb1815880bb59d2ff8f9b8c774b8d7d2501e7a29694e69331d5727d68bd3c7ca2b620c6d7cdd06d9779dfce9f5e08b5e5942922887e4a8c3cb8326823e5e13716443b34ae92de7f80e2ee077803fc1fe7b7486985b28e61de8b8f984c52320ab4159804ad549e719af0fc996b94279f6a45276eed202c39b027f7764cdfd054bbe02285716c0d2ae6fdd2385119c0ebaccd3b0245b66dd40392869fc13135bba5c5dca18df439ca0e86db3f3dfebe26478e8969942967922b90bc5a91b3e965a1e5ba2bc17b47ea8faad9d10ef1a608f6170dc2a8f24d4f794d959fa08ca7733d2b61633d9e49e7d88fd8b659345f2e387d56f8df22b7b0f1d6e9bdc5963aad6f714c1f6ffa42ad1fadb037b1a5a1b239018f5804ac5496b399191b1bafe6f979420798e6ba8a8beeb3af8db6f1fc06076eb78d1ebc3fc55d186df9d9856701cf8c80267192a90ba85321052e7b0ae335e691972e8c3ff04848145798059da8a1f7ae6e58b7c5726085c64f01099acc3bac589ef29c90e4f8369c7bdd85a5985a57f2b783bd0fd8061fb0d1db8d4cc4923593a52a6406b69158ff631192dcb9dbf2a7c1fa22705d4d85422acfdaac3b86835c06ebc85aa17116a68a707587af591e8b0cabe8fd55523955cf88954559f489452e06c5192557c2f2f167bad0b58599790f42582a0a0f16225cf1b24749e5e0b54008935339928fc1f27bd0086a4dbd71482b753ffb07a471be0f091358ac82af4cd30e1d5dca1d5e1c2007d4b1a95f9205f2b4de3b7e1a8172347611f265a3f72610a0c7fbaee6c016cc28fc0281a97af1754df602a7884a5a82a93cc534557b10fa728e1a66f39f3cb7996b0694c73f2242886f2f8fe3c48ba32582c2ba899a35034f5b0747d3032f0c4d763d725c73205cd2fa385ec7f52bc9e64b8b2c838a8b25de493c804877d4b7ccc46308cd7a323808e397998f6067671da2c461245c3d8478845ee8dd1d8e7d01e550512e98095b7a49e5a27da0122e9804f1f4807d783cd822ad8d49afa29f58ea014a170eb68a13fff0232a0b541b38967d82b09bceb5b03c2d9c95b5f39e376ded0fb2824344426d61b06dbf0ff139f65ff8c727156183075b8bb40f1371e87eb54e56be70c82ae89cf893fe6d0dd610cad8a7123af84004578903ba320eebf95f2dd70734b45a98a07b779d295b2b57247fe8a24a142d0ee7d991361fe0bd569c368064db1b3d1f9db8273b40e2595b9418241f43cea72f22c8a90ee02b8a1efc04b21280ff8ddb39baf750ba2108438d9c39e981ec8c985750ccb1ceb120e80b17aca9fc1dded9e18fa15d965fb2affa59aa64a8ce68093bdfade6f86d04b644bc0f82b4f559eaf4e4af1c2e8807de110ca9bd9a95fc5f321c3ee98d97c4206f49e737f1254ca028bd4e2b7b2fec1d7c36ddcc391a90ca8159129d1cf6e7e272603a8285e1360d89b2eeb085de4a72f4706bc96e0b9ef3de8866f83f7578e95f6e73d3d2fe5ee85984e18387b8c742634e8384c545e140405ffb956627ee8b965451a66493124a037dab60abf44625ef3fd3171fd817942b304d7a08f9638594d1f120cdbf5418069c5b4f3518f415f32ee5cd37e9289ae9bb16335b58b71af4f3ba2a0208acd29d4d5a2b33564d7c84affbd82321c7797a107b1e2cd31d0ac527072b5edfd29f4fdfab174477edf62c6092cd947e9be930d52eee053fbac944b198cca7213d97991fa4398a2defc760de464485f4405132c7e7ce287c0e35507d8fda1a6d8034bdfa116ab363d34f5ce2d4626dcf6e7920713512d337e44f2649a11ff441fe286410b97a043a99bc43a6cc7816fe7584e656d07d2d87b39ac423186524e85584964c387916c78a7adddfebec00ab110c75a3348422e092c88c8a5d4a1ed935e1637a5b5fa09ece6c1e56f0106c14cf4fe6a9239f0ed362333591c2165b6235894498ef4d6b42ffc37e5c09168250b6bfa3ca9b7ec12d97b95449ed669552d1c5938da98341316981f39c15f512520d046ba0f79c2a1f5fac9a5bb7309c7dba77f4f1ada479582a418abdd9414f8beeca78d115bb07f1ce8a3cacc57de8d19e39a158006fd06e9b5ed178d0dc9b5e405050321e8465043cebdc22e0c73413cf8a0c3a2891ff20bf8bd18a5711c6a705d7857abbe01bd45bee67099cd0803ca94008d1cedb6285e7eea8c0ae49ee6c4b2a0811f7b1e708f0ee685339716d60e97a69857", 0x2000, &(0x7f0000003140)={&(0x7f0000000100)={0x50, 0x0, 0x1a5, {0x7, 0x23, 0x0, 0x880000, 0x2, 0x1000, 0x80000001}}, &(0x7f0000000180)={0x18, 0x0, 0x77, {0x4}}, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x1000}}, &(0x7f0000000200)={0x18, 0x0, 0x100000001, {0x200}}, &(0x7f0000000240)={0x18, 0x0, 0x9, {0xffffffff}}, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff80000001, {{0x7f, 0x40, 0x1}}}, &(0x7f0000000300)={0x60, 0xfffffffffffffff5, 0x8, {{0x3ae, 0xffffffffffffffff, 0x3, 0xfffffffff886f3fb, 0xf18, 0x80000001, 0xfffffff7, 0x40}}}, &(0x7f0000002440)={0x18, 0x0, 0xffff, {0x9}}, &(0x7f0000002480)={0x11, 0xfffffffffffffff5, 0x10000000100000, {'\x00'}}, &(0x7f00000024c0)={0x20, 0x0, 0x7, {0x0, 0x4}}, &(0x7f00000028c0)={0x78, 0xfffffffffffffffe, 0xedf, {0x1f, 0x81, 0x0, {0x4, 0x4, 0x800, 0x5, 0x20, 0x7, 0xfffffff7, 0x8, 0x5, 0x6000, 0x0, 0x0, 0x0, 0x4, 0x200}}}, &(0x7f0000002980)={0x90, 0xffffffffffffffda, 0x3, {0x6, 0x2, 0x6, 0x80000000, 0x80000000, 0x6, {0x6, 0x9, 0x80000000, 0xfff, 0x9, 0x100000000000, 0x11d, 0xffffffff, 0x23fd, 0xa000, 0x6, r3, 0xffffffffffffffff, 0x400, 0x8001}}}, &(0x7f0000002a40)={0x118, 0x0, 0x6, [{0x6, 0x7fffffff, 0x0, 0x80}, {0x5, 0xfff, 0x0, 0x3}, {0x6, 0xdd, 0x1, 0x99, ','}, {0x5, 0x4cf, 0x1, 0x40007fff, '\''}, {0x5, 0x80000001, 0x1, 0x1, '+'}, {0x1, 0x101, 0x1, 0x800, '['}, {0x6, 0x0, 0x0, 0x7}, {0x1, 0x90, 0x6, 0x101, '!:*[)^'}, {0x6, 0x101, 0x2, 0x6ed3, ':/'}]}, &(0x7f0000002d00)={0x338, 0x0, 0x8, [{{0x3, 0x2, 0x4, 0x20, 0x0, 0x80000001, {0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x5, 0x0, 0x2, 0x7, 0xf2, 0x6000, 0x2, r5}}, {0x3, 0x2, 0x3, 0x855c, '+^\''}}, {{0x1, 0x3, 0x9, 0x9, 0xfff, 0x4, {0x0, 0xdf, 0xd0, 0x0, 0x876, 0x78d64475, 0x3, 0xc72, 0x94, 0x6000, 0x329, r6, 0xffffffffffffffff, 0x1c, 0x9}}, {0x1, 0x47, 0x9, 0xfffffff9, '-\\({*[(-]'}}, {{0x6, 0x0, 0xc6bc, 0x80000000, 0x6, 0x3, {0x3, 0x10001, 0x7ff, 0x1, 0x29a2, 0x7c5d, 0x0, 0x20, 0x0, 0x2000, 0xfffffbff, 0x0, r7, 0x8}}, {0x3, 0x8000, 0x1, 0x3bf2, ')'}}, {{0x1, 0x0, 0xffffffffffffffff, 0xffffffff80000001, 0x1f, 0x1ff, {0x6, 0x5, 0x10001, 0x5, 0x4aa, 0x3, 0x9, 0x1, 0xc1d1, 0xa000, 0xa1edaa4d, 0xffffffffffffffff, 0xee01, 0x0, 0x2}}, {0x2, 0x1, 0x2, 0xfffff671, '@/'}}, {{0x6, 0x1, 0x4, 0xfffffffffffffffa, 0x64e6, 0x4, {0x1, 0xa08, 0x7, 0x7f47, 0x100, 0x9, 0x3, 0x800, 0x3f, 0x1000, 0x5092aed0, r8, 0xee00, 0x76, 0x1}}, {0x4, 0x0, 0x8, 0x0, '\x87.-/I\\/^'}}]}, &(0x7f0000003040)={0xa0, 0x0, 0x0, {{0x0, 0x2, 0x4, 0x3, 0x0, 0x7fffffff, {0x6, 0x9, 0x0, 0x3, 0xa0, 0x4, 0x4, 0x9, 0x1, 0xa000, 0xffff, r10, 0xee01, 0x80, 0x4}}, {0x0, 0x8}}}, &(0x7f0000003100)={0x20, 0x0, 0x80000000, {0x3, 0x4, 0x5, 0x1cbc05e5}}}) ptrace$cont(0x18, r1, 0x6, 0x1) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0x4) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f00000000c0)) 07:31:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x68}}, 0x0) 07:31:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 2362.498299][T18781] warn_alloc: 1 callbacks suppressed [ 2362.498318][T18781] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2362.556137][T18781] CPU: 0 PID: 18781 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2362.565415][T18781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2362.576281][T18781] Call Trace: [ 2362.579580][T18781] [ 2362.582617][T18781] dump_stack_lvl+0xcd/0x134 [ 2362.587217][T18781] warn_alloc.cold+0x87/0x17a [ 2362.591910][T18781] ? zone_watermark_ok_safe+0x290/0x290 [ 2362.597463][T18781] ? __kmalloc_node+0x62/0x390 [ 2362.602258][T18781] ? __vmalloc_node_range+0x574/0xab0 [ 2362.607816][T18781] __vmalloc_node_range+0x883/0xab0 [ 2362.613034][T18781] ? vfree_atomic+0xe0/0xe0 [ 2362.617542][T18781] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2362.623354][T18781] ? __ldsem_down_read_nested+0x850/0x850 [ 2362.629086][T18781] ? __wake_up_common+0x650/0x650 [ 2362.634110][T18781] ? n_tty_open+0x16/0x170 [ 2362.638889][T18781] vzalloc+0x67/0x80 [ 2362.642870][T18781] ? n_tty_open+0x16/0x170 [ 2362.647280][T18781] n_tty_open+0x16/0x170 [ 2362.651513][T18781] ? n_tty_set_termios+0x1010/0x1010 [ 2362.656874][T18781] tty_ldisc_open+0x9b/0x110 [ 2362.661544][T18781] tty_ldisc_setup+0x43/0x100 [ 2362.666301][T18781] tty_init_dev.part.0+0x1f4/0x610 [ 2362.671420][T18781] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2362.677223][T18781] tty_init_dev+0x5b/0x80 [ 2362.681554][T18781] ptmx_open+0x112/0x360 [ 2362.685791][T18781] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2362.691250][T18781] chrdev_open+0x266/0x770 [ 2362.695836][T18781] ? cdev_device_add+0x210/0x210 [ 2362.700768][T18781] ? fsnotify_perm.part.0+0x22d/0x620 [ 2362.706164][T18781] do_dentry_open+0x4c8/0x1250 [ 2362.710941][T18781] ? cdev_device_add+0x210/0x210 [ 2362.715874][T18781] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2362.722195][T18781] ? may_open+0x1f6/0x420 [ 2362.726520][T18781] path_openat+0x1cad/0x2750 [ 2362.731114][T18781] ? path_lookupat+0x860/0x860 [ 2362.735864][T18781] ? perf_trace_lock+0x2ef/0x4d0 [ 2362.740802][T18781] ? check_path.constprop.0+0x50/0x50 [ 2362.746169][T18781] do_filp_open+0x1aa/0x400 [ 2362.750683][T18781] ? may_open_dev+0xf0/0xf0 [ 2362.755190][T18781] ? rwlock_bug.part.0+0x90/0x90 [ 2362.760145][T18781] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2362.766402][T18781] ? _find_next_bit+0x1e3/0x260 [ 2362.771249][T18781] ? _raw_spin_unlock+0x24/0x40 [ 2362.776093][T18781] ? alloc_fd+0x2f0/0x670 [ 2362.780428][T18781] do_sys_openat2+0x16d/0x4d0 [ 2362.785102][T18781] ? build_open_flags+0x6f0/0x6f0 [ 2362.790414][T18781] ? __context_tracking_exit+0xb8/0xe0 [ 2362.795886][T18781] ? lock_downgrade+0x6e0/0x6e0 [ 2362.800734][T18781] __x64_sys_openat+0x13f/0x1f0 [ 2362.805592][T18781] ? __ia32_sys_open+0x1c0/0x1c0 [ 2362.810542][T18781] ? syscall_enter_from_user_mode+0x21/0x70 [ 2362.816431][T18781] do_syscall_64+0x35/0xb0 [ 2362.820844][T18781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2362.826754][T18781] RIP: 0033:0x7f0d3da40ae9 [ 2362.831160][T18781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:31:50 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x8, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2362.850934][T18781] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2362.859350][T18781] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2362.867314][T18781] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 2362.875273][T18781] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2362.883234][T18781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2362.891192][T18781] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2362.899358][T18781] [ 2362.908863][T18781] Mem-Info: [ 2362.912188][T18781] active_anon:290 inactive_anon:155695 isolated_anon:0 [ 2362.912188][T18781] active_file:5874 inactive_file:104804 isolated_file:0 [ 2362.912188][T18781] unevictable:768 dirty:88 writeback:0 [ 2362.912188][T18781] slab_reclaimable:23858 slab_unreclaimable:118477 [ 2362.912188][T18781] mapped:63308 shmem:9687 pagetables:1832 bounce:0 [ 2362.912188][T18781] kernel_misc_reclaimable:0 [ 2362.912188][T18781] free:1154467 free_pcp:10069 free_cma:0 [ 2362.960913][T18792] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6558000000000000}, 0x0) 07:31:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xc0}}, 0x0) [ 2363.001574][T18781] Node 0 active_anon:1160kB inactive_anon:621980kB active_file:23380kB inactive_file:419216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253232kB dirty:448kB writeback:0kB shmem:36300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 276480kB writeback_tmp:0kB kernel_stack:10196kB pagetables:7324kB all_unreclaimable? no 07:31:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6800000000000000}, 0x0) [ 2363.043843][T18781] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2363.088869][T18781] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.116973][T18781] lowmem_reserve[]: 0 2645 2645 2645 2645 07:31:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xec0}}, 0x0) [ 2363.123054][T18781] Node 0 DMA32 free:648512kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1160kB inactive_anon:626048kB active_file:23380kB inactive_file:419240kB unevictable:1536kB writepending:476kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:37596kB local_pcp:21820kB free_cma:0kB [ 2363.123692][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2363.157219][T18781] lowmem_reserve[]: 0 0 0 0 0 07:31:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x6c00000000000000}, 0x0) [ 2363.188651][T18781] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.224611][T18781] lowmem_reserve[]: 0 0 0 0 0 [ 2363.229631][T18781] Node 1 Normal free:3952192kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.259848][T18805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2363.261433][T18781] lowmem_reserve[]: 0 0 0 0 0 [ 2363.278214][T18781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2363.322788][T18781] Node 0 DMA32: 875*4kB (UME) 538*8kB (UME) 455*16kB (UME) 301*32kB (UME) 134*64kB (UME) 45*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 147*4096kB (M) = 650636kB [ 2363.341933][T18781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2363.354158][T18781] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 158*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952192kB [ 2363.373798][T18781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2363.384098][T18781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2363.393458][T18781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2363.405658][T18781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2363.423733][T18781] 57308 total pagecache pages [ 2363.430157][T18781] 0 pages in swap cache [ 2363.438954][T18781] Swap cache stats: add 0, delete 0, find 0/0 [ 2363.453312][T18781] Free swap = 0kB [ 2363.462254][T18781] Total swap = 0kB 07:31:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x9) [ 2363.470657][T18781] 2097051 pages RAM [ 2363.479533][T18781] 0 pages HighMem/MovableOnly [ 2363.489946][T18781] 384517 pages reserved [ 2363.498678][T18781] 0 pages cma reserved [ 2363.508536][T18781] ptm ptm0: ldisc open failed (-12), clearing slot 0 07:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2f000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x7400000000000000}, 0x0) 07:31:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x33fe0}}, 0x0) 07:31:51 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x9, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000980)='./file0\x00', 0x800, 0x121) sendmsg$nl_route(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c000100190020026038b12032fc04002500030000faff6049b80e2c1c04"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) socketpair(0x1, 0x20000000000001, 0xffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYBLOB="a5003b294a2a0018607000ffdbdfa06b000800080002149ae1b57c95a5296b00000080000000007ec3127c8201704ae9f4e4a29aaf113f6000"/68, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b347182f9582f7bb374f0573e8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f99e7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed4a0c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1edb3e1515b9853f730d800"], 0x3}}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="ba01000015e902e73ab82083271a850455e66e48f8ab6340fbf34259671d74010000000000000021964771a5daf364daf34a7bc1bdf18c4ba9d5f8199775863f84c471d71975672ce83820e109d40ac49511d4cb9a1fdb1d41f552acacdf08752840baf9b3248f853c3a0866b8c8db05c01d17468f1c5702d54280d0cb1cbe631c4f47acc100a4918dfce089dd08d527ffcb2f6588d51a8e89ad3e61a114bd7bd354865812ad283fc8eee46cb7fd999c5bed57fa62b96c8ce7e87e01d6d8fe54b2269bffb6fd8ffa67c6cdb3674521bb7b878c88a057ed339f9310f7db66cd1e19c9e0a1b4d455511b70647dd7e8142f71bdfc69552f0883880ff0dccd51b95504d22279135b3df122fefee05f71250da37f4f3f14f504e1c46cb6a2cbf6fc70aca58b97e76ed44000000000f3dfbfee8023f99be68e76782d479b9f7d26ddef0e6adae305b9aac8055180ccf555d429e58a7aba6df0291b88237fe41e711942095e8c02e26a22675bcc54300094a1af5ce11ffd1104db9f71eddad711c00c24e90f8f90866300f81ca06d66f4b17915fef24a7a6b8e7c1e80d3b8dffff2c96c77a578875c793445ffb3ec7ca8696d288552e6df1039c48e4ceb77f51b14127fcc001cc3248744d462b43d48cba20ccc3d40be923594a7b65b737fb9983a45164b8f701996c7d1d0886f604d179149c2deb908000000e3006173372860f0c57226fba67d795b32fc319e249dec", @ANYRES16=r3, @ANYRESDEC], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={0x0, 0x100000000, 0x8000}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="3a303030303030303030303432393439363732393745a275dcdc4c2a414ca3b683c182ec93e34108cad04b414866238075581e26d24a6c859261b920c3e7637d29b85ef4cd61599bd6114818e896b078f2ca372bba28295f60985f30f79a85c800e2d46a3bfb1eeb9583d8b01381a781d10cfdc5519e8fd5aa2a92fdd198caeab62b8e99f59b01afdccc8e845931ad6fd5d25fb2"]) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000015c0)={0x0, "5d14c3c88e62a750aad979eaecc04692"}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000480)={0x1, 0xffffffff, @start={0x0, 0x1, "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", "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"}, [0x94, 0xffffffffffffffff, 0x6, 0x5, 0x800, 0xffffffffffff8001, 0xac, 0xcb20, 0x9, 0x9, 0x7, 0xffffffffffff7fff, 0xfffffffffffff001, 0x4, 0x4, 0x3, 0x4, 0x5, 0x2, 0x6, 0x7, 0x5, 0x101, 0x0, 0x8000, 0x2, 0x0, 0x20, 0xe2, 0x9, 0x1000, 0x6, 0x4, 0x1000, 0x81, 0x6, 0x3, 0x1, 0x655, 0x4, 0x100000000, 0x7, 0x1619, 0xffffffffffffffe0, 0x4d4, 0x17, 0x8, 0x1f, 0x5, 0x5, 0x9, 0x7f, 0x8, 0x9, 0x81, 0x1, 0x0, 0x4, 0x7, 0x6000, 0x0, 0x0, 0xfffffffffffffffc, 0x400]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000025c0)={0x0, "6f854baf87aa642c14ae3970888b58ad"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001780)={0x1a, 0x6, {0x0, @struct={0x1f, 0x9}, 0x0, 0x8, 0x1, 0x1, 0x9, 0x8, 0x400, @usage=0x20, 0x6, 0x8001, [0x0, 0x7fff, 0x3, 0x7, 0xdf, 0x1a67]}, {0x5, @usage=0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x2, 0x7, 0x3f, 0x80, @usage=0x40, 0x7f, 0xcf27, [0x100, 0x5ac5, 0x0, 0x10001, 0x1, 0x1ff]}, {0x5, @struct={0x1000, 0xa1e6}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x828, 0x80, @usage=0x4, 0x3f, 0x3, [0x80000001, 0x1f, 0x4, 0x2, 0x9, 0x3]}, {0x5, 0x800, 0x1}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000ac0)={0x0, 0x400, 0x7}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000140)=""/195, 0xc3}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000005c0)=""/91, 0x5b}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000000640)=""/254, 0xfe}], 0x9, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6, 0x1, 0x4, 0x4, 0x0, 0x80000001, 0x210, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x7fff}, 0x203a, 0x26fab503, 0x3, 0x8, 0x3, 0x400, 0x65f, 0x0, 0x86d, 0x0, 0x1f}, r4, 0xa, 0xffffffffffffffff, 0x3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x9) 07:31:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3, @perf_config_ext={0xffffffff}, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffeffffc, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x4, 0x20, 0x20, 0x0, 0x4, 0x88e40, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x6, @perf_config_ext={0x5, 0xff}, 0x2020, 0xfffffffffffffffc, 0x0, 0x64fe94e9a0433fb5, 0x2, 0xf33, 0x1, 0x0, 0x0, 0x0, 0x10001}, 0xffffffffffffffff, 0x6, r3, 0x1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) recvmmsg$unix(r2, &(0x7f0000002d80)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000001440)=""/188, 0xbc}, {&(0x7f0000001500)=""/208, 0xd0}], 0x5, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/163, 0xa3}, {&(0x7f0000001800)=""/131, 0x83}, {&(0x7f00000018c0)=""/251, 0xfb}], 0x4}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001a80), 0x0, 0xffffffffffffffff}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000001b40)=""/127, 0x7f}, {&(0x7f0000001bc0)=""/128, 0x80}, {&(0x7f0000001c40)=""/13, 0xd}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/23, 0x17}], 0x5, &(0x7f0000002d40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x4, 0x2000, 0x0) perf_event_open(&(0x7f0000000180)={0x2e199bdd10e38dc2, 0x80, 0x4b, 0xfa, 0x7, 0x8, 0x0, 0x3, 0x20200, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc7, 0x4, @perf_config_ext={0x5, 0x200}, 0x988, 0x1, 0x800, 0x6, 0x5d, 0xfffffff7, 0x7fff, 0x0, 0x3f, 0x0, 0x97c}, r4, 0xffffffffffffffff, r3, 0x0) [ 2364.091225][T18821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x7a00000000000000}, 0x0) [ 2364.150077][T18824] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2364.188552][T18828] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:31:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x20000278}}, 0x0) 07:31:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x9) 07:31:51 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xe, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2364.241934][ T9050] Bluetooth: hci2: Frame reassembly failed (-84) 07:31:52 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) sendmmsg(r2, &(0x7f0000004780)=[{{&(0x7f00000000c0)=@caif=@rfm={0x25, 0xcd, "7e29ac61252bc508b45eff29d6d830cd"}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="89392f866d3c1133392ae26162632d4a768647922a1df525849e333398a8783c7991018b04feb852f1c69d37795688193b54e8bb60fa5c236b5490e43fc29757a9cbc029358b962cf88582a4854b4c05a3f91cc6cceeaede464fa58f1771e6f4a69457c802f8bc6c846918926b5f45782e0d9104c65c302fc1724070f9fec1a7c06fbfd43d43890ad7b33397db9d515f", 0x90}], 0x1, &(0x7f0000000440)=[{0xe0, 0x118, 0x3, "2fe6ad139f6b72b60f36e96ed7ef289c6f15f8b1baa7ec74bf7623ec7d298c5726e242f976e6e2e557df0bfdbb589c3f0d2e73830e68044a5144f1acfde5740575d4c5e5f2509e3bca8b55026ef449cfdb89ef1ad101e80f93732bb3d010edbecf243fc2237d829c29d7ab2b3ca06b9561cdc8346d20123e8ee07197993048c7ffa681437e6f7b5278d0c0f6f9cbe836d66279ef7fa0643f57d261b17e04b6290532ecd2868bb2e62aeea7d83c33916103bf7a2c4442064926e5890602e8f49806a75a316e859c53588b00ed"}, {0xd0, 0x102, 0x4, "5727ee555f42024b968c06539f9150daee2f74a97baae2b1f6005c8af408a41afe7994bedc37ea32bcddc330daba8c79b3fb544c3141a9c72cf25daab910568efbd435c0a08540df74f7dab6fd9cdc6e3e0c8e364ab6f5b5ea9906a997ff1d7bb76ebf51e3dd9b6ec09e43bac84366e4c85f67f5e9492fd18a6f6d5125598da44107b0735dbafc34ddf04ec9026ff0d00f2e957a5a22ca19ced9eade40afaab1b49eee01281147e3fd4a515d9fa5556d257d2f2ac8bd1b7a92db16dc536aed"}], 0x1b0}}, {{&(0x7f0000000240)=@caif, 0x80, &(0x7f0000001700)=[{&(0x7f00000002c0)="090892328a6e4af2464600eb969883fd2e628a2b5eb2da3ae9b1", 0x1a}, {&(0x7f0000000600)="d7a6ab7ae8959348b45bcab0425b591fb4e9644b57c5501de17801afba487e109e2156dbec3a9ef283ad68c355e0404626e03ac5ec141f8ef37a0b3be98b9715d03ac7f0b898b433c0c9cd4f8a10c1b661ba8fb7082ac8d3d4d65345a2aa339381e739de9dd851514e681e90f491a1450a9ed34bd43d53e50a2de1359b3cbdf8bcf665afe95bae6906bef1b8faf8c928961133495df0a286af1354cc2e7a9797dd0e269dba561b65c5c4ff5b513d99e235aa25d14c06467abc16dd45cea4b967d84c5770f5bc2c", 0xc7}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000300)="420e7e58022ea2b76d4ad9e2ec387b92c1a43be6f10ea7042ac497ad8e5c43bb5704136e33aa339026a54a83", 0x2c}, {&(0x7f0000000340)="1768d806acdcb7", 0x7}], 0x5, &(0x7f0000001780)=[{0xe0, 0x10e, 0x100, "81326b9fe4e8f6a34b6c43a9daa733aef260d5b6166598c97c1c71541487103c797f0c928cc44e2c2696628e9cd5ad720fe84bedb209b6fc41758a15dc3ee2e729cb803f80606b247c36f28ba7521d41222ab46eab090e0b9b9a792e422cf308e0a7bb40896113560598e84d434fe7438b8cd262653c5ee4f2dac8afca4fd23bb1f4b37ca82c129283ba4747a938c5ffb545afad3aa695d193a94ba771a2e432a1813e17ba900a0990c409364b0dc5ba20a7368646def72d9843cb14e4a1fa88d97359f7b0df3d56d20d9c24"}], 0xe0}}, {{&(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)="ff226ac0a89c80859e1ab2d0dd34f7d2101385407db2ed909983f8b59554ae1caa6ed8e84ab81a8b68ad7c8b07e822eb48b4d15aa2bacbd01251c00ef4bf39212cc46291bd789e3ba402ddab10350751f6ad9c391701ba4df3fc3e8c9f81904016f75fe983c74ab578a1a9120997", 0x6e}, {&(0x7f0000001980)="918a217bba5786968df4ab847a2a501f577498e2eda3c4ff1280f0ae3005fd28127a46397c59444bf930842705857190e019b8ac9f36eb533108d1e2df651aa08a62087a766d103f8a5fb3fe049cf7848d16dbf3017e58ef80787c8502094d0cb43239e40a04852a159e1ff54647e1c6087838ae92eb0707f0aaadff4dba50ed4f191c59e627fc4ce0d499", 0x8b}, {&(0x7f0000001a40)="1835943f00d3c83bf050d187fd60485f60702ec5222ef3756372d69545918270dec41ebb8a6b414a9a1ff6c7b40c99681d5054a1690fef039eb858b494f3dfeecfc8ff485556a34b4c1605422770e37ad1eeadf6cd31a26194dfef6f2154eadc3affe90d71f02e6753167019afe0b308a17d8f776c7b108c98e29f380ca1a56c5a529b7ad60f2dc30d82d7037ec160b80d374823f4d7624d0fe97b48", 0x9c}, {&(0x7f0000001b00)="82233f4b3d2fb5e486684fe693aab26a32787a7088d5f83500494259caf01f252f4c5d2c16346be0b2ccf431652762c8546f323682c9579b2e91eb733bc0c42e3ace4dc2f9e1e71eb19a57bdbfe9c767e92b146889b6", 0x56}, {&(0x7f0000001b80)="f61197b4b4e44b5b800a0df74fa29fc41e2ae523a0aeae8c96a00f0899f884a77846", 0x22}, {&(0x7f0000001bc0)="225853a70fb151e7f23dbd8bc0df03f4b607d0ec2c20ac95996c4a33577604ca8c8059", 0x23}, {&(0x7f0000001c00)="f35e02681a43d457baec7a580beeb85fc94021fd72fc00e6237b08785179f3586d9f6ab128ffaf91c04c554cbdec4e85298a24ddbe00d70f25ae048fcfb30f5678c125969bf4455e2a3ff4c391b50e24f51d91dbfdd65f43e6f83efa81e5d199dae06d769ef212c72759a782a779d0db8555316f3279658d73322c43ab4870da5a0b9d43ea79ebeb6bd388cc05bbdee84d91eec3664959e9dde9", 0x9a}, {&(0x7f0000001cc0)="74c7a7ce64b6fa602da36b63e9f1c92c63e1c808335e4062", 0x18}], 0x8, &(0x7f0000001d80)=[{0x98, 0x88, 0x81, "557627196996934965fb0a6c1671c610b003a8899822a54aa61124b7eafb9b76dd97f9bf9f64252ba55f5b41eb36f2f7c3e7a15efff83afde896f4a4595a28857351240224041746d04674fab64c4529656724a8f084d816704183f85f9d085cedc3ce88e383c368d8c2a8b87b9b92e0159bd544d751cfc62a810a0a0f95cc6e78ddf69ec3"}], 0x98}}, {{&(0x7f0000001e40)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x78a0c89}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="0b83ce0a7ee181e87c4483bda762de4d768398c248ea7e3d54e535e529d8e747d51c29dbcc1823f80d79f527575658be5dbfb2d1e9215d689e495a9a50bdea9ca6c7040a4aa8ecdede3f74ec6cae1ff7be18e4a9b2e32732f55120c553ea9403196a56cf98cff1", 0x67}], 0x1, &(0x7f0000001f80)=[{0x48, 0x111, 0x20, "0db1fbebf9b9d847a6804196ca07c80a347f63935ff9f2215423d254a3911aa56047c65f2329fdff7e5aa8c44a7b84e8d8b6094f72"}, {0x58, 0x84, 0x8f, "489f3264ad11508b925821b0d534e5aeab05db170fe873faa06dd9506cd57ad9388d599fb256a2b69fa90116a2d054fb684fb2a1918ebafb10c2f0cc6c08ab07e66d762ad14bb9"}, {0x30, 0x112, 0x0, "73ce2c32c0c80068d1bdaccdba10a1ce3ec802700c2c8c69725341999958"}], 0xd0}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002080)="f57f50a96c6cb71e212b4362ecd00aaa367b4c754f38bc89302d0755a699cb3f6ce997ca091c65f61c11d0458661e7edbd473474292d4a5e0e3f57595e39fc69352d44a0a05c55cfba843bc59254c17e74ab75b38f45b8c2368e12f75289046e8080160a373cf7f7ab346e1e712dbfc3dbbb2a888112b7a025a2e7473612389d352b20b3b02e1ac1a39e526f4952b56ed1476bdc0f699d0ef119e56aede9d875d1c83a862dcefe47cef48413d13181766a2a5e3092649c380d347ad2738b4236a7fbfb11c72e7567c6d278ff809683e80588714856ec553491b09c8cbe83e76c5544191ba0f638f6", 0xe8}, {&(0x7f0000002180)="83e2dba7eedb79439bfbb1d347a3fee7f39d04f3837a163c2135e1cc1f90371b4176ae90d4efa63fd85b95a00b6b1b1e6181d062645f8df498362c60d165d2985e305f653bd23550a34ed827e4d89df94c8a0a1f8e509b95aaf8c1f093488d7cab3f931e25411d741abcca3822e8dd7c483e887b18d5cd6ad2724216a2e393f6b141ad24542b6b1dbdd23b4741a097124c5ee5192b71fbb2e8a066bb69844cd4dd9857d88c87c92e391d06fdb29195a8da2b0de97895f2e7ed2e88464243ffcae155e7a3b1bd77497c1df7d6c7520374e8a6312b7498bf4e308536f6b6dd", 0xde}, {&(0x7f0000002280)="3197b43f352555a4d612aafa509f88814ff35d5e3d70d1ca346035e581d8f93bbe2330f9bce0d6713c51cc6cdc565be45ef9ea9062d519b1744b1ea8c27c3774", 0x40}, {&(0x7f00000022c0)="4a2631b6e5234c849c738ba06bf417401e8feab702c82802a8b673028bd8aca2ae1edd258fe26a0588cb64f10b2d5d922603d29e2261faa5e1f47a6b37148c7a2cbbdd0507fd3a5b8aeb57babe8ef47b13a591c7e18674e8594d2b4069194932b2932142b90b2fcb46cfebe99d4a0ced903dc23627da3832635270dc98ae45d2d773a570db16ebc4caa9dba5331694c00db9cc6acf9673d5b836cd5b3b2fed8c5d230ba57732e64a7cd156f61d6a59552432d48180b9", 0xb6}, {&(0x7f0000002380)="fbc022e51566f4062fc347cf433dd61b59c5b5b2536a35ea6a55d805d2f0d44e98a20fd2d404622fa5a84de134d26e26ff6643e725979901c2f66704403b999a6160692d15e07054bac005ac1611842bdc3c4eab008f735e4522427e1399b44b6eec8b2102770045a700320dee1e5c935953ffc10ec018f7f238f8c6861a60ad38", 0x81}, {&(0x7f0000002440)="e7d44c6d9f476e99d4344149e0db6e093b0810f542f7ff3ae8ca59ebc20799306d1fc86bbae5692377267f54746b8dc2397cad913f88ba79e66b00301968491afdb048c0c68e6684ff011c0b004bbc66a3cdd42373084f689d077e0c572586e4c734ba022b2ee62699ce95be95b21599c3ab05612a8dde17b949882e10c80738cb8ead808f4f9154bc005590180e0d80ca2f916602e2ace836ffa65b682ea34d0a2bf6bcb4998ff60cd0a265e3417d3adfbe7cf8218d967b697a15b126ca4898cec84856790b7384fb1702eb9dd549105e4055", 0xd3}, {&(0x7f0000002540)="f18ae20cc7629958", 0x8}, {&(0x7f0000002580)="b4cea8839bc61990be9304eaf76eda155fd53db679ca676d2304dd6c538ebee43fbad5d7c9aa351752873c03948f46cdd165af43b9f8e3e5f2dd04c61850bb46f252", 0x42}, {&(0x7f0000002600)="dc22876d66cd7763728d48ad3e575671e7324b7acf36c776f7666edb2acc6f65179ce3ecf4cc940b7476788fd64c9264b1c77fa5e310856c82d1f31dfa8f0078104da3f991696412e415d842485f93f3106c9a8227e2ead61b2fe2f65d99836d47e947858f5819f9655144b91feb43c5766b8cee63a801f5a7bbc69d07050b72bec3d3fac950370d61b9e1cb39b0891e68256ae288d9323e7dac286b1ca003c704c961b4f6e6071ce7b3f224ed7a2bfa8c2c99eb99feacbfba5f76524784cc5bd834c7b92821274e0bd1eb779e39fe5ca19909650c2ca7f9c943df778f7be6035afe39dc4a0344af3ab3557d417ccb3fcdeb71b0ece89d6dc2", 0xf9}], 0x9, &(0x7f00000027c0)=[{0xd0, 0x0, 0x1, "4014c3504ab95098586977f0bb3bb8d4b90284740548f3e657897ed650a80d2989c737052787d21d05682c9db743992d767cde5b4bc5fd769400fe85fbc1eec4ecf475bed903123c86ffb3f917fce45371fd425235a1ae0245fd16879319d69b4e779854ab90889d213de72e5547b5a9c0621362028d79e67aaa4a766da8fa64f3bd5c4a899ac07a0e5bda5bca52062176bef228ee9bcd65de6f4402f4ffa01e8b48d841572dcd472de1dfbe12eae207ae0f54b342a0a57cc9bc"}, {0x18, 0x10d, 0x54, "b8496779440e346e"}, {0x68, 0x112, 0x8, "d28e53ad6aaccaef6d2434a9015b6fb0087d7ec4784e8d70cd8d48097c9dd4ba873ec4c902749c8abde77d20e57c463a2861d2471bbcccb813be9506051962d4331f8208ae4f3fa2cb27dd9ad4db86a95f22"}, {0x30, 0x0, 0x0, "45e15caae6af9e43f03e809dc105c2ab2db074402f8ce4e378d9c5b5"}, {0x78, 0x10f, 0x0, "223a667dca5bb7e38b8bff74f905732d30620163509e1245de0630d65cf70239daca1a4a134ab434d88bf2d9d90c4a2c72c91b51b97fd1768f4f67832ac0f21ea97e545cbc6b335ad4cb6b36fb6158eedcde841be28af4a778ba37b5c650b475cb2643"}, {0xa0, 0x10a, 0x2, "e9424028db3790977ca7b4750622960dc4bb253c1808febe4c9eb0847de03692bd703ab4bd8ff285fd2eebd15c151dfb73780d46df786f35958db5403a2e6918ffb5136b5db49b72484a7846f3732d01139600969a0043ddf3071e8f807ea4526130d4b88b6dbb7be79c956abc1263576dadba202bc84458ca2ab8ccda99865d28e9b39a0ff4dc271d0a83aa"}, {0x60, 0x6, 0x9, "969305caa08ef97500c492a2ad53de751e52835e3c5891d4f35a518ef203810a0f8dda65494b058e02f3615f2fd7910eb3778ac7938f2450f04f6d0d48b16d8a0a15a573463469537ac0b0c0a5"}], 0x2f8}}, {{&(0x7f0000002ac0)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002b40)="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", 0xfc}, {&(0x7f0000002c40)="01ac7e671fad6d8fd178d349f8c976e0932cfaa7b655226866bd6b8244013637a0693c01f292330655d1e63cb1c501c9546683cba3033ac814d562277a538fde5d44a9140ef4600993c0c39fba05b8bec163de5132199f217d0efb0c5777f8067cd5e567bd2822e4df9328e5acf5337792206d09f0328dc8f318c8c86172dc432014c2f570675ea3411215bc36d9d4dd2e538914f58c6c300bf709afec42dc99adefb2906df5f9d20b3138f6d8b25e4b7b17bd674324f8dcf6dcfb710d56c552e02538653805cd6ab022bda89c5eb415f7e891c3c74a7494aba7422e5bb4c2bfc4ff174413968eac0d66a4f8ac5bbc3a732810a4", 0xf4}, {&(0x7f0000002d40)="96c97ac0da548992711d78e55a2055a367c055", 0x13}, {&(0x7f0000002d80)="f3a36985d59fd8b8ad9f7110db8860235d13c2e6222fee091684f9f97471e20c0b94c65bf1598c6fffdbe573dfdcfce2250c3533a7e0437c64a851898f0f1255e3c93ce8ca5ee3546d64d6798c1b7bd0bc92b4e20c22303ac0b54242ec08470eb68c6f69a3bb2d6e51b5d97a62c51c70e6f9327734037e2510c90ecf5e27e8fd6b04b5b639c25e669d1d9b4bfe4126cd7ce00006b836ed3d4ae43889d55380939125451c88c3997229f9566a58608676da3d5c22774333cfcfff07a7fff1d09eccf9f9de43d92f89", 0xc8}, {&(0x7f0000002e80)="8de85b6891a82ff381106aa523b275f32e25fdf755b32784083c6d572a7a440b4991f70cddb1e361cad9589e9bef15ef4e5e940f8118e83a05304fba52d27a5869ee0a5eb0732e7997f1303d922c2d", 0x4f}, {&(0x7f0000002f00)="6c126b16487953cd0ddcc81b14f6c1ca03c21b9c95d4832fb6890b69f0080fbb2e9beec5480f1ac835943a904688d0c8d4a47a66d7cbe866317d90c1fc354e4cd51445479c25e0dcb4d9855c281b00ae6e4c4845ed2cd8a6a5adc0a1570aaa619f76e271b04d98faffa7815fd9dee43285a23b8c4a61fa604dd153c6a7b15b0f9dfc2c853ba263e40a6807dd6c614784e1aaf78c97a11a02ef81c2940dd8e9923d0d7baa52d07c8f8134665c98f21f70c752427a0f1a0ea1384996e8cbcb61a2a5914165855e460b245f3290e381ea37d4e93a314cd474baccda4d244d4f3c8287cfbe3bfd5f", 0xe6}, {&(0x7f0000003000)="9cc394cc0ccb4ad0a265466bc9603d9588bf1f3c2a7b2696a6bc6489266228b5f88707c1d826b115c7c62ed50c796b12207256c7215d66c2af1ed8d708fc93d360", 0x41}, {&(0x7f0000003080)}, {&(0x7f00000030c0)="95832481376587ff2355eaddf707dd6d599d971dd05ca1883fea2b30320d11d6adf9725909834710cabef00a56229071917a57dd0b491e323314ad9c87cbea875d819befa7e3f5793e7c0b2ab1636ef345da8505c9322b5843a23fb79d203d778a6eb8be3a1eaf86154429bc1faf4d4fccf06184fb0145d6305ed2776d873bafafaef375dcc904800ea644306a67504758c4bd4730c653d1009fe7b48317c9a3c9720d22658c177df861aa16c86c563eb7687b6076695c38533f03477ab7a89d09feaafc971fd6bcbb106bc29c730bbc", 0xd0}, {&(0x7f00000031c0)="5f3f4a0c396c1fb0496fca13d68e274fec570a36ccced9aafcfaeffe24a96a7beeb2dd49e6c33c9bb66111b25472a0610139a1e255326f50590e4f1817df179c0dbb3c95d7ba7527643661f5e8cb0911c697674ed2c5d11658aea1f47de9190fbad25d5054ec93d9040018ec9334", 0x6e}], 0xa, &(0x7f0000003300)=[{0x30, 0x102, 0x100, "224b46e4ffc1ac2a0d780c52b3812b4397bf415dd0b1985dd6"}, {0xa0, 0x0, 0x8, "cfb555e31afb64609ba151d8205dbc9b14364fb1d4a8ea84f1ff2a8218e9da25911fa4c375c404278f051e0e4e9ad6ea945107a82b26a1a254658f65df26679ff5f849c5c97121e5003f177810f138e8aff41202916c4bb915d31120644ae6aa84a8fdcc14af57f0226d04b5bce3d30e5de97e794eec458303087b14d06cb867d08dd54a9e165b2c00698d"}, {0x38, 0x10b, 0x2, "9815c11061e8069e943a2431db5e61b22924f1f5041c65d999e9b9455d08d71b7a2b5f7994648f"}, {0x60, 0x10a, 0x3, "d9d831d5530945b047e5c64cc862755eeaa1265e7eaf425285eef5ae224d35ff5e7e5727661c9d47cc7d4986c1cf7ff855045991ee84e02edc11b9723ad74701039749ffc21b0cfd28bfd82b"}, {0x58, 0x101, 0x34677379, "98cf06dbfe318d87f56d9f465bc181c687b8ee028032bab7817d42dfb16f991a3ad3836a43e20c03afa257b1d558b33267745086660fbd5ec6c65fbd294a33f01447"}], 0x1c0}}, {{&(0x7f00000034c0)=@x25, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)="949dfa84c7d094bdfe3552d76c06033b98cca41a45cd1fece46ab78c92de74352b75f3f361611b0fbdd71732fad423df3c894413311e5feb55c458dba0ae3b9d38cf2e737e376fe5345db8a08f7196b35728a59d52e454e74b0fc3042ea28816b3de75c5a524c55ddc7549d3c830f9fd74c09efac20f328c9f10154cb2d9b3f04fa354be90d80354bd85586dce703e46333a5587badf5e7b45a75c8c654f79ba8ef1f57379074400a95e5ab2383d7dac341bb7fb1c28801759fc55a61060fbc69b4edfa3d112a4c21b7ccf311d7c86c292a2a5808834e3fc7a8d856e38acc0d99ef2cd6accd231593ea71efaef1db5e2808bad974d63d8b021", 0xf9}, {&(0x7f0000003640)="7f2382fbd25f99e4c4bc32ec8da9b60f5a8236398bb441bdf98bd4bb4d0354612606dceed0ead44c456c6ec2404af91d6cb946142b23bfb8bcd383010ffcee8f42ec0d0c8e319b46a49d6a190128d67840eb94e522e0cdfa872e8f6007a1616e5d7244a41141a71eeb3e29d7eb538ad7d59b5befe741b3bf63bb7ff15e4603c7b8ef0307e1108860215a25f49c01f91bea4613d822", 0x95}], 0x2, &(0x7f0000003740)=[{0x1010, 0x11, 0x8000, "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"}], 0x1010}}], 0x7, 0x4000) [ 2366.279014][T10399] Bluetooth: hci2: command 0xfc11 tx timeout [ 2366.285577][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:31:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x37540000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:54 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xf, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x8100000000000000}, 0x0) 07:31:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x200003f8}}, 0x0) 07:31:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x9) 07:31:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x8103000000000000}, 0x0) 07:31:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x7ffff000}}, 0x0) [ 2366.941578][T18870] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2366.986446][T11461] Bluetooth: hci2: sending frame failed (-49) 07:31:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) 07:31:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x9) 07:31:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 07:31:54 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x60, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 2368.994227][T10399] Bluetooth: hci2: command 0xfc11 tx timeout [ 2368.994334][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:31:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x3f000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:31:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0xfffffdef}}, 0x0) 07:31:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 07:31:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x9) 07:31:57 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xf0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:57 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x49245, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {r2}, {0x0}, {}, {}, {r3, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r4}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, r4}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0, r4}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {r3}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r4}], 0xfd, "d4c90300"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {}, {}, {}, {0x0, r133}, {r39}, {r51}, {}, {r92, r100}, {r127}, {}, {0x0, r56}, {}, {r66}, {r103}, {}, {r113}, {r48, r4}, {0x0, r102}, {0x0, r77}, {}, {}, {}, {}, {0x0, r46}, {}, {r5}, {}, {0x0, r17}, {0x0, r126}, {r101}, {r87}, {0x0, r13}, {r131, r108}, {}, {0x0, r119}, {}, {}, {0x0, r19}, {r73}, {r40}, {}, {}, {0x0, r32}, {0x0, r11}, {0x0, r53}, {0x0, r64}, {r67, r81}, {}, {}, {r93}, {r83}, {}, {}, {}, {}, {}, {}, {r120}, {0x0, r125}, {0x0, r111}, {r98}, {r109, r6}, {}, {}, {0x0, r105}, {0x0, r50}, {}, {r31}, {}, {}, {r21}, {}, {}, {}, {}, {r99, r82}, {}, {r112}, {0x0, r57}, {0x0, r117}, {}, {0x0, r95}, {}, {}, {}, {}, {r45}, {0x0, r61}, {}, {r60, r62}, {r29}, {0x0, r24}, {r37}, {}, {}, {}, {r86}, {}, {}, {r71, r128}, {}, {}, {r124, r28}, {0x0, r34}, {0x0, r85}, {}, {0x0, r108}, {}, {0x0, r79}, {}, {}, {0x0, r50}, {r59}, {0x0, r82}, {}, {r118}, {}, {0x0, r104}, {r35}, {r129, r84}, {}, {}, {}, {r9}, {}, {}, {0x0, r61}, {}, {r33, r53}, {0x0, r122}, {}, {}, {r75, r115}, {r27}, {r55, r22}, {0x0, r42}, {}, {r72}, {0x0, r88}, {r23}, {}, {}, {0x0, r63}, {0x0, r128}, {}, {}, {r20}, {r107}, {r12, r44}, {0x0, r114}, {}, {}, {}, {0x0, r106}, {}, {}, {0x0, r74}, {r80}, {0x0, r36}, {r116}, {0x0, r65}, {}, {}, {0x0, r49}, {}, {0x0, r90}, {r31}, {0x0, r8}, {}, {0x0, r17}, {}, {}, {r68, r110}, {}, {r43, r130}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r90}, {}, {0x0, 0x0}, {}, {0x0, r52}, {r58}, {r10, r65}, {}, {}, {}, {}, {0x0, r96}, {}, {}, {}, {}, {}, {0x0, r15}, {r5}, {}, {}, {r18}, {r47}, {r89}, {r54}, {}, {r123}, {}, {r7}, {}, {r25}, {r94}, {}, {r16}, {}, {}, {}, {0x0, r121}, {}, {0x0, r69}, {}, {0x0, r49}, {}, {}, {}, {}, {r3}, {r91}, {r38, r70}, {}, {}, {}, {}, {r14}, {}, {}, {r87, r76}, {0x0, r49}, {}, {r97}, {}, {0x0, r74}, {}, {}, {}, {0x0, r132}, {0x0, r41}], 0x8, "3c1d4c65c79995"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004c140)={0x0, ""/256, 0x0, 0x0}) r137 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r137, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r137, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r137, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r138, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r135}, {0x0, r30}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r139}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {r118}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r139}], 0xfd, "d4c90300"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {}, {}, {}, {0x0, r263}, {r172}, {r184}, {}, {r223, r231}, {r257}, {}, {0x0, r188}, {}, {r198}, {r234}, {}, {r244}, {r181, r139}, {0x0, r233}, {0x0, r209}, {}, {}, {}, {}, {0x0, r179}, {}, {r140}, {}, {0x0, r152}, {0x0, r256}, {r232}, {r218}, {0x0, r148}, {r261, r239}, {}, {0x0, r250}, {}, {}, {0x0, r154}, {r205}, {r173}, {}, {}, {0x0, r165}, {0x0, r146}, {0x0, r186}, {0x0, r196}, {r199, r212}, {}, {}, {r224}, {r214}, {}, {}, {}, {}, {}, {}, {r251}, {0x0, r255}, {0x0, r242}, {r229}, {r240, r141}, {}, {}, {0x0, r236}, {0x0, r183}, {}, {r164}, {}, {}, {r156}, {}, {}, {}, {}, {r230, r213}, {}, {r243}, {0x0, r189}, {0x0, r248}, {}, {0x0, r226}, {}, {}, {}, {}, {r178}, {0x0, r193}, {}, {r192, r194}, {r163}, {0x0, r159}, {r170}, {}, {}, {}, {r217}, {}, {}, {r203, r258}, {}, {}, {r254, r162}, {0x0, r167}, {0x0, r216}, {}, {0x0, r239}, {}, {r78, r210}, {}, {}, {0x0, r183}, {r191}, {0x0, r213}, {}, {r249}, {}, {0x0, r235}, {r168}, {r259, r215}, {}, {}, {}, {r144}, {}, {}, {0x0, r193}, {}, {r166, r186}, {0x0, r253}, {}, {}, {r207, r246}, {r161}, {r147, r157}, {0x0, r175}, {}, {r204}, {0x0, r219}, {r158}, {}, {}, {0x0, r195}, {0x0, r258}, {}, {}, {r155}, {r238}, {r147, r177}, {0x0, r245}, {}, {}, {}, {0x0, r237}, {}, {}, {0x0, r206}, {r211}, {0x0, r169}, {r247}, {0x0, r197}, {}, {}, {0x0, r182}, {}, {0x0, r221}, {r164}, {0x0, r143}, {}, {0x0, r152}, {}, {}, {r200, r241}, {}, {r176, r260}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r221}, {}, {}, {}, {0x0, r185}, {r190}, {r145, r197}, {}, {}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {0x0, r150}, {r140}, {}, {}, {r153}, {r180}, {r220}, {r187}, {}, {}, {}, {r142}, {}, {r160}, {r225}, {}, {r151}, {}, {}, {}, {0x0, r252}, {}, {0x0, r201}, {}, {0x0, r182}, {}, {}, {}, {}, {r138}, {r222}, {r171, r202}, {}, {}, {}, {}, {r149}, {}, {}, {r218, r208}, {0x0, r182}, {}, {r228}, {}, {0x0, r206}, {}, {}, {}, {0x0, r262}, {0x0, r174}], 0x8, "3c1d4c65c79995"}) r264 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r264, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r264, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r264, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r265, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r266}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {r26}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r266}], 0xfd, "d4c90300"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {}, {}, {}, {0x0, r392}, {r299}, {r311}, {}, {r351, r359}, {r386}, {}, {0x0, r316}, {}, {r326}, {r362}, {}, {r372}, {r308, r266}, {0x0, r361}, {0x0, r337}, {}, {}, {}, {}, {0x0, r306}, {}, {r267}, {}, {0x0, r279}, {0x0, r385}, {r360}, {r346}, {0x0, r275}, {r390, r367}, {}, {0x0, r378}, {}, {}, {0x0, r281}, {r333}, {r300}, {}, {}, {0x0, r292}, {0x0, r273}, {0x0, r313}, {0x0, r324}, {r327, r340}, {}, {}, {r352}, {r342}, {}, {}, {}, {}, {}, {}, {r379}, {0x0, r384}, {0x0, r370}, {r357}, {r368, r268}, {}, {}, {0x0, r364}, {0x0, r310}, {}, {r291}, {}, {}, {r283}, {}, {}, {}, {}, {r358, r341}, {}, {r371}, {0x0, r317}, {0x0, r376}, {}, {0x0, r354}, {}, {}, {}, {}, {r305}, {0x0, r321}, {}, {r320, r322}, {r290}, {0x0, r286}, {r297}, {}, {}, {}, {r345}, {}, {}, {r331, r387}, {}, {}, {r383, r289}, {0x0, r294}, {0x0, r344}, {}, {0x0, r367}, {}, {0x0, r338}, {}, {}, {0x0, r310}, {r319}, {0x0, r341}, {}, {r377}, {}, {0x0, r363}, {r295}, {r388, r343}, {}, {}, {}, {r271}, {}, {}, {0x0, r321}, {}, {r293, r313}, {0x0, r381}, {}, {}, {r335, r374}, {r288}, {r315, r284}, {0x0, r302}, {}, {r332}, {0x0, r347}, {r285}, {}, {}, {0x0, r323}, {0x0, r387}, {}, {}, {r282}, {r366}, {r274, r304}, {0x0, r373}, {}, {}, {}, {0x0, r365}, {}, {}, {0x0, r334}, {r339}, {0x0, r296}, {r375}, {0x0, r325}, {}, {}, {0x0, r309}, {}, {0x0, r349}, {r291}, {0x0, r270}, {}, {0x0, r279}, {}, {}, {r328, r369}, {}, {r303, r389}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r349}, {}, {}, {}, {0x0, r312}, {r318}, {r272, r325}, {}, {}, {}, {}, {0x0, r355}, {}, {}, {}, {}, {}, {0x0, r277}, {r267}, {}, {}, {r280}, {r307}, {r348}, {r314}, {}, {r382}, {}, {r269}, {}, {r287}, {r353}, {}, {r278}, {}, {}, {}, {0x0, r380}, {}, {0x0, r329}, {}, {0x0, r309}, {}, {}, {}, {}, {r265}, {r350}, {r298, r330}, {}, {}, {}, {}, {r276}, {}, {}, {r346, r336}, {0x0, r309}, {}, {r356}, {}, {0x0, r334}, {}, {}, {}, {0x0, r391}, {0x0, r301}], 0x8, "3c1d4c65c79995"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004c340)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r134}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r136}, {r138}, {r265}], 0x4, "74eda0cfab7cc9"}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x2}, 0x0) 07:31:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 07:31:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x9) [ 2369.690444][T18912] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:31:57 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x300, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:31:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x80, 0x53, 0x20, 0x9, 0x0, 0x645b, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x314, 0x1, @perf_bp={&(0x7f0000000040), 0xe352a6154a02dd65}, 0x0, 0x80, 0x800, 0x8, 0xf2d7, 0x7, 0x2, 0x0, 0x2, 0x0, 0x10000}, r0, 0xa, 0xffffffffffffffff, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:31:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 2369.805713][T18927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2371.794279][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0xae070000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x3}, 0x0) 07:32:00 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x500, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 07:32:00 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xda, 0x2, 0x3f, 0x5, 0x0, 0x79f, 0x3008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x10000, 0x0, 0xcd1, 0x9, 0x8, 0x429c815b, 0x3, 0x0, 0x2, 0x0, 0xce}, 0x0, 0x10, r0, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req3={0x4, 0x0, 0x27, 0x8001, 0xe7, 0x4b96, 0x1}, 0x1c) r2 = syz_usbip_server_init(0x5) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e031b520bf239447cc1d5a4ef38d464198e5beea1c7d2414d035861975f5a22a1ef841d3dbf30a08d4d370b2f2001a018ddb611abc", 0x35}, {&(0x7f0000000240)="7e7f32ca19c67b61bd3cf27e22f2a381612d41b15710a395a48ede6f303315ddef854ce7578edbc985271a47a80e9732a99a3e", 0x33}, {&(0x7f00000000c0)="904a76c8541ca0e3413fea721e77e73193b6998d7d104d8281c7d2d342a33f006df1905ba7d08fd6b6", 0x29}], 0x3) 07:32:00 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x9) [ 2372.415249][T18953] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2372.445527][T18956] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x0) [ 2372.460394][T18955] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2372.467162][T18955] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2372.507174][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 2372.521266][T18955] vhci_hcd vhci_hcd.0: Device attached 07:32:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x7}, 0x0) 07:32:00 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x9) 07:32:00 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x600, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2372.554818][T18958] vhci_hcd: connection closed [ 2372.556096][ T10] vhci_hcd: stop threads [ 2372.571832][ T10] vhci_hcd: release socket [ 2372.586377][T18967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2372.597546][ T10] vhci_hcd: disconnect device 07:32:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 2372.702450][T18975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:00 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x9) [ 2372.762933][T18979] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2373.059344][T18955] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 2373.065981][T18955] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2373.081790][T18984] vhci_hcd: connection closed [ 2373.082549][T18955] vhci_hcd vhci_hcd.0: Device attached [ 2373.093191][ T9050] vhci_hcd: stop threads [ 2373.099826][ T9050] vhci_hcd: release socket [ 2373.110848][ T9050] vhci_hcd: disconnect device [ 2374.514125][T27062] Bluetooth: hci2: command 0xfc11 tx timeout [ 2374.524343][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0xbf070000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x8}, 0x0) 07:32:02 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x700, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x3}, 0x0) 07:32:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x9) 07:32:02 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x20, 0x0, 0xd3, 0x18, 0x0, 0x68bb86be, 0x64440, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x4}, 0x148, 0x7, 0x1d, 0x4, 0x101, 0x6, 0x9, 0x0, 0xc5, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r3, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2375.148506][T19000] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2375.168065][T18999] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x25}, 0x0) 07:32:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x9) [ 2375.223767][T19005] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$adfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x5, &(0x7f0000000340)=[{&(0x7f00000000c0)="4dfba191902ddba05cb6e4e4966cb5eafd9ae655300ca2543bd5038ab75f488a61ad27b5ee927b5e40fd0d70a1efe90da2b90f0d5f25772526bbb0649a9faad1084d285fa4227a528f58579b2bcbe936001c27f56e31461f04f268062e1a087cdaae365ee3f0a2c658", 0x69, 0x100000000}, {&(0x7f0000000140)="eb5e07b818b9deed8b74996d5202a9ddb87f6b158aeb317ca37d7649faba9fb06f429dc7e109afbb110777ddc946134fd18ca124d5a07d5b9497449a1ea88335a1485ea895ecdaf559e0cddc0eb180f7e7016dc412cf22e8317abe6596d492a5bf7dd721db", 0x65, 0x8}, {&(0x7f00000001c0)="5b9181625af0fc950ecba75d648a966b73e6debb2b0e856bc0413d0eb7df5f0eb69e766fbe746cce1a8e45b8c9e48af740cae2327ce3eccf25d8e524015197abf0419db83385131bafd55c7119eba84ee5f0435187d4654025cd4e641cf5f1df3621c388a11d88d2b26e56a980fec82103a2c65e85caa16f3cd1171d8e3906a805468ee7d13bfa2f6ece04cb9a2f85761b3b5e469e0fb09db69ad6d4d995f095e4a5de0fbc511d69d469450b8f31aa8ff00d1c700c08a37e5310bcd24e3a065f669548fc18d9de", 0xc7, 0x8001}, {&(0x7f00000002c0)="b2f5f76b0088cae2c98dde6acd84eef09b45bfbb8b513adfb2cd5af86021576d57136da8fb62", 0x26, 0x9}, {&(0x7f0000000300)="071b62df52a1119a83a0c5c79122d59fc336e2cf3cc9184547f1200e144e5c1a807c6051d5758f68b85aaccdba74", 0x2e, 0xffffffffffff0000}], 0x80000b, &(0x7f0000000440)=ANY=[@ANYBLOB="2c7d5e7b2440212d7b402727573a5e2f2e29275ea9702ad15560f93c00000000"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2375.282635][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x900, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2375.346174][T19015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 2375.427719][T19022] loop5: detected capacity change from 0 to 264192 [ 2375.460085][T19022] ADFS-fs (loop5): unrecognised mount option "}^{$@!-{@''W:^/.)'^©p*ÑU`ù<" or missing value [ 2375.495582][T19025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2375.565416][T19032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2375.581117][T19022] loop5: detected capacity change from 0 to 264192 [ 2375.597432][T19022] ADFS-fs (loop5): unrecognised mount option "}^{$@!-{@''W:^/.)'^©p*ÑU`ù<" or missing value [ 2377.314348][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2377.323188][ T9105] Bluetooth: hci2: command tx timeout 07:32:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0xc0000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:05 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x9) 07:32:05 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x952, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x68}, 0x0) 07:32:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6}, 0x0) 07:32:05 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x7, r7, 0x1, 0x7f}, 0x14) 07:32:05 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x9) [ 2377.950175][T19054] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2377.973572][T19055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:32:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) 07:32:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x300}, 0x0) [ 2377.999564][T19057] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2378.099808][T19062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:32:05 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xe00, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2378.151328][T19076] warn_alloc: 1 callbacks suppressed [ 2378.151345][T19076] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2378.232231][T19076] CPU: 1 PID: 19076 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2378.241458][T19076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2378.251508][T19076] Call Trace: [ 2378.254786][T19076] [ 2378.257798][T19076] dump_stack_lvl+0xcd/0x134 [ 2378.262397][T19076] warn_alloc.cold+0x87/0x17a [ 2378.267079][T19076] ? zone_watermark_ok_safe+0x290/0x290 [ 2378.272627][T19076] ? __kmalloc_node+0x62/0x390 [ 2378.277496][T19076] ? __vmalloc_node_range+0x574/0xab0 [ 2378.282861][T19076] __vmalloc_node_range+0x883/0xab0 [ 2378.288056][T19076] ? vfree_atomic+0xe0/0xe0 [ 2378.292547][T19076] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2378.298366][T19076] ? __ldsem_down_read_nested+0x850/0x850 [ 2378.304078][T19076] ? __wake_up_common+0x650/0x650 [ 2378.309097][T19076] ? n_tty_open+0x16/0x170 [ 2378.313502][T19076] vzalloc+0x67/0x80 [ 2378.317386][T19076] ? n_tty_open+0x16/0x170 [ 2378.321988][T19076] n_tty_open+0x16/0x170 [ 2378.326226][T19076] ? n_tty_set_termios+0x1010/0x1010 [ 2378.331519][T19076] tty_ldisc_open+0x9b/0x110 [ 2378.336098][T19076] tty_ldisc_setup+0x43/0x100 [ 2378.340769][T19076] tty_init_dev.part.0+0x1f4/0x610 [ 2378.345870][T19076] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2378.351323][T19076] tty_init_dev+0x5b/0x80 [ 2378.355639][T19076] ptmx_open+0x112/0x360 [ 2378.359872][T19076] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2378.365321][T19076] chrdev_open+0x266/0x770 [ 2378.369732][T19076] ? cdev_device_add+0x210/0x210 [ 2378.374660][T19076] ? fsnotify_perm.part.0+0x22d/0x620 [ 2378.380029][T19076] do_dentry_open+0x4c8/0x1250 [ 2378.384781][T19076] ? cdev_device_add+0x210/0x210 [ 2378.389706][T19076] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2378.395936][T19076] ? may_open+0x1f6/0x420 [ 2378.400445][T19076] path_openat+0x1cad/0x2750 [ 2378.405205][T19076] ? path_lookupat+0x860/0x860 [ 2378.409958][T19076] ? perf_trace_lock+0x2ef/0x4d0 [ 2378.415061][T19076] ? check_path.constprop.0+0x50/0x50 [ 2378.420439][T19076] do_filp_open+0x1aa/0x400 [ 2378.425103][T19076] ? may_open_dev+0xf0/0xf0 [ 2378.429604][T19076] ? rwlock_bug.part.0+0x90/0x90 [ 2378.434620][T19076] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2378.441115][T19076] ? _find_next_bit+0x1e3/0x260 [ 2378.446041][T19076] ? _raw_spin_unlock+0x24/0x40 [ 2378.450881][T19076] ? alloc_fd+0x2f0/0x670 [ 2378.455207][T19076] do_sys_openat2+0x16d/0x4d0 [ 2378.459879][T19076] ? build_open_flags+0x6f0/0x6f0 [ 2378.464895][T19076] ? __context_tracking_exit+0xb8/0xe0 [ 2378.470343][T19076] ? lock_downgrade+0x6e0/0x6e0 [ 2378.475186][T19076] __x64_sys_openat+0x13f/0x1f0 [ 2378.480114][T19076] ? __ia32_sys_open+0x1c0/0x1c0 [ 2378.485137][T19076] ? syscall_enter_from_user_mode+0x21/0x70 [ 2378.491025][T19076] do_syscall_64+0x35/0xb0 [ 2378.495443][T19076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2378.501426][T19076] RIP: 0033:0x7f0d3da40ae9 [ 2378.505827][T19076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.525422][T19076] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2378.533907][T19076] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2378.541906][T19076] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 2378.549865][T19076] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2378.557822][T19076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2378.565865][T19076] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2378.573836][T19076] 07:32:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x7ffffff2}, 0x0) 07:32:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2378.650421][T19076] Mem-Info: [ 2378.653922][T19076] active_anon:290 inactive_anon:158171 isolated_anon:0 [ 2378.653922][T19076] active_file:5912 inactive_file:104779 isolated_file:0 [ 2378.653922][T19076] unevictable:768 dirty:191 writeback:0 [ 2378.653922][T19076] slab_reclaimable:23932 slab_unreclaimable:119112 [ 2378.653922][T19076] mapped:63352 shmem:9687 pagetables:1779 bounce:0 [ 2378.653922][T19076] kernel_misc_reclaimable:0 [ 2378.653922][T19076] free:1153357 free_pcp:8094 free_cma:0 [ 2378.698405][T19076] Node 0 active_anon:1160kB inactive_anon:631772kB active_file:23532kB inactive_file:419116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253408kB dirty:760kB writeback:0kB shmem:36300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 276480kB writeback_tmp:0kB kernel_stack:10008kB pagetables:7112kB all_unreclaimable? no [ 2378.777612][T19076] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2378.841017][T19076] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.871408][T19076] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 2378.881914][T19076] Node 0 DMA32 free:650820kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1160kB inactive_anon:629684kB active_file:23532kB inactive_file:419116kB unevictable:1536kB writepending:760kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:30196kB local_pcp:10032kB free_cma:0kB [ 2378.921653][T19076] lowmem_reserve[]: 0 0 0 0 0 [ 2378.927310][T19076] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.954738][T19076] lowmem_reserve[]: 0 0 0 0 0 [ 2378.959548][T19076] Node 1 Normal free:3952192kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.990734][T19076] lowmem_reserve[]: 0 0 0 0 0 [ 2378.996792][T19076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2379.021139][T19076] Node 0 DMA32: 279*4kB (UME) 549*8kB (UME) 458*16kB (UME) 221*32kB (UME) 144*64kB (UME) 47*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 5*2048kB (M) 146*4096kB (M) = 650820kB [ 2379.040581][T19076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2379.052655][T19076] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 158*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952192kB [ 2379.071707][T19076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2379.083119][T19076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2379.092933][T19076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2379.102686][T19076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2379.114000][T19076] 57325 total pagecache pages [ 2379.119224][T19076] 0 pages in swap cache [ 2379.123683][T19076] Swap cache stats: add 0, delete 0, find 0/0 [ 2379.131569][T19076] Free swap = 0kB [ 2379.135741][T19076] Total swap = 0kB [ 2379.139562][T19076] 2097051 pages RAM [ 2379.143382][T19076] 0 pages HighMem/MovableOnly [ 2379.148426][T19076] 384517 pages reserved [ 2379.152563][T19076] 0 pages cma reserved [ 2379.156790][T19076] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2380.114445][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2380.119643][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5ef2, 0x7, &(0x7f0000000680)=[{&(0x7f00000000c0)="45cbdff15e14a3e72df11739bc3e2ad7493eee4aaf1d82eb0e9d04ef29ebc7c1c6b3a647cd915763296bc42651e8bc42c20705", 0x33}, {&(0x7f0000000180)="09feff88a05d54a759d44f803a7c03c8025aa1bb3e2077cc615e3dab07545cbed5fb73cb4079de0ddce332dc0d76be86d7381910bb6a0017674cccc2983e861a622901e6751b2c2d14a05dbabee7907a250e3cee0a62d52aa68a1dc87a53de4e6cafced9f3a8dcafcb7a08c46ec2bbec5f984bfb7e3cdb56d662a13b57733290c5be379b3c3042aaabd7a08d59fd3ad55fd5bb82abacaf9832bdd77049050350a500cbad80bbf60a297eabf512571e50beb9fad986dea0a2ddb006930cfdfce73d6cede7f0d6da6cd14325119fc52fa2d9ec043b0bc071ef8f11d2e4425e4cbb13fb381d", 0xe4, 0x4596}, {&(0x7f0000000280)="e65c2aeb45f70ca9be1d6c60d0a1a70056c756622618cb8b9de53cfca20a13c35f68308e65d03be21d4824c9d13a4cb4e437eb40b92a075f98fb265068c6d91502a06ff0b9f821dbfb24b379151c41a7f61e01ec0583d9bcde8ee0bcb3f3089e81e11c95d50cf911b047595dc299e49ef9ce3a53fedc7aaa", 0x78, 0x55}, {&(0x7f0000000300)="9a872ab259d230a197c870aed3a28a86324f61af84a2de543f5e7042245f9d0769e7f10dd9e92473215d6e331f51a7d5cb300b618b1332966a900d6384dae95222eb98b828748985f767d5d35fa7a4e049e2c2840ecac83a2861f30a460d390869f680c1709c09f165e9173af3aa1eaf1bfcbce2d5f814fd4cfbaee59ac9ad3de0ac1e3454303b7b206be59d940fddd4615a9c070725c476f20652699eb9dc63ec98e06f7b02dbe29d66935d5b14d9359015f2ad981507c20fa6396db8683ecc1df42a6b9074454de3aa44d254d5761af2c95bb87bbed58242f244d07845ac6b1d6fe9a94745e0c1c09c", 0xea, 0x400}, {&(0x7f0000000400)="363261a06b8597d9973e9dada0536ff6921f54470cba61066c9b8dbd05e50d526b2c38e00d84caa47d24912961bf4c5f1c1a85b945a10b200980aa7a00316ace6728061638147f172c1bb0cccde4081e15c4613dd820875987b663285601f1c58c6104245500ff2b44961b94037995de41c0e9209f9dca9c4a7d799dfec7a191bdf1b347b5c9067670372e807d85d67e688e849047ba236bf7ea9d1a533eac5a9fef4a3b64", 0xa5, 0x800}, {&(0x7f00000004c0)="5c3422e5a7c7a226f89a5f679aa019cfd97fd046566eac26c37832238bb6b2229450fe6e090597d3e18b7ccb052451c75612df8efb033a211819bf40cdbbd344dd0f52c4247cf3eea3c3e578789b74c180950274d3e3c6febc3e40af855b54d70e467572147ee9904e6814e4f381e48c942821997fec42320acacd45b08f5e74d6c74a8c083304c0fddfc0bfcc88", 0x8e, 0x4}, {&(0x7f0000000580)="6447265dbf14111f2c5c1cc63fda613ab65e917242b111b9a99a073706fb906ebd613485cf8986e64dc3dd2ca31e5e92a6bc1d70adffe720a1c752da4563e39f3e60fd0e0cc0a91b8006e6b8ae6ba616276812373995c2df044bae91380a7bc11bfad7c787f0d1d4ef3c3ed665821479d032ccd09fc09f9993a97e51e042edaee2f0031a02e06da0a30a0f509bf06d4f47d3953dfd6cdd413ad1aede7626f68207519281c72546794205fee58a660fc97723a506b5aece1ea11d2de0e41777889b6ff9410d619f55dc870da2ef11044fb5812c921a9a54", 0xd7, 0x2}], 0x80000, &(0x7f0000000740)={[{@noacl}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x8}}, {@noacl}, {@fault_injection={'fault_injection', 0x3d, 0x800}}, {@nouser_xattr}, {}, {}], [{@permit_directio}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@subj_role={'subj_role', 0x3d, 'M&]!\xfe'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '[!]\xd7-['}}]}) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000840)=@ng={0x4, 0x11}, 0x2, 0x2) 07:32:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x0) 07:32:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x7ffffff8}, 0x0) 07:32:08 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xf00, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:08 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) sendto$packet(r0, &(0x7f0000000440)="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", 0x1000, 0x0, &(0x7f0000000180)={0x11, 0x6, r1}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:08 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x9) [ 2380.748292][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2380.784515][T19130] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:08 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x5f9) 07:32:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x9}, 0x0) 07:32:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x7ffffff9}, 0x0) 07:32:08 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x3f00, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:08 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x9) [ 2380.910074][T19130] loop0: detected capacity change from 0 to 69 [ 2381.001641][T19149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:08 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x6364, 0x9) [ 2382.914207][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2382.914279][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2383.435135][T19134] loop0: detected capacity change from 0 to 69 07:32:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) splice(r1, &(0x7f0000000000)=0x9, r1, &(0x7f0000000080)=0x1, 0x1f, 0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xa}, 0x0) 07:32:11 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x5209, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0xffffff1f}, 0x0) 07:32:11 executing program 5: fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21, 0x0, 0x0, 0x6, 0x8}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x5, 0x3ff, 0x3, 0xffff, 0x9, 0x3ff, 0x101}, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x4, 0x2d, 0x17, 0x0, 0x9, 0x44, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x20a0, 0x9, 0x2, 0x7, 0x5, 0x401, 0xff, 0x0, 0x7fffffff, 0x0, 0x81}, 0x0, 0xffffffffffffffff, r1, 0x1a) open(&(0x7f0000000200)='./file0\x00', 0x400000, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_open_procfs(r0, &(0x7f0000000240)='net/igmp6\x00') r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0xfb, 0x3f, 0xff, 0x0, 0x6, 0x60080, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0xff, 0x200000000718c}, 0x40480, 0x6, 0x8000, 0x2, 0x7246, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, r3, 0xfffffffffffffffe, r4, 0x1) 07:32:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x8913, 0x9) [ 2383.629083][T19177] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2383.650226][T19180] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x2}, 0x0) [ 2383.691498][T11192] Bluetooth: hci2: Frame reassembly failed (-84) 07:32:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xc}, 0x0) 07:32:11 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x6000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x8914, 0x9) [ 2383.831475][T19192] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2383.862701][T19194] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xe}, 0x0) 07:32:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x3}, 0x0) [ 2384.018214][T19201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2384.050220][T19203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2385.714223][ T9105] Bluetooth: hci2: command 0xfc11 tx timeout [ 2385.714467][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x0, 0x200}) r2 = dup2(r0, r0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:13 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xf000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x8933, 0x9) 07:32:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4}, 0x0) 07:32:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 2386.319276][T19215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2386.342580][T19216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 07:32:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x117881, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80800) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) splice(r2, &(0x7f0000000180)=0x6, r3, &(0x7f00000001c0), 0xc9e5, 0xf) 07:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x5}, 0x0) [ 2386.370235][T19219] ptm ptm0: ldisc open failed (-12), clearing slot 0 07:32:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400448c9, 0x9) 07:32:14 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x30000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6}, 0x0) [ 2386.499686][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2386.538913][T19234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2386.661439][T19243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) syz_open_pts(r3, 0x42c000) epoll_create(0x100) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = dup2(r4, r0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 07:32:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x43}, 0x0) 07:32:14 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x34000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400448dd, 0x9) 07:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x7}, 0x0) 07:32:14 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x400300, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x9) [ 2387.018641][T19256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2387.051117][T19260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x20, 0x7f, 0x9, 0xe2, 0x0, 0xffffffffffffff00, 0x86202, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x38}, 0x1, 0xe287, 0x8, 0x6, 0x5, 0x8, 0x2, 0x0, 0x29, 0x0, 0x7}, r1, 0xc, r2, 0x1) 07:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8}, 0x0) 07:32:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x0) [ 2387.128287][T19262] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2387.159424][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x9}, 0x0) [ 2387.221789][T19276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2387.295643][T19280] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2387.308147][T19281] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2389.234384][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2389.235159][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2389.754374][T19277] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2389.784368][ T8757] Bluetooth: hci2: Frame reassembly failed (-84) 07:32:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 07:32:19 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xf0ffff, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2391.794293][ T9105] Bluetooth: hci2: command 0xfc11 tx timeout [ 2391.805850][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 07:32:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x9) 07:32:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xa}, 0x0) 07:32:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x580, 0x0) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1f, 0xa, 0x200) r4 = dup3(r3, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0x1523548bb102e885}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x6}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x4c}}, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)=@RTM_NEWNSID={0x64, 0x58, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x20008091) r7 = socket(0x10, 0x803, 0x0) r8 = dup3(r7, r5, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x1c, 0x22, "51359f16682248cbf947eba202930aacfcc6e87671d351ea"}]}, 0x3c}}, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x15) [ 2391.887173][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2391.922543][T19306] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 2391.930931][T19307] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400454ca, 0x9) 07:32:19 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}], 0xa, "d3a44da88ce0b89e1529e661793e0ba21f10e4f394d25ff71fc22f5a013a53a4b54db366fdf4c144dd7a288859ee97fa1b2aff39751b83c2d7bd6a49c936123e866565c8edd48ffbf191ca45076d43a1c36bdef67fb1e265679cee299c8c8df29a03677013da0318276e26592ce46cd5a8c9320fb6175aeed2ed446d71c7dbba8fb6847986f6649bd0c9e61e504fae2ae276804d972f9e0ecbee4b90f51f06696cc10a86a8af1fddb7ea78c43c28bbb2313994633d1f621c6e0f3bcdd40ff90c13f87d35a2005b6539d751957ad72d1f74"}, 0xe0) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000280)=""/89, &(0x7f0000000300)=0x59) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) pread64(r3, &(0x7f0000000140)=""/188, 0xbc, 0x100) 07:32:19 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x1000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xc}, 0x0) [ 2392.056603][T19314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x68}, 0x0) [ 2392.123960][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x9) 07:32:19 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x2000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xe}, 0x0) [ 2392.238483][T19328] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2392.342811][T19336] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2394.034437][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2394.034502][T10399] Bluetooth: hci2: command 0xfc11 tx timeout [ 2394.566500][T19306] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2394.585002][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 2394.591534][ T10] Bluetooth: hci2: Frame reassembly failed (-84) 07:32:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000280)) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sync_file_range(r2, 0x6, 0x9, 0x4) 07:32:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 07:32:24 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x3000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:24 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x9) 07:32:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf}, 0x0) 07:32:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="2ecd59b07b23fe7a1d3a9ff2703ffac7d9bcac376fc4c587bcccd2b0cfb7a219659df35a8f18971aff4b5fd2302b12cd90034d62c07a2a69db46227b40ea88", 0x3f, 0x5}, {&(0x7f0000000100)="b9e40b5eb635b9a9fb4842298b8fefec526e1677416efda201e9b23ddfc14c77d7633f7e75def12f4de5f72deb13005fcda755f5fae06168b9249d84b1016e1113d6e17e2771699f74f48b96f40e8af71c314f87f228414fa3be9cb082fb6c461321c76656cd8a5f9c4934181d89360cd3c58b82dfe69f080f67fba4f897f3e59d945c828dafce978ce60ddeb0f223f7fa3a7f9fd009b9814254ab48aba9cf9263f9bd3ca3d9d95186ef4555ff8d430edf41a8dd93b8b57a05afc9daed1e83df14a5087432789b14fdd0b2df171b4691346c010b04", 0xd5, 0x100000000}], 0x8b0824, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x80}}, {@acl}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x800}}, {@fault_injection={'fault_injection', 0x3d, 0xd7f1}}, {@fault_injection={'fault_injection', 0x3d, 0x1ff}}, {@fault_injection={'fault_injection', 0x3d, 0x10001}}], [{@subj_role={'subj_role', 0x3d, '/'}}, {@smackfshat={'smackfshat', 0x3d, '-'}}, {@uid_gt}]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"966b51dffa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x0, 0x810}, 0x2, [0x9, 0x202, 0x10000000, 0x1ff, 0x1f, 0x2, 0x9, 0x101, 0x2, 0xfffffffffffffffb, 0x100000000001, 0xfffffffffffffffe, 0x0, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000017c0)={{}, r2, 0x0, @unused=[0x3, 0x9, 0x5, 0x7fff], @subvolid=0x10000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000540)={{}, r2, 0x8, @unused=[0x635, 0x7, 0xfffffffffffffffd, 0x9], @subvolid=0x68000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000440)={{r1}, r2, 0x12, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0x3, 0x4, {0x4, 0x3, 0xff, 0x7, 0x3}, [0x100000000, 0x8000, 0xffffffffffffffea, 0x3f]}}, @devid}) r3 = socket$caif_stream(0x25, 0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001540)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2396.594219][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2396.675528][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 2396.725240][T19361] loop5: detected capacity change from 0 to 264192 [ 2396.733030][T19360] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2396.764849][T19364] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:24 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40086602, 0x9) 07:32:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x10}, 0x0) [ 2396.784840][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:24 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x4000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2396.845277][T19377] loop5: detected capacity change from 0 to 264192 [ 2396.909875][T19384] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2396.961898][T19388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 07:32:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x48}, 0x0) [ 2397.122679][T19396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2397.165021][T19397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2398.834168][T11516] Bluetooth: hci2: command 0xfc11 tx timeout [ 2398.834360][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a7f24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c084a1f7e655ce34e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e81113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6435767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07e500b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398605211bbae3e2ed0a5483c0000bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae2faffd4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebce6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47762f6c5bbc4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef06854797f2000000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf29f517d90bdc01e73835d5a387a9e90d767671414c99d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1c8bc15038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb8f786b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d00587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c001496fa99ce5b5040be959096ea948cfa8e7194123e918914a71ad5a8539fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d8380b1680000000049563cfee3a7f0fc10bfa32c418cef875fb49e299d177a1bcd1e309b921be763e9280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb216447d0f69351306b80bef8bc4cef378f97ca33fccf363361dcdba10c154705341896d10cc20009dd182453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379210971f8a33e5c84d2bccf977c3e88538f406b598307c99113cd919d156bb496b002d645a5013f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9cfd61aa17f96471214dd68a44c576dc24452eaa9d819e2b04bdd1c5faae549a216d6156cc7a54be90dbd24f0434723eabcb1e6b9463041164feced93fba98d611aaea9ec2cd8cabbfa3705158803220f021e3de721e9d47c85ed0bd8424c3cd5242e1dbd859993e277d05b00bca7af687bbed847faf6446ff9f88af43d7b7efd790ad7fc2d71f99959699cc683ae5325874dc34b5939e3822e0943d559e15996632e9f52c323210e68bcbd2876d2d42efb884cc7ef1f237d86be76050000000000fd35d5f93eef4c7c6bf021e743d28aba637c99745b038df9162de873d6cebd8a9fcb26a5e696a6167d07f351243e51ce74b1bd1be55d117a21d7e3924bee0eef4ce8a100d5da4da83f05efa0c09e9884fe68854b4f3c7ce1a38bbb137220f2a806b406bcbab259c3ae00000000000000246540fdea0d76b175a9b61f3de6b3687655371a659bf109cc0a3cc02203acd28ac2948c717a9d9ebc974d3a6b1129ffdde7c88fae329673ec4b04c2c0994d3fae9210c1"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000002c0)={0x5, 0x78c144ff, 0x8, 0x0, 0x9, "5dcfafed9a16826da88ce88996441f2b8bbb7c"}) r4 = dup2(r2, r0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:27 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40186366, 0x9) 07:32:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 07:32:27 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x250400) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4c}, 0x0) 07:32:27 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x5000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2399.482610][T19408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2399.495545][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x60}, 0x0) 07:32:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x300}, 0x0) 07:32:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:27 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x6000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:27 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x401c5820, 0x9) [ 2399.611469][T19417] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2399.646632][ T9050] Bluetooth: hci2: Frame reassembly failed (-84) 07:32:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x68}, 0x0) [ 2399.690292][T19427] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2399.715989][T19426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2399.854079][T19436] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2401.714186][ T7618] Bluetooth: hci2: command 0xfc11 tx timeout [ 2401.714430][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x305982, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000500)=0x19) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="36b5c213bc681426ab19acb00e4011a163c81eea34130e664c2c3fe1f34e74659a96e6fd296720350764654d5770bdbd3b19d7e7e9b3fb7894e2326ebeb1c731f2abea180c5fc9557a93d1b649dc90f561024feffc842efa5e0af717ec25d29293123c2f502039659c95c44120b770d0ce31ad880ebe73e5d5b964f9e752fc7c618f92b182e29a66c3761c426d93dba3a62ba5e17c2cd09bd2f67218b6758230bf5b79732c659ccc9db7a35ddd8ccfe058ea9d586fba5132b0b5249897797dd3171879a706e422b5327a293aa2d33831f1d5abb4a75aa773", 0xd8, 0x6}, {&(0x7f0000000100)="412033fee20d026a69cd443fe73d9955c7688ab36d2b88e9d5cb9442cef55d3dd3255d5f216d4faee4170795bfcbd31b033a61cdc0b43e30f563972b", 0x3c, 0xa49}], 0x1040, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@uni_xlate}, {@utf8}], [{@subj_user}]}) r4 = syz_mount_image$qnx4(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f00000003c0)="3826417c4d35d1f88363cbc8f42cc1c3a3893a85569cb3856c5aed4261dd008e5e15d3a801ede78f7c34b962b33e82cd9164fe", 0x33, 0x9}, {&(0x7f0000000400)="a6cc8f991becb33835e5f1b5861b5913e5b53cd43784bed15a105fe1aff51c202e024895c8e1", 0x26, 0x7}], 0x101000, &(0x7f0000000480)={[{'\xee#!\'%\''}, {'vfat\x00'}, {'%-'}, {'B'}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@fowner_gt}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = dup2(r5, r4) ioctl$TIOCVHANGUP(r6, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x381}, 0x0) 07:32:29 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x7000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6c}, 0x0) 07:32:29 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x9) 07:32:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = gettid() r1 = getpgrp(0xffffffffffffffff) ptrace$cont(0x18, r1, 0x5, 0x0) fork() r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x0, 0x0, 0x5}, r0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) umount2(&(0x7f0000000240)='./file0\x00', 0x5) fallocate(r5, 0x11, 0x0, 0xfffc) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) [ 2402.317656][T19450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:30 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5000940f, 0x9) [ 2402.387536][T19458] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2402.406325][T19461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x74}, 0x0) [ 2402.457942][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 2402.466736][ T26] audit: type=1800 audit(1637134350.166:6): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14817 res=0 errno=0 [ 2402.497052][T19458] loop0: detected capacity change from 0 to 10 07:32:30 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x8000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 2402.568575][T19470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x7a}, 0x0) 07:32:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 2402.694248][T19479] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2402.781623][T19480] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2402.813890][ T26] audit: type=1804 audit(1637134350.506:7): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir309554356/syzkaller.p0qYoO/794/file0" dev="sda1" ino=14817 res=1 errno=0 [ 2402.828591][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2404.514258][T11516] Bluetooth: hci2: command 0xfc11 tx timeout [ 2404.524605][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2405.037953][T19462] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2405.064421][ T9050] Bluetooth: hci2: Frame reassembly failed (-84) [ 2405.074388][ T9050] Bluetooth: hci2: Frame reassembly failed (-84) [ 2405.085620][T19462] loop0: detected capacity change from 0 to 10 [ 2405.315459][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.321883][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 07:32:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r3}, 0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r4 = dup2(r0, r0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x10000000) syz_usb_connect$hid(0x1, 0xfffffff9, 0x0, 0x0) 07:32:34 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x9000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:34 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x9) 07:32:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf0}, 0x0) 07:32:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x700}, 0x0) 07:32:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0xc1, 0x1, 0x5, 0x0, 0x200, 0x10, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x41, 0x1}, 0x20, 0x6bbeb40e, 0x895, 0x1, 0x0, 0x10000, 0x0, 0x0, 0xef4, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2407.074338][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2407.074376][T10399] Bluetooth: hci2: command 0xfc11 tx timeout 07:32:34 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x9) [ 2407.195502][T19508] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2407.253002][T19511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x900}, 0x0) 07:32:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x300}, 0x0) [ 2407.303975][T19517] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:35 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xe000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2407.347606][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 07:32:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x3c2}, 0x0) [ 2407.426977][T19529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2407.452522][T19527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2407.562740][T19536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2407.573242][T19535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2409.404208][T10399] Bluetooth: hci2: command 0xfc11 tx timeout [ 2409.408520][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2409.926918][T19524] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2409.951411][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4c40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:32:39 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x9) 07:32:39 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xf000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x435}, 0x0) 07:32:39 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xae1f932ea0d331a5) r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="bbd3e74f706950edaae9284f1afd763804b230f28b5ccf7bd6e36a7677789ecfe539df9badc43d9990d634cc119dffcd34b2cd4b21f91d7bdd90b0e3f503f50f8d8d66e83676891e", 0x48, 0x1f) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 07:32:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 2411.954326][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2412.070441][T19555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2412.107510][T19556] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x500}, 0x0) 07:32:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 07:32:39 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x9) 07:32:39 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x3f000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:39 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x400, 0x8, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x28cf, 0x3, 0x33}) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x2, 0x3, 0x2, 0x0, 0x7, 0x8c028, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff5386, 0x4, @perf_config_ext={0x3, 0xfffffffffffffff7}, 0x400, 0x0, 0x4, 0x1, 0x80000000, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x92}, 0x0, 0x9, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2412.223272][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x543}, 0x0) [ 2412.339824][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2412.404950][T19580] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2412.421705][T19578] warn_alloc: 1 callbacks suppressed [ 2412.421721][T19578] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2412.473114][T19578] CPU: 1 PID: 19578 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2412.481905][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2412.491956][T19578] Call Trace: [ 2412.495668][T19578] [ 2412.498597][T19578] dump_stack_lvl+0xcd/0x134 [ 2412.503196][T19578] warn_alloc.cold+0x87/0x17a [ 2412.507881][T19578] ? asm_exc_int3+0x31/0x40 [ 2412.512390][T19578] ? zone_watermark_ok_safe+0x290/0x290 [ 2412.518056][T19578] ? __vmalloc_node_range+0x574/0xab0 [ 2412.523441][T19578] __vmalloc_node_range+0x883/0xab0 [ 2412.528657][T19578] ? vfree_atomic+0xe0/0xe0 [ 2412.533162][T19578] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2412.538975][T19578] ? __ldsem_down_read_nested+0x850/0x850 [ 2412.544706][T19578] ? __wake_up_common+0x650/0x650 [ 2412.549734][T19578] ? n_tty_open+0x16/0x170 [ 2412.554378][T19578] vzalloc+0x67/0x80 [ 2412.558347][T19578] ? n_tty_open+0x16/0x170 [ 2412.562747][T19578] n_tty_open+0x16/0x170 [ 2412.567173][T19578] ? n_tty_set_termios+0x1010/0x1010 [ 2412.572443][T19578] tty_ldisc_open+0x9b/0x110 [ 2412.577020][T19578] tty_ldisc_setup+0x43/0x100 [ 2412.581685][T19578] tty_init_dev.part.0+0x1f4/0x610 [ 2412.586786][T19578] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2412.592444][T19578] tty_init_dev+0x5b/0x80 [ 2412.596757][T19578] ptmx_open+0x112/0x360 [ 2412.601304][T19578] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2412.606985][T19578] chrdev_open+0x266/0x770 [ 2412.611391][T19578] ? cdev_device_add+0x210/0x210 [ 2412.616317][T19578] ? fsnotify_perm.part.0+0x22d/0x620 [ 2412.621746][T19578] do_dentry_open+0x4c8/0x1250 [ 2412.626575][T19578] ? cdev_device_add+0x210/0x210 [ 2412.631603][T19578] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.637977][T19578] ? may_open+0x1f6/0x420 [ 2412.642297][T19578] path_openat+0x1cad/0x2750 [ 2412.646879][T19578] ? path_lookupat+0x860/0x860 [ 2412.651627][T19578] ? perf_trace_lock+0x2ef/0x4d0 [ 2412.656558][T19578] ? check_path.constprop.0+0x50/0x50 [ 2412.661921][T19578] do_filp_open+0x1aa/0x400 [ 2412.666434][T19578] ? may_open_dev+0xf0/0xf0 [ 2412.671017][T19578] ? rwlock_bug.part.0+0x90/0x90 [ 2412.675946][T19578] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2412.682172][T19578] ? _find_next_bit+0x1e3/0x260 [ 2412.687011][T19578] ? _raw_spin_unlock+0x24/0x40 [ 2412.691856][T19578] ? alloc_fd+0x2f0/0x670 [ 2412.696191][T19578] do_sys_openat2+0x16d/0x4d0 [ 2412.700937][T19578] ? build_open_flags+0x6f0/0x6f0 [ 2412.705956][T19578] ? __context_tracking_exit+0xb8/0xe0 [ 2412.711414][T19578] ? lock_downgrade+0x6e0/0x6e0 [ 2412.716264][T19578] __x64_sys_openat+0x13f/0x1f0 [ 2412.721116][T19578] ? __ia32_sys_open+0x1c0/0x1c0 [ 2412.726060][T19578] ? syscall_enter_from_user_mode+0x21/0x70 [ 2412.731943][T19578] do_syscall_64+0x35/0xb0 [ 2412.736344][T19578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.742221][T19578] RIP: 0033:0x7f0d3da40ae9 [ 2412.746709][T19578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.766300][T19578] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2412.774696][T19578] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2412.782648][T19578] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 2412.790606][T19578] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2412.798559][T19578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2412.806509][T19578] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2412.814489][T19578] [ 2412.834562][T19578] Mem-Info: [ 2412.837716][T19578] active_anon:290 inactive_anon:158245 isolated_anon:0 [ 2412.837716][T19578] active_file:5913 inactive_file:104796 isolated_file:0 [ 2412.837716][T19578] unevictable:768 dirty:179 writeback:0 [ 2412.837716][T19578] slab_reclaimable:23833 slab_unreclaimable:119260 [ 2412.837716][T19578] mapped:63372 shmem:9687 pagetables:1824 bounce:0 [ 2412.837716][T19578] kernel_misc_reclaimable:0 [ 2412.837716][T19578] free:1152711 free_pcp:8602 free_cma:0 [ 2412.881774][T19578] Node 0 active_anon:1160kB inactive_anon:632068kB active_file:23536kB inactive_file:419184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253488kB dirty:712kB writeback:0kB shmem:36300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 276480kB writeback_tmp:0kB kernel_stack:9872kB pagetables:7292kB all_unreclaimable? no [ 2412.913719][T19578] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2412.943406][T19578] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.971928][T19578] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 2412.979046][T19578] Node 0 DMA32 free:642844kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1160kB inactive_anon:631980kB active_file:23536kB inactive_file:419184kB unevictable:1536kB writepending:720kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:34620kB local_pcp:21000kB free_cma:0kB [ 2413.010708][T19578] lowmem_reserve[]: 0 0 0 0 0 [ 2413.016516][T19578] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2413.043842][T19578] lowmem_reserve[]: 0 0 0 0 0 [ 2413.049029][T19578] Node 1 Normal free:3952192kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2413.079453][T19578] lowmem_reserve[]: 0 0 0 0 0 [ 2413.084372][T19578] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2413.097307][T19578] Node 0 DMA32: 313*4kB (UME) 571*8kB (UME) 450*16kB (UME) 274*32kB (UME) 118*64kB (UME) 47*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 146*4096kB (M) = 642844kB [ 2413.115864][T19578] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2413.127438][T19578] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 158*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952192kB [ 2413.145784][T19578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2413.155627][T19578] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2413.164979][T19578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2413.174944][T19578] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2413.187058][T19578] 57340 total pagecache pages [ 2413.191740][T19578] 0 pages in swap cache [ 2413.195937][T19578] Swap cache stats: add 0, delete 0, find 0/0 [ 2413.202080][T19578] Free swap = 0kB 07:32:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:40 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x52090000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 07:32:40 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x9, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getrule={0x1c, 0x22, 0xa00, 0x70bd26, 0x25dfdbfd, {0xa, 0x10, 0x0, 0xfd, 0x81, 0x0, 0x0, 0x4, 0x3000d}, ["", "", "", ""]}, 0x1c}}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x600}, 0x0) 07:32:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x9) [ 2413.205852][T19578] Total swap = 0kB [ 2413.209559][T19578] 2097051 pages RAM [ 2413.213342][T19578] 0 pages HighMem/MovableOnly [ 2413.218095][T19578] 384517 pages reserved [ 2413.222251][T19578] 0 pages cma reserved [ 2413.226457][T19578] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2413.235056][T19562] ptm ptm1: ldisc open failed (-12), clearing slot 1 07:32:41 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x60000000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:41 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x84000, 0xffffffffffffffff}) fchown(r0, 0xee00, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2413.368925][T19597] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:41 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x9) [ 2413.437767][T19598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2413.450376][T19601] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x608}, 0x0) [ 2413.492063][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) 07:32:41 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x9effffff, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2413.704684][T19621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2413.733414][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2415.554312][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2415.563309][ T9105] Bluetooth: hci2: command tx timeout 07:32:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000440)=""/229, 0xe5}], 0x6, 0xfff, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r2 = dup2(r0, r0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:43 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:43 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x9) 07:32:43 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xf0ffffff, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x689}, 0x0) 07:32:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 07:32:43 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xfffff000, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2416.191648][T19639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2416.222133][T19642] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:44 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x9) 07:32:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x700}, 0x0) [ 2416.283940][T19643] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4300}, 0x0) [ 2416.353918][T11461] Bluetooth: hci2: sending frame failed (-49) [ 2416.452720][T19658] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:44 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xffffff7f, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x806}, 0x0) [ 2416.546110][T19661] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2416.643907][T19664] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2418.354963][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2418.887894][T19672] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) 07:32:48 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80086301, 0x9) 07:32:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 07:32:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x12000440}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x80000001}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x20008014) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000080), &(0x7f00000000c0)) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) dup3(r4, r3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000140)={0x8, &(0x7f0000000440)=[{@none}, {@none}, {@fixed}, {@fixed}, {@none}, {}, {@none}, {}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) 07:32:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x900}, 0x0) 07:32:48 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xffffff9e, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2420.924215][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2420.924295][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2421.022241][T19685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2421.047039][T19689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x8000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x7, 0x7c, 0x2, 0x0, 0x1, 0x30000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x604e, 0x0, @perf_config_ext={0x9, 0x7}, 0x42, 0xfffffffffffffffa, 0x3f, 0x6, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x5}, r0, 0xa, r1, 0x9) socket$packet(0x11, 0x2, 0x300) r2 = getpid() setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x4, 0x9, 0x9, 0x0, 0x3f, 0x2000, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x80, 0x35}, 0x4120, 0x8000, 0x6, 0x6, 0x96f2, 0x189, 0x0, 0x0, 0x3, 0x0, 0x20}, r2, 0xe, r3, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 07:32:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) [ 2421.106555][T19693] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:32:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xa00}, 0x0) 07:32:48 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80086601, 0x9) 07:32:48 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xfffffff0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2421.192645][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:49 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0xffffffff, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2421.246990][T19706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2421.285140][T19709] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2421.321259][T19708] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2423.234343][ T7618] Bluetooth: hci2: command 0xfc11 tx timeout [ 2423.239166][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) dup2(r2, r0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = dup2(r3, r3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) pwrite64(r2, &(0x7f00000002c0)="103560130c19d49e71cc156015118bfad22a9a754e3fd641d778a4cb32f8df962de17f0c0743f1e7c4f835130ee1ede32ecc43de9f02c121a46d693681e4095c29", 0x41, 0x9f37) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xe821}}, './file0\x00'}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x2000}, 0x4) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.syz\x00') r4 = dup3(r2, r1, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000003a0012800b006c00000c00028006000f000000000000000000000000b322ef1b0a0e155860c2b2dfa1428d9f"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) dup3(r6, r5, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x5, 0x6}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000200)={r7, 0x3b, "5a44f35ba02c440443be512c45b9fff3bf1de9d733724c09f6110e93ec8ecfc1c602c09547cdb36d650030e817c5fbc1c1e7c873001c1daf6a24cc"}, &(0x7f0000000280)=0x43) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001c000104000000000000000000000000dc5203a29c69922dbd", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x5, 0x7e, 0x18, 0x40, 0x0, 0xfffffffffffffffe, 0x20, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x80000000, 0x8001}, 0x9751781c821b765b, 0x1f, 0x6, 0x1, 0x7, 0x5, 0x3, 0x0, 0x4f0, 0x0, 0x5}, 0x0, 0xd, r4, 0x8) socket(0x6, 0x3, 0x7ff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xc00}, 0x0) 07:32:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x801c581f, 0x9) 07:32:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 07:32:51 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0xf, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2423.835130][T19729] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2423.856436][T19733] warn_alloc: 2 callbacks suppressed [ 2423.856455][T19733] syz-executor.1: vmalloc error: size 8192, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2423.867226][T19731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2423.902814][T19733] ,cpuset=/,mems_allowed=0-1 [ 2423.914730][T19733] CPU: 1 PID: 19733 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2423.923496][T19733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2423.933550][T19733] Call Trace: [ 2423.936819][T19733] [ 2423.939738][T19733] dump_stack_lvl+0xcd/0x134 [ 2423.944323][T19733] warn_alloc.cold+0x87/0x17a [ 2423.948995][T19733] ? zone_watermark_ok_safe+0x290/0x290 [ 2423.954528][T19733] ? __kmalloc_node+0x62/0x390 [ 2423.959298][T19733] ? __vmalloc_node_range+0x574/0xab0 [ 2423.964662][T19733] __vmalloc_node_range+0x883/0xab0 [ 2423.969859][T19733] ? vfree_atomic+0xe0/0xe0 [ 2423.974351][T19733] ? __down_timeout+0x10/0x10 [ 2423.979020][T19733] ? n_tty_open+0x16/0x170 [ 2423.983427][T19733] vzalloc+0x67/0x80 [ 2423.987313][T19733] ? n_tty_open+0x16/0x170 [ 2423.991748][T19733] n_tty_open+0x16/0x170 [ 2423.995979][T19733] ? n_tty_set_termios+0x1010/0x1010 [ 2424.001270][T19733] tty_ldisc_open+0x9b/0x110 [ 2424.005938][T19733] tty_ldisc_setup+0x90/0x100 [ 2424.010607][T19733] tty_init_dev.part.0+0x1f4/0x610 [ 2424.015707][T19733] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2424.021161][T19733] tty_init_dev+0x5b/0x80 [ 2424.025482][T19733] ptmx_open+0x112/0x360 [ 2424.029719][T19733] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2424.035174][T19733] chrdev_open+0x266/0x770 [ 2424.039588][T19733] ? cdev_device_add+0x210/0x210 [ 2424.044515][T19733] ? fsnotify_perm.part.0+0x22d/0x620 [ 2424.049883][T19733] do_dentry_open+0x4c8/0x1250 [ 2424.054641][T19733] ? cdev_device_add+0x210/0x210 [ 2424.059568][T19733] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2424.065816][T19733] ? may_open+0x1f6/0x420 [ 2424.070138][T19733] path_openat+0x1cad/0x2750 [ 2424.074727][T19733] ? path_lookupat+0x860/0x860 [ 2424.079478][T19733] ? perf_trace_lock+0x2ef/0x4d0 [ 2424.084410][T19733] ? check_path.constprop.0+0x50/0x50 [ 2424.089778][T19733] do_filp_open+0x1aa/0x400 [ 2424.094270][T19733] ? may_open_dev+0xf0/0xf0 [ 2424.098772][T19733] ? rwlock_bug.part.0+0x90/0x90 [ 2424.103699][T19733] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2424.109929][T19733] ? _find_next_bit+0x1e3/0x260 [ 2424.114778][T19733] ? _raw_spin_unlock+0x24/0x40 [ 2424.119720][T19733] ? alloc_fd+0x2f0/0x670 [ 2424.124059][T19733] do_sys_openat2+0x16d/0x4d0 [ 2424.128730][T19733] ? build_open_flags+0x6f0/0x6f0 [ 2424.133750][T19733] ? __context_tracking_exit+0xb8/0xe0 [ 2424.139300][T19733] ? lock_downgrade+0x6e0/0x6e0 [ 2424.144146][T19733] __x64_sys_openat+0x13f/0x1f0 [ 2424.148989][T19733] ? __ia32_sys_open+0x1c0/0x1c0 [ 2424.153923][T19733] ? syscall_enter_from_user_mode+0x21/0x70 [ 2424.159809][T19733] do_syscall_64+0x35/0xb0 [ 2424.164217][T19733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2424.170105][T19733] RIP: 0033:0x7f0d3da40ae9 [ 2424.174509][T19733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2424.194111][T19733] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2424.202513][T19733] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2424.210472][T19733] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 2424.218428][T19733] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2424.226384][T19733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 07:32:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xe00}, 0x0) 07:32:51 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x14, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2424.234358][T19733] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2424.242331][T19733] [ 2424.246221][T19732] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 07:32:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 2424.293487][T19739] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 07:32:52 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)=']&+[\x00') getpid() setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2424.347001][T19746] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:52 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf00}, 0x0) [ 2424.454136][T19753] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2424.543199][T19733] Mem-Info: [ 2424.547754][T19733] active_anon:290 inactive_anon:158793 isolated_anon:0 [ 2424.547754][T19733] active_file:5913 inactive_file:104808 isolated_file:0 [ 2424.547754][T19733] unevictable:768 dirty:137 writeback:0 [ 2424.547754][T19733] slab_reclaimable:23817 slab_unreclaimable:118725 [ 2424.547754][T19733] mapped:63414 shmem:9687 pagetables:1915 bounce:0 [ 2424.547754][T19733] kernel_misc_reclaimable:0 [ 2424.547754][T19733] free:1153402 free_pcp:7699 free_cma:0 [ 2424.591906][T19733] Node 0 active_anon:1160kB inactive_anon:634160kB active_file:23536kB inactive_file:419232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253656kB dirty:544kB writeback:0kB shmem:36300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 278528kB writeback_tmp:0kB kernel_stack:10112kB pagetables:7556kB all_unreclaimable? no [ 2424.633170][T19733] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2424.670383][T19733] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2424.698361][T19733] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 2424.704470][T19733] Node 0 DMA32 free:646056kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1160kB inactive_anon:632104kB active_file:23536kB inactive_file:419232kB unevictable:1536kB writepending:544kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:33312kB local_pcp:20120kB free_cma:0kB [ 2424.736335][T19733] lowmem_reserve[]: 0 0 0 0 0 [ 2424.741180][T19733] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2424.769134][T19733] lowmem_reserve[]: 0 0 0 0 0 [ 2424.773978][T19733] Node 1 Normal free:3952192kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2424.803318][T19733] lowmem_reserve[]: 0 0 0 0 0 [ 2424.808088][T19733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2424.821082][T19733] Node 0 DMA32: 214*4kB (UME) 568*8kB (UME) 451*16kB (UME) 191*32kB (UME) 120*64kB (UME) 47*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (M) 147*4096kB (M) = 646056kB [ 2424.839714][T19733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2424.851473][T19733] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 158*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952192kB [ 2424.870338][T19733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2424.880653][T19733] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2424.890297][T19733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2424.900001][T19733] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2424.909347][T19733] 57345 total pagecache pages [ 2424.914082][T19733] 0 pages in swap cache [ 2424.918254][T19733] Swap cache stats: add 0, delete 0, find 0/0 [ 2424.924625][T19733] Free swap = 0kB [ 2424.928449][T19733] Total swap = 0kB [ 2424.932186][T19733] 2097051 pages RAM [ 2424.936087][T19733] 0 pages HighMem/MovableOnly [ 2424.940853][T19733] 384517 pages reserved [ 2424.945059][T19733] 0 pages cma reserved [ 2424.949217][T19733] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2425.464520][T19738] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2425.486933][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 07:32:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 07:32:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x1f00}, 0x0) 07:32:55 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:55 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x9) [ 2427.554230][T10399] Bluetooth: hci2: command 0xfc11 tx timeout [ 2427.566122][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2427.656462][T19774] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2427.675092][T11461] Bluetooth: hci2: sending frame failed (-49) 07:32:55 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:55 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x9) [ 2427.734332][T19779] __nla_validate_parse: 1 callbacks suppressed [ 2427.734350][T19779] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2427.757348][T19782] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x2000}, 0x0) 07:32:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 07:32:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:32:55 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x20000e70, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2427.927825][T19794] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2427.963714][T19797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2427.997468][T19798] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2429.714143][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2429.724197][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:32:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xfffb, 0x6, 0x5, 0x2, 0x18, "b85853a21de61c30"}) r2 = dup2(r1, r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setown(r2, 0x8, r3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:32:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x3504}, 0x0) 07:32:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0189436, 0x9) 07:32:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) 07:32:57 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x4, 0x4}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x37, 0x1}, {0x2, 0x40, 0x1f, 0xffff8000}, {0x2, 0x4, 0xff, 0x5}, {0x9, 0x6, 0x80}, {0x3, 0x1, 0x88, 0x10000}]}, 0x10) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x3, 0x9200, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffc}, 0x400, 0x2, 0xfcb, 0x3, 0xe033, 0x2, 0x4, 0x0, 0xb56, 0x0, 0x2}, r2, 0xe, r0, 0x0) 07:32:57 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2430.336209][T19822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2430.357424][T19818] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2430.361694][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:32:58 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x3580}, 0x0) 07:32:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc020660b, 0x9) [ 2430.391345][T19824] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2430.424661][ T10] Bluetooth: hci2: Frame reassembly failed (-84) 07:32:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 07:32:58 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x2, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:32:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) [ 2430.566312][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2430.601095][T19841] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2432.434172][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2432.448523][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2432.974475][T19853] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:33:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) 07:33:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4305}, 0x0) 07:33:02 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x3, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) 07:33:02 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [], 0x8, "3c1d4c65c79995"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "329f34f6f105cf"}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "329f34f6f105cf"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000004e780)={{0x0, 0x6, 0x8, 0x9, 0x2, 0x0, 0x1, 0x1, 0x1ff, 0xfffff24e, 0xffff687f, 0x10000, 0x2, 0x8, 0x3}, 0x10, [0x0, 0x0]}) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r7, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}], 0xfd, "d4c90300"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {}, {}, {}, {0x0, r134}, {r41}, {r53}, {}, {r93, r101}, {r128}, {}, {0x0, r58}, {}, {r68}, {r104}, {}, {r114}, {r50, r8}, {0x0, r103}, {0x0, r79}, {}, {}, {}, {}, {0x0, r48}, {}, {r9}, {}, {0x0, r21}, {0x0, r127}, {r102}, {r88}, {0x0, r17}, {r132, r109}, {}, {0x0, r120}, {}, {}, {0x0, r23}, {r75}, {r42}, {}, {}, {0x0, r34}, {0x0, r15}, {0x0, r55}, {0x0, r66}, {r69, r82}, {}, {}, {r94}, {r84}, {}, {}, {}, {}, {}, {}, {r121}, {0x0, r126}, {0x0, r112}, {r99}, {r110, r10}, {}, {}, {0x0, r106}, {0x0, r52}, {}, {r33}, {}, {}, {r25}, {}, {}, {}, {}, {r100, r83}, {}, {r113}, {0x0, r59}, {0x0, r118}, {}, {0x0, r96}, {}, {}, {}, {}, {r47}, {0x0, r63}, {}, {r62, r64}, {r32}, {0x0, r28}, {r39}, {}, {}, {}, {r87}, {}, {}, {r73, r129}, {}, {}, {r125, r31}, {0x0, r36}, {0x0, r86}, {}, {0x0, r109}, {}, {0x0, r80}, {}, {}, {0x0, r52}, {r61}, {0x0, r83}, {}, {r119}, {}, {0x0, r105}, {r37}, {r130, r85}, {}, {}, {}, {r13}, {}, {}, {0x0, r63}, {}, {r35, r55}, {0x0, r123}, {}, {}, {r77, r116}, {r30}, {r57, r26}, {0x0, r44}, {}, {r74}, {0x0, r89}, {r27}, {}, {}, {0x0, r65}, {0x0, r129}, {}, {}, {r24}, {r108}, {r16, r46}, {0x0, r115}, {}, {}, {}, {0x0, r107}, {}, {}, {0x0, r76}, {r81}, {0x0, r38}, {r117}, {0x0, r67}, {}, {}, {0x0, r51}, {}, {0x0, r91}, {r33}, {0x0, r12}, {}, {0x0, r21}, {}, {}, {r70, r111}, {}, {r45, r131}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r91}, {}, {}, {}, {0x0, r54}, {r60}, {r14, r67}, {}, {}, {}, {}, {0x0, r97}, {}, {}, {}, {}, {}, {0x0, r19}, {r9}, {}, {}, {r22}, {r49}, {r90}, {r56}, {}, {r124}, {}, {r11}, {}, {r29}, {r95}, {}, {r20}, {}, {}, {}, {0x0, r122}, {}, {0x0, r71}, {}, {0x0, r51}, {}, {}, {}, {}, {r7}, {r92}, {r40, r72}, {}, {}, {}, {}, {r18}, {}, {}, {r88, r78}, {0x0, r51}, {}, {r98}, {}, {0x0, r76}, {}, {}, {}, {0x0, r133}, {0x0, r43}], 0x8, "3c1d4c65c79995"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e800)={0x401, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {0x0, r4}, {r5}, {}, {r7}], 0x80, "faf069ae761845"}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x200000f) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x400000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) [ 2435.074319][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2435.075720][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2435.188531][T19867] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2435.219205][T19865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2435.219263][T19868] warn_alloc: 2 callbacks suppressed 07:33:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 07:33:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2435.219273][T19868] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2435.306692][T19868] CPU: 1 PID: 19868 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2435.315759][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2435.325816][T19868] Call Trace: [ 2435.329093][T19868] [ 2435.332026][T19868] dump_stack_lvl+0xcd/0x134 [ 2435.336624][T19868] warn_alloc.cold+0x87/0x17a [ 2435.341310][T19868] ? zone_watermark_ok_safe+0x290/0x290 [ 2435.346859][T19868] ? __kmalloc_node+0x62/0x390 [ 2435.351744][T19868] ? __vmalloc_node_range+0x574/0xab0 [ 2435.357129][T19868] __vmalloc_node_range+0x883/0xab0 [ 2435.362350][T19868] ? vfree_atomic+0xe0/0xe0 [ 2435.363082][T19880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2435.366858][T19868] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2435.366890][T19868] ? __ldsem_down_read_nested+0x850/0x850 [ 2435.366922][T19868] ? __wake_up_common+0x650/0x650 [ 2435.366944][T19868] ? n_tty_open+0x16/0x170 [ 2435.397074][T19868] vzalloc+0x67/0x80 [ 2435.400978][T19868] ? n_tty_open+0x16/0x170 [ 2435.405399][T19868] n_tty_open+0x16/0x170 [ 2435.409644][T19868] ? n_tty_set_termios+0x1010/0x1010 [ 2435.415195][T19868] tty_ldisc_open+0x9b/0x110 [ 2435.419967][T19868] tty_ldisc_setup+0x43/0x100 [ 2435.424654][T19868] tty_init_dev.part.0+0x1f4/0x610 [ 2435.429776][T19868] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2435.435242][T19868] tty_init_dev+0x5b/0x80 [ 2435.439666][T19868] ptmx_open+0x112/0x360 [ 2435.443917][T19868] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2435.449383][T19868] chrdev_open+0x266/0x770 [ 2435.453812][T19868] ? cdev_device_add+0x210/0x210 [ 2435.458760][T19868] ? fsnotify_perm.part.0+0x22d/0x620 [ 2435.461708][T19885] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2435.464233][T19868] do_dentry_open+0x4c8/0x1250 [ 2435.464265][T19868] ? cdev_device_add+0x210/0x210 [ 2435.464291][T19868] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2435.464318][T19868] ? may_open+0x1f6/0x420 [ 2435.493768][T19868] path_openat+0x1cad/0x2750 [ 2435.498375][T19868] ? path_lookupat+0x860/0x860 [ 2435.503229][T19868] ? perf_trace_lock+0x2ef/0x4d0 [ 2435.508182][T19868] ? check_path.constprop.0+0x50/0x50 [ 2435.513565][T19868] do_filp_open+0x1aa/0x400 [ 2435.518073][T19868] ? may_open_dev+0xf0/0xf0 [ 2435.522592][T19868] ? rwlock_bug.part.0+0x90/0x90 [ 2435.527537][T19868] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2435.533959][T19868] ? _find_next_bit+0x1e3/0x260 [ 2435.538819][T19868] ? _raw_spin_unlock+0x24/0x40 [ 2435.543676][T19868] ? alloc_fd+0x2f0/0x670 [ 2435.548029][T19868] do_sys_openat2+0x16d/0x4d0 [ 2435.552721][T19868] ? build_open_flags+0x6f0/0x6f0 [ 2435.554036][T19890] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2435.557763][T19868] ? __context_tracking_exit+0xb8/0xe0 [ 2435.557794][T19868] ? lock_downgrade+0x6e0/0x6e0 [ 2435.557824][T19868] __x64_sys_openat+0x13f/0x1f0 [ 2435.582170][T19868] ? __ia32_sys_open+0x1c0/0x1c0 [ 2435.587122][T19868] ? syscall_enter_from_user_mode+0x21/0x70 [ 2435.593027][T19868] do_syscall_64+0x35/0xb0 [ 2435.597450][T19868] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2435.603361][T19868] RIP: 0033:0x7f0d3da40ae9 [ 2435.607778][T19868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2435.627394][T19868] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2435.636006][T19868] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2435.643979][T19868] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c 07:33:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4788}, 0x0) 07:33:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x8103}, 0x0) 07:33:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x8, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 07:33:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x9, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 07:33:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0xc, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2435.651950][T19868] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2435.653005][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2435.659916][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2435.659934][T19868] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2435.659969][T19868] [ 2435.726214][T19896] hub 9-0:1.0: USB hub found [ 2435.731607][T19896] hub 9-0:1.0: 8 ports detected [ 2435.751415][T19868] Mem-Info: [ 2435.760478][T19899] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2435.765328][T19868] active_anon:291 inactive_anon:161703 isolated_anon:0 [ 2435.765328][T19868] active_file:5913 inactive_file:104818 isolated_file:0 [ 2435.765328][T19868] unevictable:768 dirty:161 writeback:0 [ 2435.765328][T19868] slab_reclaimable:23841 slab_unreclaimable:118447 [ 2435.765328][T19868] mapped:63421 shmem:9689 pagetables:1975 bounce:0 [ 2435.765328][T19868] kernel_misc_reclaimable:0 [ 2435.765328][T19868] free:1150749 free_pcp:7528 free_cma:0 [ 2435.839307][T19868] Node 0 active_anon:1164kB inactive_anon:643296kB active_file:23536kB inactive_file:419272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253684kB dirty:640kB writeback:0kB shmem:36308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 280576kB writeback_tmp:0kB kernel_stack:10028kB pagetables:7396kB all_unreclaimable? no [ 2435.871752][T19868] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2435.909939][T19868] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2435.937743][T19868] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 2435.943866][T19868] Node 0 DMA32 free:637704kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1164kB inactive_anon:643296kB active_file:23536kB inactive_file:419272kB unevictable:1536kB writepending:640kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:31588kB local_pcp:9304kB free_cma:0kB [ 2435.975619][T19868] lowmem_reserve[]: 0 0 0 0 0 [ 2435.980636][T19868] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.007437][T19868] lowmem_reserve[]: 0 0 0 0 0 [ 2436.012187][T19868] Node 1 Normal free:3952192kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.041999][T19868] lowmem_reserve[]: 0 0 0 0 0 [ 2436.048805][T19868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2436.062087][T19868] Node 0 DMA32: 8*4kB (ME) 135*8kB (UME) 453*16kB (UME) 251*32kB (UME) 122*64kB (UME) 47*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 3*2048kB (M) 145*4096kB (M) = 637704kB [ 2436.064418][T19904] hub 9-0:1.0: USB hub found [ 2436.085098][T19868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2436.089346][T19904] hub 9-0:1.0: 8 ports detected [ 2436.100260][T19868] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 158*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952192kB [ 2436.120714][T19868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2436.130382][T19868] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2436.139724][T19868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2436.149305][T19868] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2436.158974][T19868] 57364 total pagecache pages [ 2436.163760][T19868] 0 pages in swap cache [ 2436.168760][T19868] Swap cache stats: add 0, delete 0, find 0/0 [ 2436.176006][T19868] Free swap = 0kB [ 2436.179815][T19868] Total swap = 0kB [ 2436.183606][T19868] 2097051 pages RAM [ 2436.188288][T19868] 0 pages HighMem/MovableOnly [ 2436.192953][T19868] 384517 pages reserved [ 2436.197747][T19868] 0 pages cma reserved [ 2436.201905][T19868] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2436.210041][T19870] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 2436.219481][T19874] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 2436.229849][T19896] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 07:33:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:33:03 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x6f2, 0x8}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0x40, 0x0, 0x0, 0x5, 0x1000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x3, 0xfe8}, 0x1000, 0x1, 0xef, 0x8, 0x6, 0x4bde, 0x1, 0x0, 0xce, 0x0, 0x7}, 0x0, 0x0, r1, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x5, 0xbe, 0x63, 0x6}, {0xfff, 0x1, 0x1, 0x1}, {0x6, 0x40, 0x1, 0x257c}, {0x81, 0x6, 0x2, 0x4}, {0x1, 0xad, 0x81, 0x7}, {0xffff, 0x1f, 0x4, 0x4}]}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f0000000200)={0x18, 0xffffffffffffffda, r6, {0x1}}, 0x18) [ 2436.238487][T19903] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 2436.278600][T19910] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:33:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, r2, 0xa284000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:04 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x23, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4800}, 0x0) 07:33:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 07:33:04 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2436.861645][T19925] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2436.893171][T19927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2436.893918][T19928] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:33:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 07:33:04 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4888}, 0x0) 07:33:04 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x3, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2437.111476][T19943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 2438.364171][T13286] Bluetooth: hci2: command 0x1003 tx timeout [ 2438.372086][ T9762] Bluetooth: hci2: sending frame failed (-49) [ 2439.084339][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2440.444329][T13286] Bluetooth: hci2: command 0x1001 tx timeout [ 2440.451293][T11461] Bluetooth: hci2: sending frame failed (-49) [ 2442.514241][ T9105] Bluetooth: hci2: command 0x1009 tx timeout 07:33:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) 07:33:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4c00}, 0x0) 07:33:14 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 07:33:14 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@phonet, &(0x7f0000000080)=0x80) connect(r1, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x304, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x31, 0x5, 0x1ff) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4) socket$inet6(0xa, 0x1, 0xc4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000071ed0ea4a02d07f68141866e32750c0d1d9bfbdb2cfc62bd9061f7ea09ffdf43abcba31e15e3e305b641e61c268942ba73afde08c221ba95973c216fa114c0499a98", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendfile(r6, r0, &(0x7f0000000080)=0x8, 0x110e) 07:33:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2447.027229][T19968] __nla_validate_parse: 2 callbacks suppressed [ 2447.027255][T19968] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2447.059014][T19973] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2447.059408][T19970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 2447.100109][T19974] warn_alloc: 4 callbacks suppressed [ 2447.100127][T19974] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2447.139419][T11461] Bluetooth: hci2: sending frame failed (-49) [ 2447.167169][T19974] CPU: 0 PID: 19974 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2447.175967][T19974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.186112][T19974] Call Trace: [ 2447.189387][T19974] [ 2447.192313][T19974] dump_stack_lvl+0xcd/0x134 [ 2447.197000][T19974] warn_alloc.cold+0x87/0x17a [ 2447.201682][T19974] ? zone_watermark_ok_safe+0x290/0x290 [ 2447.207229][T19974] ? __kmalloc_node+0x62/0x390 [ 2447.212012][T19974] ? __vmalloc_node_range+0x574/0xab0 [ 2447.217401][T19974] __vmalloc_node_range+0x883/0xab0 [ 2447.222619][T19974] ? vfree_atomic+0xe0/0xe0 [ 2447.227111][T19974] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2447.232915][T19974] ? __ldsem_down_read_nested+0x850/0x850 [ 2447.238810][T19974] ? __wake_up_common+0x650/0x650 [ 2447.243828][T19974] ? n_tty_open+0x16/0x170 [ 2447.248237][T19974] vzalloc+0x67/0x80 [ 2447.252150][T19974] ? n_tty_open+0x16/0x170 [ 2447.256556][T19974] n_tty_open+0x16/0x170 [ 2447.260789][T19974] ? n_tty_set_termios+0x1010/0x1010 [ 2447.266063][T19974] tty_ldisc_open+0x9b/0x110 [ 2447.270644][T19974] tty_ldisc_setup+0x43/0x100 [ 2447.275316][T19974] tty_init_dev.part.0+0x1f4/0x610 [ 2447.280422][T19974] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2447.285895][T19974] tty_init_dev+0x5b/0x80 [ 2447.290237][T19974] ptmx_open+0x112/0x360 [ 2447.294481][T19974] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2447.299933][T19974] chrdev_open+0x266/0x770 [ 2447.304360][T19974] ? cdev_device_add+0x210/0x210 [ 2447.309288][T19974] ? fsnotify_perm.part.0+0x22d/0x620 [ 2447.314656][T19974] do_dentry_open+0x4c8/0x1250 [ 2447.319500][T19974] ? cdev_device_add+0x210/0x210 [ 2447.324426][T19974] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2447.330746][T19974] ? may_open+0x1f6/0x420 [ 2447.335067][T19974] path_openat+0x1cad/0x2750 [ 2447.339743][T19974] ? path_lookupat+0x860/0x860 [ 2447.344501][T19974] ? perf_trace_lock+0x2ef/0x4d0 [ 2447.349432][T19974] ? check_path.constprop.0+0x50/0x50 [ 2447.354817][T19974] do_filp_open+0x1aa/0x400 [ 2447.359310][T19974] ? may_open_dev+0xf0/0xf0 [ 2447.363913][T19974] ? rwlock_bug.part.0+0x90/0x90 [ 2447.368853][T19974] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2447.375102][T19974] ? _find_next_bit+0x1e3/0x260 [ 2447.379950][T19974] ? _raw_spin_unlock+0x24/0x40 [ 2447.384969][T19974] ? alloc_fd+0x2f0/0x670 [ 2447.389299][T19974] do_sys_openat2+0x16d/0x4d0 [ 2447.393968][T19974] ? build_open_flags+0x6f0/0x6f0 [ 2447.398993][T19974] __x64_sys_openat+0x13f/0x1f0 [ 2447.403834][T19974] ? __ia32_sys_open+0x1c0/0x1c0 [ 2447.408763][T19974] ? trace_hardirqs_on+0x38/0x1c0 [ 2447.413804][T19974] do_syscall_64+0x35/0xb0 [ 2447.418211][T19974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2447.424118][T19974] RIP: 0033:0x7f0d3da40ae9 [ 2447.428522][T19974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.448118][T19974] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2447.456518][T19974] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 07:33:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x5865}, 0x0) [ 2447.464479][T19974] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 2447.472528][T19974] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2447.480487][T19974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2447.488463][T19974] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2447.496528][T19974] 07:33:15 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x5, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2447.627476][T19989] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2447.660108][T19988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6000}, 0x0) 07:33:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 07:33:15 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x6, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2447.849159][T19999] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2447.887784][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2447.990581][T19974] Mem-Info: [ 2447.993745][T19974] active_anon:290 inactive_anon:160981 isolated_anon:0 [ 2447.993745][T19974] active_file:5913 inactive_file:104829 isolated_file:0 [ 2447.993745][T19974] unevictable:768 dirty:191 writeback:0 [ 2447.993745][T19974] slab_reclaimable:23850 slab_unreclaimable:118920 [ 2447.993745][T19974] mapped:63429 shmem:9687 pagetables:1868 bounce:0 [ 2447.993745][T19974] kernel_misc_reclaimable:0 [ 2447.993745][T19974] free:1149358 free_pcp:8902 free_cma:0 [ 2448.041769][T19974] Node 0 active_anon:1164kB inactive_anon:640796kB active_file:23536kB inactive_file:419316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253720kB dirty:760kB writeback:0kB shmem:36300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 278528kB writeback_tmp:0kB kernel_stack:9776kB pagetables:7292kB all_unreclaimable? no [ 2448.082591][T19974] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2448.113333][T19974] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.142166][T19974] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 2448.148567][T19974] Node 0 DMA32 free:634756kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1172kB inactive_anon:640724kB active_file:23536kB inactive_file:419340kB unevictable:1536kB writepending:784kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:35928kB local_pcp:20136kB free_cma:0kB [ 2448.179973][T19974] lowmem_reserve[]: 0 0 0 0 0 [ 2448.186481][T19974] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.214725][T19974] lowmem_reserve[]: 0 0 0 0 0 [ 2448.219479][T19974] Node 1 Normal free:3952192kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.250908][T19974] lowmem_reserve[]: 0 0 0 0 0 [ 2448.255956][T19974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2448.270541][T19974] Node 0 DMA32: 61*4kB (UME) 70*8kB (UME) 434*16kB (ME) 166*32kB (UME) 128*64kB (UME) 47*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (M) 146*4096kB (UM) = 634756kB [ 2448.289086][T19974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2448.301310][T19974] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 158*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952192kB [ 2448.321716][T19974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.332040][T19974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2448.341729][T19974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.351997][T19974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2448.362536][T19974] 57374 total pagecache pages [ 2448.367390][T19974] 0 pages in swap cache [ 2448.371537][T19974] Swap cache stats: add 0, delete 0, find 0/0 [ 2448.379019][T19974] Free swap = 0kB [ 2448.382861][T19974] Total swap = 0kB [ 2448.386737][T19974] 2097051 pages RAM 07:33:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6) 07:33:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 07:33:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6488}, 0x0) 07:33:16 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x7, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x5}, 0x4) [ 2448.390553][T19974] 0 pages HighMem/MovableOnly [ 2448.395441][T19974] 384517 pages reserved [ 2448.399761][T19974] 0 pages cma reserved [ 2448.405084][T19974] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2448.472533][T20013] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2448.513361][T20016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2449.154136][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2449.164421][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendfile(r2, r0, 0x0, 0x8000) 07:33:17 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x8, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 07:33:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6558}, 0x0) 07:33:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) io_uring_enter(0xffffffffffffffff, 0x3fc5, 0x465d, 0x1, &(0x7f0000000040)={[0x2]}, 0x8) syz_io_uring_setup(0x2273, &(0x7f0000000080)={0x0, 0x5150, 0x1, 0x0, 0x383}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 07:33:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) [ 2449.745474][T20033] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2449.778902][T20035] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6800}, 0x0) 07:33:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xc75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x8, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsmount(0xffffffffffffffff, 0x1, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x1e8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000040), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x10}, @broadcast, 0xff, 0xff000000, 0x7, 0x9, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0x6819c399ef741dfe, 0xff]}}, 0x81, 0x5, 0x6, 0xefd9, 0x100, 0x3ff, 'vcan0\x00', 'tunl0\x00', {}, {}, 0x0, 0xc1}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa6, 'system_u:object_r:hwclock_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @rand_addr=0x64010100, @loopback, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @private=0xa010100, 0xe, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:17 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x9, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) [ 2449.865193][T20042] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:33:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) [ 2449.942867][ T8757] Bluetooth: hci2: Frame reassembly failed (-84) 07:33:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6c00}, 0x0) [ 2450.136065][T20061] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2451.954268][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2451.964261][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/183) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="4dbf7b3b56fc14550190e679533b2fc211d9", 0x12, 0x1}], 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='nodots,tz=UTC,dots,discard,dots,audit,obj_type=[Z+/,uid>', @ANYRESDEC, @ANYBLOB="2c646566636f6e746578743d757365725f7530e2"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 07:33:20 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x7400}, 0x0) 07:33:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xa) 07:33:20 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xf, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2452.552906][T20077] loop5: detected capacity change from 0 to 128 [ 2452.576041][T20083] __nla_validate_parse: 3 callbacks suppressed [ 2452.576057][T20083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) [ 2452.597020][T20077] FAT-fs (loop5): Unrecognized mount option "audit" or missing value [ 2452.608617][T20082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb) 07:33:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x7a00}, 0x0) [ 2452.663723][T20086] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2452.685712][T20087] loop5: detected capacity change from 0 to 128 [ 2452.698874][T11461] Bluetooth: hci2: sending frame failed (-49) [ 2452.735697][T20087] FAT-fs (loop5): Unrecognized mount option "audit" or missing value 07:33:20 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x60, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2452.803412][T20103] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x1be800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xff, 0x5, 0x8, 0x3f, 0x0, 0xee22, 0x81, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x1904, 0x6, 0x7, 0x6, 0x7, 0x3, 0x2, 0x0, 0x81, 0x0, 0x3}, r2, 0x5, 0xffffffffffffffff, 0x1) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x94, 0x4) [ 2452.849971][T20105] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2452.890310][T20108] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2454.754542][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2455.281965][T20100] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2455.294259][T11461] Bluetooth: hci2: sending frame failed (-49) 07:33:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r1, r2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="0383a14a198273bcceca1cd7961443e83bdcbd6a2a84c3c56fd47b1f5dde59ddebeae8dc271013ab4687bf48889b4ab409cdbac44f9efa612361997f8adea0f2a53aa0f879a12110") ioctl$TIOCVHANGUP(r3, 0x5437, 0x10000000) 07:33:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 07:33:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8035}, 0x0) 07:33:25 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc) 07:33:25 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xf0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x101, 0x60000000}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x10, &(0x7f0000000580)={&(0x7f0000000480)=""/193, 0xc1, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000800)}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x7fffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x78) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x55dc236a, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x93}, @jmp={0x5, 0x1, 0x8, 0xa, 0x5, 0xfffffffffffffff4, 0x10}, @map={0x18, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xd, 0x1, 0xa, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xab}, @call={0x85, 0x0, 0x0, 0xb0}]}, &(0x7f0000000300)='GPL\x00', 0x1f, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2f, r3, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x10, 0xfc000000, 0x3}, 0x10, r6, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x2, 0x7}, 0x10, r6, r0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x7, &(0x7f0000000280)=@raw=[@exit, @map={0x18, 0x4, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xa, 0x4, 0x0, 0xfffffffffffffff4, 0x8}, @alu={0x7, 0x0, 0x0, 0x0, 0x1, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x3, 0x1, &(0x7f0000000300)=""/1, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x7, 0x8, 0x3a23}, 0x10, r1, r2}, 0x78) splice(0xffffffffffffffff, &(0x7f0000000040)=0x3, r0, &(0x7f0000000080)=0x7000000000000, 0x6, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2457.314197][T11516] Bluetooth: hci2: command 0xfc11 tx timeout [ 2457.314320][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:25 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x300, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2457.459803][T20134] warn_alloc: 2 callbacks suppressed [ 2457.459821][T20134] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2457.467731][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2457.473149][T20134] ,cpuset= [ 2457.507554][T20144] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2457.518960][T20134] /,mems_allowed=0-1 [ 2457.538559][T20134] CPU: 1 PID: 20134 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2457.547332][T20134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.557392][T20134] Call Trace: [ 2457.560667][T20134] [ 2457.563597][T20134] dump_stack_lvl+0xcd/0x134 [ 2457.568201][T20134] warn_alloc.cold+0x87/0x17a [ 2457.572886][T20134] ? zone_watermark_ok_safe+0x290/0x290 [ 2457.578615][T20134] ? __kmalloc_node+0x62/0x390 [ 2457.583407][T20134] ? __vmalloc_node_range+0x574/0xab0 [ 2457.588791][T20134] __vmalloc_node_range+0x883/0xab0 [ 2457.594170][T20134] ? vfree_atomic+0xe0/0xe0 [ 2457.598759][T20134] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2457.604561][T20134] ? __ldsem_down_read_nested+0x850/0x850 [ 2457.610278][T20134] ? __wake_up_common+0x650/0x650 [ 2457.615293][T20134] ? n_tty_open+0x16/0x170 [ 2457.619703][T20134] vzalloc+0x67/0x80 [ 2457.623597][T20134] ? n_tty_open+0x16/0x170 [ 2457.628041][T20134] n_tty_open+0x16/0x170 [ 2457.632276][T20134] ? n_tty_set_termios+0x1010/0x1010 [ 2457.637548][T20134] tty_ldisc_open+0x9b/0x110 [ 2457.642133][T20134] tty_ldisc_setup+0x43/0x100 [ 2457.646801][T20134] tty_init_dev.part.0+0x1f4/0x610 [ 2457.651902][T20134] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2457.657370][T20134] tty_init_dev+0x5b/0x80 [ 2457.661690][T20134] ptmx_open+0x112/0x360 [ 2457.666011][T20134] ? pty_unix98_compat_ioctl+0x50/0x50 [ 2457.671478][T20134] chrdev_open+0x266/0x770 [ 2457.675887][T20134] ? cdev_device_add+0x210/0x210 [ 2457.681377][T20134] ? fsnotify_perm.part.0+0x22d/0x620 [ 2457.686768][T20134] do_dentry_open+0x4c8/0x1250 [ 2457.691529][T20134] ? cdev_device_add+0x210/0x210 [ 2457.696633][T20134] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2457.702871][T20134] ? may_open+0x1f6/0x420 [ 2457.707193][T20134] path_openat+0x1cad/0x2750 [ 2457.711803][T20134] ? path_lookupat+0x860/0x860 [ 2457.716553][T20134] ? perf_trace_lock+0x2ef/0x4d0 [ 2457.721491][T20134] ? check_path.constprop.0+0x50/0x50 [ 2457.726859][T20134] do_filp_open+0x1aa/0x400 [ 2457.731368][T20134] ? may_open_dev+0xf0/0xf0 [ 2457.736044][T20134] ? rwlock_bug.part.0+0x90/0x90 [ 2457.740973][T20134] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2457.747207][T20134] ? _find_next_bit+0x1e3/0x260 [ 2457.752050][T20134] ? _raw_spin_unlock+0x24/0x40 [ 2457.756995][T20134] ? alloc_fd+0x2f0/0x670 [ 2457.761342][T20134] do_sys_openat2+0x16d/0x4d0 [ 2457.766029][T20134] ? build_open_flags+0x6f0/0x6f0 [ 2457.771050][T20134] ? __context_tracking_exit+0xb8/0xe0 [ 2457.776499][T20134] ? lock_downgrade+0x6e0/0x6e0 [ 2457.781344][T20134] __x64_sys_openat+0x13f/0x1f0 [ 2457.786186][T20134] ? __ia32_sys_open+0x1c0/0x1c0 [ 2457.791922][T20134] ? syscall_enter_from_user_mode+0x21/0x70 [ 2457.797895][T20134] do_syscall_64+0x35/0xb0 [ 2457.802303][T20134] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2457.808189][T20134] RIP: 0033:0x7f0d3da40ae9 [ 2457.812611][T20134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.832230][T20134] RSP: 002b:00007f0d3afb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2457.840635][T20134] RAX: ffffffffffffffda RBX: 00007f0d3db53f60 RCX: 00007f0d3da40ae9 [ 2457.848593][T20134] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c 07:33:25 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x500, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8100}, 0x0) [ 2457.856552][T20134] RBP: 00007f0d3da9af6d R08: 0000000000000000 R09: 0000000000000000 [ 2457.864510][T20134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2457.872466][T20134] R13: 00007ffddb9e104f R14: 00007f0d3afb6300 R15: 0000000000022000 [ 2457.880460][T20134] 07:33:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) [ 2457.920568][T20134] Mem-Info: [ 2457.925213][T20134] active_anon:292 inactive_anon:160987 isolated_anon:0 [ 2457.925213][T20134] active_file:5913 inactive_file:104841 isolated_file:0 [ 2457.925213][T20134] unevictable:768 dirty:130 writeback:0 [ 2457.925213][T20134] slab_reclaimable:23847 slab_unreclaimable:119103 [ 2457.925213][T20134] mapped:63420 shmem:9689 pagetables:1874 bounce:0 [ 2457.925213][T20134] kernel_misc_reclaimable:0 [ 2457.925213][T20134] free:1148944 free_pcp:9613 free_cma:0 07:33:25 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x600, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2457.985694][T20157] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2457.996397][T20134] Node 0 active_anon:1168kB inactive_anon:645156kB active_file:23536kB inactive_file:419364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253680kB dirty:516kB writeback:0kB shmem:36308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 282624kB writeback_tmp:0kB kernel_stack:9960kB pagetables:7592kB all_unreclaimable? no 07:33:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 2458.050594][T20134] Node 1 active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2458.086149][T20159] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2458.087492][T20134] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2458.190119][T20165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2458.217652][T20134] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 2458.224914][T20134] Node 0 DMA32 free:632376kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1164kB inactive_anon:640936kB active_file:23536kB inactive_file:419388kB unevictable:1536kB writepending:600kB present:3129332kB managed:2716756kB mlocked:0kB bounce:0kB free_pcp:37284kB local_pcp:22236kB free_cma:0kB [ 2458.270428][T20134] lowmem_reserve[]: 0 0 0 0 0 [ 2458.280378][T20134] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2458.307640][T20134] lowmem_reserve[]: 0 0 0 0 0 [ 2458.312472][T20134] Node 1 Normal free:3952160kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:912kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2458.343324][T20134] lowmem_reserve[]: 0 0 0 0 0 [ 2458.348573][T20134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2458.361759][T20134] Node 0 DMA32: 46*4kB (UME) 26*8kB (ME) 433*16kB (UM) 157*32kB (UME) 132*64kB (UME) 48*128kB (UME) 9*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (M) 145*4096kB (UM) = 632376kB [ 2458.380705][T20134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2458.393071][T20134] Node 1 Normal: 154*4kB (UME) 35*8kB (UME) 24*16kB (UME) 157*32kB (UME) 76*64kB (UE) 25*128kB (UME) 12*256kB (UE) 3*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3952160kB [ 2458.412384][T20134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.422666][T20134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2458.432598][T20134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.444775][T20134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2458.454600][T20134] 57384 total pagecache pages [ 2458.459361][T20134] 0 pages in swap cache [ 2458.463528][T20134] Swap cache stats: add 0, delete 0, find 0/0 [ 2458.470045][T20134] Free swap = 0kB [ 2458.474412][T20134] Total swap = 0kB [ 2458.478388][T20134] 2097051 pages RAM [ 2458.482205][T20134] 0 pages HighMem/MovableOnly [ 2458.487148][T20134] 384517 pages reserved 07:33:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x505000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8e8) r2 = dup2(r0, r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:26 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_mount_image$hpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae0f704e0ce1f63eaaf77a7e8e32f1264b83f5c072285059649964cc4c39a6fd58b6c8a2e28d3f9d57b4844f3187be05e09afddbc4151459342921e26ea70c66a25115b8df761d298341c5ba761092c7203cbf4eb0ceffcec67cb7df74f71c8073b5409dde544b8442aaecd9150c5a428bcfc2cb644c26153cde4ed4085aa0f20439c9cd674106bd8fa42f4491f9965ae066e150d051c4868ebb696e9d246a50d8ed589f5d533bf5faf6709b00bf82c19131afcbe2b057", 0xb7, 0xfff}, {&(0x7f0000000180)="b0d39dd8297006e2eebac80f3c53b98c4db43e5395b34ca30d07bdb6656665716630424bb3b40e205aa001fa11a0144cb4382bc6e937e75ec2df39ff1cf0ec410919a7f51cb8f09146aa5fdd3b63bcffbbb407fa872283e4e99d0f1e631e3368e351e9fe286ea4c8f89ff0059a3e2f81187e7447beb556872858d7a2bf154bb9955b966165373e665196bf94127d19c9e0a4f9bf8681461cbb5489e606e54c22b3146a1677c69236c95d0c3c6d0b68129b0698e5c89359ec0ea79b4fef8d1d34020ab72a8872f1f5885d1368a3abbef41570b72a3bc978a4f75c3ac8ecae1d89f9f15cadb18375d073ef8dfe78c335700c575f2b57d435a7b7976247", 0xfc, 0x200}, {&(0x7f0000000280)="d2dfbab3effeb48b0fd66c355e25e252255bc8cc5eb7ab64f213812aff32451dc7d4df2768ddca7bc1b99802a852c5abbf19529c1f791b30edcb8fd3427d9b47884d37b264aeb0534218993c5597eeae81c0286b21fc28e1c40363dd", 0x5c, 0x1}, {&(0x7f0000000440)="d8b158b31f4e8194ebbab1be811cfdee3be91cfef2b73214ee3ceeaaf7cd1e78b1143442847260f199a8446d05256f93d2605d30a96034c8d851f306a07dc0f01435d31719f80c97a6a8d4dd3fc820f6d02d2958761308c0c863a87b730830b0a093f7ccd7ae92fdceffe67b3f9dcc251eaa3f820fb01161452b2996a159f2fbe6bc17b1d97f753ec6b93f0d7cb1523b4c2bce02f59444a9264df53d7fa2597851a371785489c5c59e710b3e1683e81c9802c4070e2b02daa6fe2b8d2358e3eb6dfba348a4fa4df3e70b500297e24d629b90d77befe51292865a48af18e7b513490cbb7adbb3af5dc0820d5f4c9ea3e66c1cd862d87c3e", 0xf7, 0x1ff}], 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB='\'\\},,*/%-+-,&,--,,,%},obj_user=+,seclabel,uid<', @ANYRESDEC, @ANYBLOB="2c736d61576b66736465663d2e3a2c2827282c736d61636b66736465663d402c654a38e61e8de37569643e", @ANYRESDEC=0x0, @ANYBLOB=',func=PATH_CHECK,obj_user=/)$\\,--,context=unconfined_u,uid>', @ANYRESDEC, @ANYBLOB=',\x00']) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) dup3(r2, r3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001b80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000002b80)={{r7, 0xfffffffffffffffe, 0x1, 0x7a, 0x24, 0x3, 0x40, 0x0, 0xffffff81, 0x40, 0x5, 0x7ff, 0xd283, 0x6, 0x5}}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={&(0x7f0000000540)=@x25, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)="42c26e496c3a6dbc63a460f2650e8d200cc9040989d5b623995a1461b39faec1d70f568773c296e43e22b5358f81dcac93ae0a957e0a9c1b9e9433536442d1de88bd6e9ed3191e5b46842ba166d685b6e33a1c828249695348b375c2fd30101cb7e956a6b0cde77147ce7915ed89d7830de7e742c450e609ea9c59f5da4f15909b6882ecf225126263ce6a2db0add6ef6c592c34c9112be94c7a3d93b2784c07cf33d3dd2a763958d4", 0xa9}, {&(0x7f0000000800)="66c820f5d7de9e3b7f92d08f08bc2b78bfd048be1a80a657a75c8a93f59c449c35d6982f2f27497cfcb17c23f02c0e66e4cfb86c9b3b1c0b4f1add3564c5e78dd12608c96ded1e22a63f0a5d51463bcb760f71de878afcb6d0631b3e95bf1b9202de1fa6f362a9a5f1b2fe04b4db5ecb8489c95916191c222b830234126e6a429519550fba3e1894ba1db35ddb58cc611bd66a68b7aa69ac29b4555af08c698205e92ba4769659b7a71c0b7be503ad7f0e1de109a0470ee97f19fea309c7a92ef29ae26941203d013af600389d8d2189508bcd3d123516bf", 0xd8}, {&(0x7f0000000900)="d336025752f33fe1c4c931ab648afd87aac77856049a3bda1f3e2674a91e2de8c015164a7a61487f9cb54710c67c10cbbc2026bb8cfc415a8d32b1a961a81df11e33bb804b3667f2b924a0e13c466c571deb74bdc28ea5c8128f300417bda519e88adc3b65e431a5af42cde768b32c9c898035912ff23c01f388455ee5dddd4c26200a36b53c61b3", 0x88}, {&(0x7f00000009c0)="52313df72ae4d8d83aecba9537eea95f6d79696335fe5b6ec3eb81d6187bb108794a9bd9feeafbfe1dffc311dcdd428fc46b3cf34649e4f793d2666718144be6c874c390c3300c6a68564a3e926e67e5e0c5f215d96e1f46f5138d9b3eedd3a45098bf353c97fd1e285dcda15cb97998a8b1c4d1da3e5a53c3b10a2d3861eb1dcb94ca806f27686a55bb94c41e6a8237d07f7ea858cd2ff219bcdb1ff1bd5a5aa9f6f3888131738bd847ab716436860bedc0936382138b993ca815d3c568741af36eb18e26dbbb8db05b9b4bf78d22a78cd46258cfbbec55a16d706594346bbc64ce29e88f6563c870eede303875e316aa12dfec8571c6290ef7f71332d9d22781dd78ae6d54e34c82f686841fcdbf305efa8dc78b1f811c7570c352c46715f3dc692ae686262a69d4a7bb3943b3b7ce14c965790e63b0e28bef25ccdb49ca61b26aab4751989020c20ae2d8459f9e489c99d7dfce58f028fc6b346ae585d0118ad178f01a8e497d11799c56f55407efc67c1bc2694f066860bd7622b116f8912c63cf782eb69727b4de877596ef0b55caf44920da5fb3d1ed5ba5c0699401dbef789b89243ed0dd7227dabc28910569442810f12b8bf81cb9cbe28ddaa656c30d27b6939b1fa0ac238c33e311d89e8adad7c13a625dde12dfa49a7c10c0bfcd0b17d1e9039733425a3ba84b85d25be06683fb11a8a47cae43d1365dcdedbcf3dc2722aaa9a59882b60a3952a0648a7b8829fb69cda00f6397b95d783d446ea16da567e4e577943edf04158b655497190a990f44cf110366cfb9d860e886819f37c8f601038f9941127d2b27c0648f29469048f86d72a2c7d5ff6b9516d0a6f179d99102c3a7312a15b6006b588ee53d8af435aeef75fc0c699250b5d2a75d803a61551aad644d236724cf5200f3a6bcfd695616c113ad2bfa1b469f8ae1d6d4c98e850c50e7c91c283899372ed17ae1a1e18d75f84384c6f0ffc318aafb355602045d4c8929a92079866d3e47533efe75d1f891d2f672645d2eb96c45fdf6691fa5583062cac834ce7469b8e792f8904c8abf2ab732894dff355a9909df2d04d75a0c7c431c2f54f5ee429a9354f9aab36f8aa5bd343fd42acbdeffba157f7de93ab82245882dc0be3205550660ebfb75d0fd379fd1cd35ac4f69aac0d111fce733829ea932d97354adea11d6cb9c2bb116b57b73c9b9a7390a905e00928c1007be3fb54c51be25bd5b838b63d60005ec06a01c2144c3a69ad809c5d36e81c1a6b5dabcd419dfd1b424cc94698a75714aa0da647d5d47d8128cf0ab9ccb545927a8b0a8ae52337035dcf38c3f282a726da16d5364400fc6885ca27ebdfee204b31ad1a70342c196408d56b96db1ebfcd31ec6c79b8f9109def0a91e553fe46a6144492747691e2742e5a3505c5153c05e69c53290159cb58f7334d24de86ee808e813e468880ffb74d9f2832b0e49712ce74b38073b39e920d87b1d40ea1806d26a0326c55ee162615eafefd758a05955ab751a80239a0d6458af1616c52ef61247ba00ced3142771549aee7d1bb17880e2452b4225e01c448a0bb7ff92be7853d4c15e200b4c6fb2725c31c28a0e153a03280c555cb456df1bd3c1cfd1776eaa53eb8694b683a3aab0646e1a6a878b5bb6f9aacdd77faf8a8d85b41aea29ad3a40a2ddf3169e59563eb3b0102bf49ae96fa01e1a5019096fa1710a5ce61aa34bffa330fa956b247d89c8fb0da23c6df9e8c8c01d004f2a2991422961ca32265e2838742ce9b2f92dad42a911fbfce2d4b85b0b3af494184288852d3132251d4ee37516195a32c4ed29ab63a4c7ca10c9965d0c27ed4f00fb38f19c7f61654c768a34d462b05cb36f8d16c2717fe98dd7cbfbd51d37c23e901bcaf4edcdc2c0feaddbd7e548576881cd1096a90f557a80d27171335820135dcceea3ceaa2089d28c5f8847727ad60b86259f0bf83d72e8dd797e925fdf763b907117474108f74ff2256e94831c7388e570d921bacced3ea88a8a5861ec2ff3145a24402b676fbfde54a3dca74bd45d749e5b80b616dbc3efbb15a7adbed863e79cb3439c3cfc592825ed6fd975d764f22cd4e05deb06aaec1bc575be3c06fd864e9b698e64e323d4a59ddafdd1034ef525abb3d63c7cc7388db6d274c2c4851e58df756654248a8561095d6e64caf43615c4565ba493bebb37da572920bb2190a8686286cc7e2a9b3e614ee8848f8d52f25e4d6b5d396a3d51d064f3ba3aa319ac6c0256e94ad221f2423e3b5f0524346b2646408e2129c4e06ced81fee7dcb6a05d7f18f75e6394b6dafa435495ed4f501ab2181c4c711ec466c4815c9bae86a4668923fe0fdceb043edc73c240d4eb804970e89b5da3c50da5922f9081cb38fb869f4fb1de34f8a8585e6c895d848e02d840f2a3e751050997c9bcc48f5f682c9eee3e2f69af844ddc20f31c704ac0195e3e51b176ff82357b49242f55f238b4fca558cb965a9573b07bf961e7b661f56806f11ac0991c7e72745aad5c90d4aa3f95dd8376bd691681cd70cd180339ce680b69013e942ba47c5a7777d46b654071aa71fff09261ec3170c24e9d44e98cb50b9ef3c567f35c5c619d12ad20cf7b53298092bc61a2b17eb916ede8e7e6c2be67ff38be032d2c2d37d353a28ea9619c586b5ddd059fdaf9c62045eb10871944254a28c0f4c1a1ddc849434fcddeebd07b186492d7a5f326162034cb29c54915e572b1d6dad7c021769fb2525b9fe06d1733a89a0b7e9cf2eee998124fdccfa595f5ca32b0a66adcb17e7fe72a7332d082617b7674b08d510a4493cf16840738972bb117472803e03c006a5801bcd861a04649016824f0cafe6697b73a6312d5b671450a3ee420cb12672855fb118635946d60da9eeec05a1ac02f0ad12f302af5abb84765797fbe2e8b4931009fed120547655b67b9191455d04fdbc6983921ce9678a9ddae2662f0acc94b239285f5446f8216990c90365933a161a3467a2f2965fd59f5ee5883f27bdb720640c53724bc23c24364368a9b9b9e47d9a36db8f8fdff1b983c793223e6db667cb8f07ccbf1c8535b3222efc64cd9d0a2bf3d393bd951cecf2876571ad15ad8e5d5314b6bcfbd83f8cd1aff5cd6a4d686c7c626aea554d25eebeb8973ecd175c9ef3a4ebd8d532ec76780651f05146d367a8de5e89fadec94381751d266df4156baea915b963b8d034b67df54fe413f43810548493ca4ecc676ca83fa8fe763ef35eab22568507903e73d7e379cc5ade3fdeac7273855b2dfa7868a17df4f8e72fdcd1e69251567ccb355a0b24bfc93f219fe2b63b6bd64dd9c346238842542147b94df799a2cd23f505ea25b519380ac18fb8ce65e2f1b33177f0591068f31354d85100caddcbac30b7025f4c094dfabd5a9d1a126fab7eee8e09002126f09ac1a141729f8ed917d856de9f471841f50086efb1bbfb62f46b88f838dd9fafa9f1d1267b9ce95b37081a6306e07b942bea894994aa38dc0b025fa51d3af783280e8631f910b82597139e5b1aab9d8e1fde3345f98e64d48ef684549af6255e24c214a09fd4c318492875f2e72063208079fcfcf040d6c1565c46ddd7f06509dde23ef1c7bf2d6af6b6368b96c92a23640bfda80a7f09a011f6ec3eefdb783ef2015ce6c28a2aec9626cf990ceabae65127a35644a1a3d5c90cf9392a01ca3fd4fca7a9f72acb82689ce6733c9d03c5fa527514b51bea56bb6601b710a84a78f91324e8ff94638ce0af47299c5c011606065787bbcc5f5423442ca9eb13df1947e98e7af180781617008fc366151ee36a1e63be3ada1a2ca40a4e85e96bebca8b2d6feb26b9dd64f3bd6eee8b62e3b9d401a4d3ccdb6288aa2c90598ab4a7abf8384e0b9556d66d125e7af96ed71f751d6eda05c1c90271b95eb6b08988520549aed5f00516039a97b12570b958832f7a1895b86e24f1b01ad09df7affccde17de38ea3b9ec19065e27fc3c9b323ddd764a5499dc2d0c5359b56eddca53e076b267b0d980dfb1e6268a0d4e2f31124b96aaefab70cd68f43027abecbf7aeec0520fc0c91fa85a840a8f7afe790e25be77e5512c4db16987e9c545161c3b0342c9590d976b3a138a853f4df520dcf318a8c7bfa75c74ff91775907e8978144e845e2e84e1a0d12dc1f58ae27ce9add1e4ad7cc44a65d56c5ffea56b34ba869303b135c6b57eda73e11a9f4643af2a3e69c1ae62e4119bb90967badc80ef465f70ebc52b5aeaa971eb9612eff958402926952d5581df502555b90678b2a95d7ba46beb05c9540a22a5a103d560791ca5705d08e97abf078f80610a96e4e59082d215b4f1145578038b8354394e82b80f9dbf72d235de2c82418addd197792c565dbfc8c4dba94529366f800797957e1f044e5bdba67e5b440ecaade9834548f370dbb4b7f8033e5b22cb61a830d229b6f4a4efcc109e679b0d0415d52eeee1803a0b6e728eb6b2c603e1040dbef365e775eb6f1081674ea2571717e2dc0a90be52a05be8221876185b846e214c34277a61fe9393cefcdd2dbd90881c83998daa21ae281c36f71efbf52e65d93405f6e5392a0280177423452a41361050c856b9cf9c0f3d5b2b4969c3fdd953a14000a6c0d66340e71fdfeba62e60b1a0374ad4a8bf7cdc6d8960b2955db53cd90397941c8ba7ceb36bf6d5624989616c1e36c458475bbb55189557cb5750f34d12202dc2ed62f1becb7d02a55588ede598fc7893219f2b28a345fea8283a73be09717e2c4b5f25e16cd161bf22db899f1cb6d3baf2ad5b2c07b704bf2021b97f0c784095fa363b9a481f40082caadca7fdb141952d8f2a6bd12fcc7e8dc8df8951cbb8e4df550b355e7be86159cee0b3fcfbd00df0f8081d7c85b00bf7ebfad6ee2e4a28009a12f5f8a8b91bd6433a18fa212c9a5d0a258e54a41ed5b53f70ac66f5752977c1ecf74c8f9c974a80c69ce539227bc9037934b8accb991e20881e20f9e1464b968405ab2461df547c63ccb68f8505ee5b45e1b84ca0e13010dd9b4d082f822583c74243f5c0b13bc8eaf65f979b4652515d4d8ddfd8ef0290cd11965ca08506a93fccf0d19fbe8533d1e3937290198819bcdc673d6899b844824625c2230dc077210b78c89ab8aea1ec1d1c8415ea1850297aeb8f7702c3f73b03bbc22730c3db281b34973866cab6069e0f8e4a554aeb4b90134babc35d65f85e600c4e0108ffc409985470565b5e6058b5a82977ada330b57a88b258e2616676311c001e69cb9f8679c0937ab9e16e3f1fe29f25ddb893153353cb847d7e730d42b116d18a2a1bc3f5efb122ea8a6d5e8de62f8097e950a2aa13937e9c573eba01ccae0debd984e0825b03e3b001fd93aedf4c81a134b89d7bc480e64e75c898f430f08398822a41bfe60931694d947728f82addaa41b9be603eebee1614fcefed45d0c549d368d170d3091a2612e19568502c3c9444056b165a959c98d9d512e43a33677dc900dbbb53e397fa69e5b990fa6ae28a9ce5aa6c2b5df76eeb7af0b4b0a1a091e6039470c0f2c18b25645a3a801a6e8b7e3140b08b628fb7be0319be3d5138b73ca9160e16f1004b4a4a915bd8a070a13427674e96fc9991cf1c69c933d574d7d2849d87db47d4336c00822c05d6f2cbc4f8a73d7e80b39c72607ab75f789a5c1953dc35735cf72f592570be83464360b596ecf3c26d3eebca13bf2a46cb0fd6a31eaf1e9375ec4d7d0a3bb5d1da9f06f3f701663267fbceaad8ecc2f9074d1cb329b14535df5629898ec3ba21cb4e8ebe107ee6ddbcbf", 0x1000}, {&(0x7f00000019c0)="fa6d9e21a19f9739064efdd6356eddb0e1290fc199c9c207207d3c6c283baf30018f499778d21949b090783aea18fba68ba1693f21c3c2abb9285c3414a7d80432c2c07c8f6552de28a02cdc98bf58e2da874ff6f3f1ee33907349b0f4515836fab7da052017cb4b22124f4ae8c388a1968c4f56da517319115477afa945cd9070537ee660e8c23fa02fe94eaa3a7dec38eddf1dedc5004c702cfedd0bcc6f6fbc4553359acef3df2c3e76e44b6aa3116f0902b4c385a8a96627e036b95c27b8857d0d854e4324bf2e406319c99d4b22c96753bd78b206599937d0eb574db3f33c58b5f0436aa67970c2faad20dc3ce9f7cf611fe506afc95c", 0xf9}, {&(0x7f0000001ac0)="5cd59d96d174d0f25579a981066e9800a749dd3787e19c1fb98bef3ae319e17b728cad97b2aed81dac734da38a7c811f1d2a3842dfe0dbcb38ac8bb6c574115e8860e1949bbc92edd8a4ed046a9f328d9e613c502d2bed9d27d01f103e678b1bf3adbc48cf2057153fc759c0a4647d63d60633ed9f4be3179a641c37617ca7ece2c1989a86d1bfb7d3a3524fd464370eaa132a87216abd6071fdcd6dabcc8de0bd96b46da1e98e7fafd3c895bd311ebf693030c9aa3c5fc2c1", 0xb9}], 0x6}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:26 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x700, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8847}, 0x0) 07:33:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd) 07:33:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 2458.491293][T20134] 0 pages cma reserved [ 2458.495468][T20134] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2458.503757][T20145] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2458.512199][T20149] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 2458.597297][T20178] loop5: detected capacity change from 0 to 15 [ 2458.599311][T20176] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2458.644166][T20178] hpfs: bad mount options. [ 2458.644638][T20181] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe) 07:33:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 07:33:26 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x900, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8848}, 0x0) [ 2458.743035][T20193] loop5: detected capacity change from 0 to 15 [ 2458.765208][T20193] hpfs: bad mount options. 07:33:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbafa9403d18eafe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x10) [ 2458.882856][T20202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2458.918677][T20204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) [ 2459.072903][T20216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8864}, 0x0) 07:33:27 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x952, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf051e1c770d581a0}, 0x0, 0x1, 0xc66}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:27 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x11) 07:33:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 2459.367623][T20228] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2459.395454][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:27 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x12) 07:33:27 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) ioctl$FIONCLEX(r0, 0x5450) 07:33:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8906}, 0x0) 07:33:27 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xe00, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x43000000}, 0x0) [ 2459.451201][T20237] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2459.600337][T20245] ptm ptm1: ldisc open failed (-12), clearing slot 1 07:33:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xc203}, 0x0) [ 2461.554108][ T7618] Bluetooth: hci2: command 0xfc11 tx timeout [ 2461.565894][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 07:33:29 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xf00, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:29 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5a) 07:33:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 07:33:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf000}, 0x0) 07:33:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) dup2(r0, r2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair(0x1e, 0x5, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000280)=""/84, 0x54}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000005c66d16ab0f1b1971c5cdfb06c349cf9c2b2f91502bc70fa22fedd0f4290d28d96fb03f2107eaa32bbcf08c94d3d79305c0f186905b674cce4b6b3d745b760bff709f5bcb2622ff35bd138a8718c6121c9c640888c9e18d3e64f73941757e12be88b81854847cb3e734e9e32437d61c5bcfd30b8ec00636bb7bb8489094524a8e1c5fb310364438d2fb544c55f20d437eb6fe44a583550bb1c2234a57e24c5d31d3771d1f8395e8e6d8b893b", @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="40000000272108157921a54c6052ff6d3cf2a964cf8bed883e8380ee88e0f84e8128a9d42d19efad4222fcccc692c9e02d7088bf6556ab9a718ffe1bb853bdb3b73c934a3bf3b62e1d514092"], 0x98}, 0x40) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0) r9 = syz_mount_image$nfs(&(0x7f00000008c0), &(0x7f0000000900)='./file0/file0\x00', 0x2, 0x6, &(0x7f0000000d80)=[{&(0x7f0000000940)="f1f5992d8867971ee73e39c928adcb13f1dc510388404a722aeb95611c3899fa9fb2e3d02c45be29266043e385b40160a7da34378e208babd3ed6c7692e5510136609384f801fa2702e4a7b22ed9c091e80cf55a754170139ddadd2b40d795778edbc0b23c115f32d82aacdf8f9c776ccb68f919c31fa063568cc0b5d26dd3d485b5c54500def850f11f76d10ef2a6fec43fa6e48f40657e23d1e333df7658592bb505944da4c955608d5415cd5eee090e7de4d638a6dd67d328c9a78b00d477f72f2ebca93a65cdd5368f84e2a3c96b34614f6e85330d67d0e726d785006464", 0xe0}, {&(0x7f0000000a40)="bab961189929f412bee73ef3a888ee825d02556a01c8621170ed29bfb9dea049bbee3eee5ce3aedfdf6d37ba58e6eeb1cb3dc72988417f5cac2891632d1ed79832e0e93fe5e24a45c954aa048e1bea9c932a93337a92f8ee9536c57857754e1d7884164b64d4d25e5be2c2791cdd2ea261dd30aac1de436f40f02dbb7a6927c1e5eeb4813fe66d8a6202ddc5e6a4b4183b4880bafc84a1dcdd4264cd79d4e5c6e4f7c375cd2269dd6554b529e9d7cc2110bcdd8e370d24437659d010db17ece5a49eb167d4b85ce29ee43231fa34affd5f2f2012269bbaf96925b6", 0xdb, 0xda}, {&(0x7f0000000b40)="7538daf9e3b068752cbcacc3c9e6d23c623376789b3373bbb406d5d8a6d6a97ac516b361807b62e88201f91c16aff3311750078bc852b617c6040e90a24d51c5a0d0052c3030f07c6df2118c7a3975a4d50d6769ddb7a12bed402bcc3bba97ac1470053d063717098282c163574b41f9f65f5454bbe69f3a", 0x78, 0xffffffffffffe8f0}, {&(0x7f0000000bc0)="c0a3bec0c5eda1b8781b46201cdf62b350517bef0183744d8a9f16fad36fa956601d423043bbb499ecd184169e777f682a14e5aef12c62de3f9b8b6440b0850283b8779b5c995f9099d1643907b2746b14c6e73a22ebd2f324f5638fbd11cdb52c834f2a851d8800837e7bdda8ac4ed47179a4e56d0b94e2d689dcffa1c312", 0x7f}, {&(0x7f0000000c40)="b8c845c84be20bae7f9975ae750ab5fcb5e95ca34a55d9743cdbd9584bf56b53fc78badc5a3b6f0c8c3680f63526ca4f7ca30408fe753f119a46368c4f6ce17664cb16f951a1a47d23605fad26a857df61b1c9f98679d7d39e3e0710b0204d939d22e06e3115d56a76ab56eec0e15d7b1cb864da23eb72123bfada47c3ed7799dd0141ddac47e2be6ce963789e65375da7b709a304cbbf4120870bd4d6ef35408a52c89e3c53cb557ff180704f1b53e67ad61169f9e8bd49bcd41974c9dcc9f608d2cf06f7389f1b394930cf11aab6d814b01c", 0xd3, 0x10000}, {&(0x7f0000000d40)="17508e33", 0x4, 0x200}], 0x200005, &(0x7f0000000e40)=ANY=[@ANYBLOB="2b282c2b5c2c2f6465762f70746d78002c2c2c5d292c2c2f6465762f70746d78002c2f6465762f70746d78002c2f6465762f70746d780003006465762f70746d77fb2c403a5d7d2c2f6465762f70746d78002c7569643d", @ANYRESDEC=r5, @ANYBLOB=',\x00']) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="b65a1d9dd85b329f44e4cefd1ea06ae331375618965bdb55594b1d4116001a1d6c5e15ac24a0ff3c22baf0c50213c640cb89e3c1f83bced08eb14c32aa2b5c7011cebdb29dc73e", 0x47}, {&(0x7f00000004c0)="dff3a5b895ef2803edd3a7a042db864be49cfa94c24e7b7812e92ba1fe425413ee79e31e202a66e00b9316ef8860b9c9d46108e4addf1108e56a907bb45c8ccb88d5b23b484323e99e5e5a6ea26801e64e633ff267c7668a92c12d8c310c7f7c9ab8cb0d8ba35c3c55b2e33ef6ee4eb0dd486c3da32a1ec4c6ff711bad71853b238c6a4e3d5a0e373a4450a28ff5fa1bc1", 0x91}], 0x2, &(0x7f0000000ec0)=[@rights={{0x38, 0x1, 0x1, [r0, r3, r2, r4, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r2, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r6}}}], 0x98, 0x20040880}, 0x48010) sendmsg$netlink(r4, &(0x7f0000000740)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000380)={0x18, 0x14, 0x200, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x42, 0x0, 0x0, @u32=0x8}]}, 0x18}, {&(0x7f0000000680)={0x7c, 0x14, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="13989ce74bd3959cf757b93e28d89ba0a40152bdb57cef2f5cffd4b424e98e6329e627b607d72e847f7f633a814dfaf8f685b7f5f9d9527c5316487274", @typed={0x8, 0x2c, 0x0, 0x0, @pid}, @typed={0x8, 0x30, 0x0, 0x0, @uid=r5}, @generic="eb9241b9d3a5afd82031fcfac6c69396b9d4c639904d323341a15aff90"]}, 0x7c}], 0x2, 0x0, 0x0, 0x801}, 0x40) 07:33:29 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x3f00, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 07:33:29 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xfffffffffffffcf1, 0x1, 0x1}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) dup3(r5, r4, 0x0) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2}, 0x1}, {{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000015c0)=""/242, 0xf2}, {&(0x7f00000016c0)=""/19, 0x13}, {&(0x7f0000001700)=""/131, 0x83}, {&(0x7f00000017c0)=""/186, 0xba}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x6, &(0x7f0000002900)=""/180, 0xb4}, 0x9}, {{&(0x7f00000029c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/199, 0xc7}, {&(0x7f0000002b40)=""/232, 0xe8}, {&(0x7f0000002c40)=""/21, 0x15}, {&(0x7f0000002c80)=""/237, 0xed}], 0x4, &(0x7f0000002dc0)=""/59, 0x3b}, 0x1b}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000002e00)=""/125, 0x7d}, {&(0x7f0000002e80)=""/100, 0x64}, {&(0x7f0000002f00)=""/206, 0xce}, {&(0x7f0000003000)=""/143, 0x8f}, {&(0x7f00000030c0)=""/55, 0x37}, {&(0x7f0000003100)=""/51, 0x33}, {&(0x7f0000003140)=""/129, 0x81}, {&(0x7f0000003200)=""/213, 0xd5}, {&(0x7f0000003300)=""/8, 0x8}], 0x9, &(0x7f0000003400)=""/62, 0x3e}, 0x40}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003440)=""/27, 0x1b}, {&(0x7f0000003480)=""/179, 0xb3}, {&(0x7f0000003540)=""/41, 0x29}, {&(0x7f0000003580)=""/76, 0x4c}, {&(0x7f0000003600)=""/32, 0x20}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x6}, 0x10000}, {{&(0x7f00000046c0)=@tipc=@name, 0x80, &(0x7f0000005740)=[{&(0x7f0000004740)=""/4096, 0x1000}], 0x1, &(0x7f0000005780)=""/43, 0x2b}, 0x119ce8f4}], 0x6, 0x40010040, &(0x7f0000005940)={0x0, 0x3938700}) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000005a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005a00)={&(0x7f0000005980)={0x7c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000041) [ 2462.237895][T20277] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2462.247161][T20276] ptm ptm0: ldisc open failed (-12), clearing slot 0 07:33:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x34000}, 0x0) 07:33:30 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x775) [ 2462.317240][T11461] Bluetooth: hci2: sending frame failed (-49) 07:33:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 2462.368119][T20277] loop0: detected capacity change from 0 to 16360 07:33:30 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x5209, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) 07:33:30 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}}, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 07:33:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x400300}, 0x0) 07:33:30 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 2462.780564][T20315] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2462.820894][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2464.364401][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2464.373990][ T8958] Bluetooth: hci2: command tx timeout [ 2464.834243][ T9105] Bluetooth: hci7: command 0xfc11 tx timeout [ 2464.834374][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2464.908774][T20279] loop0: detected capacity change from 0 to 16360 07:33:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket(0x10, 0x803, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000f6810000001c0012800b000100697036746e6c00000c00828006000f0002000000"], 0x3c}}, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup3(r3, r1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}) r6 = socket(0x10, 0x803, 0x0) r7 = dup3(r6, r5, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x800, 0x8}, 0x18) accept4$bt_l2cap(r8, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$KDADDIO(r4, 0x400455c8, 0xbfc) r9 = dup2(r0, r0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 07:33:32 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x6000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = gettid() r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x81, 0x4, 0x0, 0x20, 0x0, 0x4, 0xb4080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x40001, 0xc9a, 0x6, 0x1, 0x2, 0x9, 0x9, 0x0, 0x1, 0x0, 0x3}, r1, 0x6, r2, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf0ffff}, 0x0) 07:33:32 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x0, 0x2, 0x0, 0x25, 0x0, 0xfffffffffffffffb, 0x400, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0xfff}, 0x10008, 0x80000001, 0x7f, 0x6, 0x5, 0x723d, 0x3, 0x0, 0x8, 0x0, 0x9}, r2, 0xc, r0, 0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) [ 2465.049294][T20341] __nla_validate_parse: 12 callbacks suppressed [ 2465.049313][T20341] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2465.112863][T20343] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 07:33:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x1000000}, 0x0) 07:33:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1f, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:32 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xf000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2465.258138][T20347] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2465.289618][T11192] Bluetooth: hci2: Frame reassembly failed (-84) [ 2465.301158][T11192] Bluetooth: hci2: Frame reassembly failed (-84) [ 2465.336808][T20358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2465.349230][T20359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:33 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xfe, 0x3, 0xe6, 0x0, 0x0, 0xe6, 0x41280, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x8, 0x6}, 0x10010, 0xffffffffffff1438, 0x0, 0x6, 0xa4, 0x5, 0x4, 0x0, 0xb68d, 0x0, 0x8000000000026}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) 07:33:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x2000000}, 0x0) [ 2465.497365][T20368] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffff8, 0xff}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r2 = dup2(r0, r0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 07:33:33 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x30000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x3000000}, 0x0) 07:33:33 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x100, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000000440)={[], [{@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<', r1}}, {@measure}, {@pcr={'pcr', 0x3d, 0xf}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@obj_user={'obj_user', 0x3d, '\xd3p\x80\x8e\xde\x03\x02\x02O\xf2\xae\xd9\x1d; \xfd\x9e\xa8\xc7(\xf7\x00Qi\x9bP\x80\xbcRG\xc1\xce\f\x90x\v\x83c\x016\xf8\xf0\x97+\xc7\xf3\xc0\xaaB$\x86dhB!6<\xce\xe4\xa2\x03\xb0z\x06\x7f\xe1Q\xc0\xe2\xbazr\xfe\xbb\x8b\xb0p7\x7f\xe6\v?0\xec\xe6\x92\x88k\x9aE\xd9\xc7b\x1ek\xa3\x81R$\bZ\xf2%\x0f\xab\b\xdd_\x88g\x96<;\x8c3Q\xff\x14\x8c3\xa6\xe1\xa2\x97j)\v\xf9\xb1c\xe7\x7f\xe3z\xd50x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/135, 0x87}], 0x3, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/3, 0x3}, {&(0x7f0000000880)=""/23, 0x17}, {&(0x7f00000008c0)=""/22, 0x16}], 0x6, &(0x7f0000000980)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/158, 0x9e}, {&(0x7f0000000b40)=""/146, 0x92}, {&(0x7f0000000c00)=""/45, 0x2d}, {&(0x7f0000000c40)=""/86, 0x56}, {&(0x7f0000000cc0)=""/206, 0xce}, {&(0x7f0000000dc0)=""/34, 0x22}, {&(0x7f0000000e00)=""/93, 0x5d}, {&(0x7f0000000e80)=""/183, 0xb7}], 0x8, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/135, 0x87}, {&(0x7f00000011c0)=""/134, 0x86}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/97, 0x61}], 0x4}}], 0x4, 0x20012040, &(0x7f0000001540)={r3, r4+60000000}) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = dup3(r7, r6, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd6, 0x8, 0x4, 0x9d, 0x0, 0x93, 0x10220, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x40100, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x7f, 0x0, 0x9, 0x0, 0x611ac0a3}, r5, 0xa, r8, 0x8) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:37 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xf0ffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2471.634195][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2471.634238][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:39 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x10002) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 2471.714196][T13286] Bluetooth: hci7: command 0xfc11 tx timeout [ 2471.714295][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2471.791401][T20456] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2471.814571][ T10] Bluetooth: hci2: Frame reassembly failed (-84) 07:33:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newneigh={0x78, 0x1c, 0x2, 0x70bd27, 0x25dfdbfb, {0x1c, 0x0, 0x0, r7, 0x10, 0x0, 0x8}, [@NDA_VNI={0x8, 0x7, 0x81}, @NDA_DST_IPV4={0x8, 0x1, @private=0xa010102}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_VNI={0x8, 0x7, 0x4}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_CACHEINFO={0x14, 0x3, {0x3ab, 0xbf1, 0x6, 0x5b5}}, @NDA_IFINDEX={0x8}]}, 0x78}}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) dup2(r0, r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x81030000}, 0x0) 07:33:39 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6000000}, 0x0) 07:33:39 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x3f, 0x6, 0x4, 0x0, 0x2, 0x88000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa86e, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x14500, 0x5, 0x4, 0x0, 0x8, 0x6, 0x9, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2472.242661][T20466] __nla_validate_parse: 1 callbacks suppressed [ 2472.242679][T20466] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:40 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x1, 0x3, 0x3, 0x0, 0x200, 0x10000, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x1b232, 0x1, 0xa6, 0x7, 0x401, 0x7, 0x4, 0x0, 0xa54, 0x0, 0x1158}, 0xffffffffffffffff, 0x2, r0, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x20, 0x40, 0x7f, 0xef, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x99ce, 0x3f}, 0x10, 0x10001, 0xfffffffd, 0x7, 0x122e5b34, 0x20, 0xfff, 0x0, 0x2, 0x0, 0x7f}, 0xffffffffffffffff, 0xc, r0, 0x2) r1 = syz_mount_image$omfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x4, 0x2, &(0x7f0000000300)=[{&(0x7f0000000240)="aaf680eb53c5fcfca0f616aa893ae6eb677626beef4ae3", 0x17, 0x401}, {&(0x7f0000000280)="c7b7200ca3774604693bcd0838865d484ac0ab1b5eb8caee77d0def715b1203de060d5362e30524ef48a81a0620a50192058a737b5ae2139451b6576bb904a2c5efb422592e64e214d74118148b43213b6a2ef2aaee279318ae93b4ad73fa0b1cf54247f25666ca1b5fa41", 0x6b, 0x1}], 0x4, &(0x7f0000000340)={[{'[^++,!):'}], [{@subj_role}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x63, 0x36, 0x32, 0x64, 0xe, 0x34, 0x32], 0x2d, [0x35, 0x64, 0x64, 0x38], 0x2d, [0x32, 0x61, 0x63, 0x32], 0x2d, [0x64, 0x35, 0x38, 0x36], 0x2d, [0x64, 0x4, 0x33, 0x38, 0x34, 0x37, 0x1, 0xd]}}}]}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000440)={r0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2472.290170][T20470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 07:33:40 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x2000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2472.343742][T20472] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:33:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x7000000}, 0x0) [ 2472.413280][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2472.439556][T20479] loop5: detected capacity change from 0 to 4 [ 2472.463465][T11202] Bluetooth: hci7: Frame reassembly failed (-84) [ 2472.502460][T20484] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 2472.548424][T20479] loop5: detected capacity change from 0 to 4 [ 2472.565987][T20505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8000000}, 0x0) [ 2472.671861][T20511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2472.742160][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2473.874154][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2473.874303][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2473.914266][T20518] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2474.524316][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2474.524769][ T8958] Bluetooth: hci7: command 0xfc11 tx timeout [ 2475.046046][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:33:43 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) fcntl$dupfd(r1, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200502, 0x108) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) 07:33:43 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x3000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:43 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x3f, 0xff, 0x3, 0x40, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x0, 0x6}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="8402251026e89ac1009d9333dedf05a1aa8a79693ee7597cea57fd5df3fb8459f5a324f0982b79a201c6589a1d0bb46b7497db1c0d00d24b89c958d067c2685b7edd1aa42cbdec4151e4619cffafb9812737f80da3d531568b551f97ca6d4c7c34036b5a6fd051317174126b8c564b186f61a1d14cd16d4c4a913b096ea9a940e5e57998f1158aa7deeb1b4c07460b5777e1d128dc827456a7bbb0e2ada492c899af5fb61707dbcbfbd14a72b9338de0ebdf7c6d4ca754532ae5ccbd2cb0c003", 0xc0, 0x80, &(0x7f0000000280)={0x11, 0x17, r3, 0x1, 0x1}, 0x14) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000500)=""/25, 0x19}, {&(0x7f0000000540)=""/146, 0x92}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/30, 0x1e}, {&(0x7f0000001640)=""/31, 0x1f}, {&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/150, 0x96}, {&(0x7f0000001840)=""/171, 0xab}], 0x9, 0x7ff, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) accept4(r1, &(0x7f0000000300)=@ethernet={0x0, @dev}, &(0x7f0000000380)=0x80, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x44, 0x8, 0xe048, 0x7}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 07:33:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x8060000}, 0x0) 07:33:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000280)={0xfffffffb, 0xfd, 0xfffffffa}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) r2 = dup2(r0, r0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/248) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) dup3(r5, r4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x210, 0x120, 0x408, 0x2e0, 0x2e0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "7aac", 0x1}}, @common=@hl={{0x28}, {0x0, 0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c, 0x33, 0x7}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xffffffff], 'veth1_to_hsr\x00', 'macsec0\x00', {0xff}, {0xff}, 0x16, 0xfb, 0x0, 0x81}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x49], 0xffffff7f, 0x8, 0x1}}, @common=@inet=@socket1={{0x28}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc1, 0x73}}}, {{@ipv6={@private2, @mcast2, [0x0, 0xff, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x3b, 0x1, 0x4, 0xd}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) [ 2475.954142][ T8958] Bluetooth: hci2: command 0xfc11 tx timeout [ 2475.964161][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:43 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x4000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2476.107435][T20542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2476.120692][T20544] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2476.137698][T20546] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2476.157996][T11202] Bluetooth: hci2: Frame reassembly failed (-84) [ 2476.176580][T20543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2476.214547][ T10] Bluetooth: hci7: Frame reassembly failed (-84) [ 2476.230478][ T10] Bluetooth: hci7: Frame reassembly failed (-84) 07:33:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x9000000}, 0x0) 07:33:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 07:33:44 executing program 5: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000004d80)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000001440)=""/187, 0xbb}, {&(0x7f0000000380)=""/63, 0x3f}], 0x8, &(0x7f0000001580)=""/201, 0xc9}, 0x3f}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001700)=""/222, 0xde}, {&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/2, 0x2}, {&(0x7f0000001900)=""/198, 0xc6}, {&(0x7f0000001a00)=""/76, 0x4c}, {&(0x7f0000001a80)=""/99, 0x63}, {&(0x7f0000001b00)=""/244, 0xf4}, {&(0x7f0000001c00)=""/222, 0xde}, {&(0x7f0000001d00)=""/224, 0xe0}, {&(0x7f0000001e00)=""/107, 0x6b}], 0xa, &(0x7f0000001f40)=""/206, 0xce}, 0x1}, {{&(0x7f0000002040), 0x80, &(0x7f0000002440)=[{&(0x7f00000020c0)=""/185, 0xb9}, {&(0x7f0000002180)=""/241, 0xf1}, {&(0x7f0000002280)=""/181, 0xb5}, {&(0x7f0000002340)=""/236, 0xec}], 0x4, &(0x7f0000002480)=""/35, 0x23}, 0x7}, {{&(0x7f00000024c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003580)=""/24, 0x18}, {&(0x7f00000035c0)=""/218, 0xda}, {&(0x7f00000036c0)=""/95, 0x5f}], 0x3, &(0x7f0000003780)=""/153, 0x99}, 0xffff}, {{&(0x7f0000003840)=@generic, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000038c0)=""/197, 0xc5}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/238, 0xee}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)=""/170, 0xaa}, {&(0x7f0000003c40)=""/117, 0x75}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000004d40)=""/18, 0x12}, 0x6}], 0x6, 0x103, &(0x7f0000004f00)={0x77359400}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:44 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x5000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xa000000}, 0x0) [ 2478.194150][ T7618] Bluetooth: hci2: command 0xfc11 tx timeout [ 2478.200883][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:46 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x51040, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x408b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:33:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 07:33:46 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x6000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) 07:33:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xc000000}, 0x0) [ 2478.274268][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2478.407633][T20590] __nla_validate_parse: 3 callbacks suppressed [ 2478.407651][T20590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2478.442887][T20591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2478.720893][T20556] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2478.733617][T10631] Bluetooth: hci2: sending frame failed (-49) 07:33:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0xffffffffffffffdb, 0x0, 0x0) 07:33:48 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x7000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 07:33:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xe000000}, 0x0) 07:33:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2, 0x81, 0x8, 0x3, 0x0, 0x2, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x32a8, 0x0, @perf_config_ext={0x8000, 0x8}, 0x20, 0x6, 0x3ff, 0x8, 0xd8, 0x40, 0x7860, 0x0, 0x3}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xa) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x0, 0xe6, 0x80, 0x0, 0x9, 0x10006, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x40, 0xb2}, 0x10900, 0x0, 0xb2, 0x0, 0xfffffffffffffff7, 0x4, 0x3f, 0x0, 0x8000, 0x0, 0xe07}, 0x0, 0x4, r3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:48 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x28) [ 2480.754435][T10399] Bluetooth: hci2: command 0xfc11 tx timeout [ 2480.760960][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:48 executing program 1: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0x1000, 0x7, 0x7, 0x8, "0c05a027a590206a"}) sendfile(r2, r1, &(0x7f0000000080)=0x4f16ee3f, 0x7fff) [ 2480.853858][T20607] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf000000}, 0x0) [ 2480.907330][T20613] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2480.922314][T10631] Bluetooth: hci2: sending frame failed (-49) [ 2480.962575][T20618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2481.000204][T20623] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:33:48 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) write$binfmt_script(r0, &(0x7f0000001940)={'#! ', './file0', [{0x20, '-'}, {0x20, 'blkio.bfq.io_queued_recursive\x00'}, {0x20, 'blkio.bfq.io_queued_recursive\x00'}, {0x20, 'blkio.bfq.io_queued_recursive\x00'}, {0x20, 'blkio.bfq.io_queued_recursive\x00'}, {0x20, '{!'}, {0x20, '.((j'}, {0x20, 'sysv\x00'}], 0xa, "afb86fec52076393626a7b78fd15657ee0eb39edaee01cf0bb9b2c5c859363250f4d2a7f88bb5210b751cdf6475f7408514cbae1e9e8bc438b81072be2e67495585915579d923411f90379d25fb8aa697462d402065d14eaac67d4dc63a38c46a28102ee623a2b01fa50baf4d2239c89516aa5cf291b5ae061d01a07a02e9e5bce7c84bd3485828d1518ba7423204b81485e29a63c346d7974861ebdaefbd08da4612b33ba0151e9b0bc07596bfaaa91e84e4f2e2e03"}, 0x14d) syz_mount_image$sysv(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x401, 0x7, &(0x7f0000000640)=[{&(0x7f0000000100), 0x0, 0xbb92}, {&(0x7f0000000140)="c7ab11bb0f327f536bc7aca3ac5c8444adcfff8eadff2feb6ed51fdab5ec05cc668579f2e464e9cbb13e98d901a47737f7cb409f6fcd390ad549d682be867468ddc3744223901548386d5dc290f4fbdd730707c2ea39e0a6da5588de5806749fcf7ad8fff3fe5d71a53c3126da159278882441e15967c9f1699b5b581f3115e57b3dc19c841788a08adf4d13302544c61f8364a33844b951779ea7d47c244a353f9c2997eba4e2389d1ef035f33334", 0xaf, 0x1}, {&(0x7f0000000200)="c09fbc434b70e4f95abdd645c0bfd99e7d19da7312eb0d21a94a69477ba2ba07d6320c2ec8f7601109424a2ca400d6cafe4fd707542a9f0ad85050cd01e69bcb2c6bee39a2576320f09b84358283cc9a91ad20d34d8d771fc3665811259dd64045649f03affb63ad7b0594f7fd1e9aec986a11ba9b2e9786e4191ca732c8fd332d659a5a009194c93dcfab839dffc3ff295e60c5d48342b52c416f1e38db6b6035f13ac7c4272c69e92b4150c54d1083bce7984971214e36ba4d2a677dd1708140fe1b63f0055fd10891aa3eae0b4a", 0xcf, 0x6}, {&(0x7f0000000440)="5a74ea409b2ab077b702f32d0af4d34714c77c62ac0c343bcc6e3131e83836dca4c5e3a8141967e92c28389a1533a680b5273b1ffe1f0f2dbc7b8c9e5b42fb217b6d868e4f48e47c8b158ced817dc573fc7845b839b24b1593649705db02c5d7d5ef99f0cfd9f15ae7950a2e7a835e580842aa2dd1fc7826cb067b52f32143ffee4486209584b5949b50894bb04489d7807e8b266d1cc528753ee5fba2eb22c33d12b6c723c8e7b842d6224ef0845236414efa3cd8d20a8cc20861881287129345bc44e6d7024222c40d75b49e0e02b56a4265f4ec81d9470debb4a0b9e66a7083b0", 0xe2, 0x8}, {&(0x7f0000000300)="406e2abdb724270d540321d2a35a6236594df23cb43df1aad708ff5cebdd1ed8834dafcfa9966b69ceddc8030f6dd308cd4a2c9b67b6643b0fa5ef69b3cf1f74ac150b8671178fe31864b222", 0x4c, 0xfffffffffffffffa}, {&(0x7f0000000540)="46598096479fc3433f016894866df639b69b1a52915301cb11e4699414b516cccf91f599413e653c9d5584594cb60fa383d741fb2024d98cf870ddffc9cea84d6bb8518c3d39f33f715a4cf58ca638953e9127f949015d6656438f33196a64bec33096f92ac9f56ee8be7f304b71f12a6be282d5475500f4c8c9be834026f95645aff1411a9e4b09d9b8a558ef744fc1b5de76b43557c81b5a850ebd56ba9588ec9b79d52da8bd05121eb087534f53a469e2ce1efeb6428ff85f785fe5ab80e559e6bbaef26e20c8046c579664bee74d3d45d1bbe8a7", 0xd6, 0x5}, {&(0x7f0000000380)="e2", 0x1, 0x7}], 0x848000, &(0x7f0000001840)=ANY=[@ANYBLOB=',],-+\'}#,blkio.bfq.io_queued_recursive\x00,subj_user=,rootcontext=user_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c736d61636b6673666c6f6f723d626c6b696f2e6266712e696f5f7175657565647375626a5f757365723d626c6b696f2e6266712e696f5f7175657565645f726563757273697665002c00000000000000000000000000ef98a5d711e88f948421113f844a1d3b29cf02"]) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000840)={{r3}, 0x0, 0x18, @inherit={0x70, &(0x7f00000007c0)={0x1, 0x5, 0xbb, 0x2, {0x20, 0x0, 0x800, 0x81, 0xffff}, [0xfffffffffffffffb, 0x9, 0x5, 0x7c50, 0x8000]}}, @devid}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) 07:33:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x10000000}, 0x0) [ 2481.019309][ T8757] Bluetooth: hci7: Frame reassembly failed (-84) [ 2481.042590][T20624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:48 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x8000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 2481.203595][T20633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2481.239901][T20637] loop5: detected capacity change from 0 to 16383 [ 2481.268220][T20641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2481.444266][T20637] loop5: detected capacity change from 0 to 16383 [ 2483.004421][T27062] Bluetooth: hci2: command 0xfc11 tx timeout [ 2483.009349][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2483.074139][ T8958] Bluetooth: hci7: command 0xfc11 tx timeout [ 2483.084691][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2483.111313][T20655] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:33:51 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x9000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x1f000000}, 0x0) 07:33:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 07:33:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) r4 = dup3(r2, r1, 0x0) r5 = dup3(r4, r4, 0x80000) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getnetconf={0x2c, 0x52, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0xeec4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8000}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xd44}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x24040010) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104000000e7bb57164c834650cbabf636794fa56a9a0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}}, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x9f) r6 = dup2(r0, r0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:33:51 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.log\x00', 0x400, 0x40) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x7, 0x5, 0xe7, 0x1}, {0x0, 0x7, 0x1, 0x9}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x1002}, 0x4) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x40, 0x20, 0x6, 0x9, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x1882, 0xb54, 0x8c, 0x0, 0x3, 0x7fffffff, 0x5, 0x0, 0x5, 0x0, 0x16}, 0x0, 0x3, 0xffffffffffffffff, 0x9) [ 2483.567439][T20666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_getscheduler(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x9, 0x81, 0x1, 0x0, 0x1, 0x4200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x1, 0x8, 0x7f, 0x5, 0xa6, 0x5, 0x1f, 0x0, 0x101}, r0, 0x7, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2483.612676][T20669] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2483.692539][T20674] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2483.774278][T13775] Bluetooth: hci7: Frame reassembly failed (-84) [ 2483.787946][T20674] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 07:33:52 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r7, @ANYRESDEC=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=@bridge_setlink={0x348, 0x13, 0x4, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x4080a, 0x8009}, [@IFLA_VF_PORTS={0x2ec, 0x18, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2f829daaf1f29366c55f9ef02b6598a2"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3e62c9ec0229a0c882ddd25e59f45b2f"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3fb2fd5b935b0d509f879d8198866c0e"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b4458c542cddd8705ce5c073349a7397"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c2c36943bc7a43e2ca79c9fce280db08"}, @IFLA_PORT_PROFILE={0xe, 0x2, '/dev/ptmx\x00'}, @IFLA_PORT_PROFILE={0x4}, @IFLA_PORT_PROFILE={0xe, 0x2, '/dev/ptmx\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8a6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2c494c46a8bbfaf538883a0df44be250"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e65dcb5da0606aa71f0663b033cccc0c"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80}, @IFLA_PORT_VF={0x8, 0x1, 0xfffff001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6ef523afa4d582a1338e666b0b5fcd7e"}, @IFLA_PORT_PROFILE={0x7, 0x2, '^@\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d99e574af3190f37552cf6c1274fd874"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cb48caa05460f4131d9740788729dcc4"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1e1b7f7a913d5c1ca838384dcb66f866"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ed5758667e502a6d5cdec4a7282d2858"}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '+\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6d56129ea9b9df9b10876fa536c57876"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x80}, @IFLA_PORT_PROFILE={0x8, 0x2, '+\\{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ef1e8ccf4add2a113b598dc33200e895"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd4abc22cea6f7f5b1cb6a2fde1ed304"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3d56995f98384117df94e240d7a28438"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0xe, 0x2, '/dev/ptmx\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c36a6098bc0a9ef7cabd8a3ac1a9b36"}, @IFLA_PORT_VF={0x8, 0x1, 0x591}, @IFLA_PORT_PROFILE={0xe, 0x2, '/dev/ptmx\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x3f}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a33205dff97b979241279560a0d9e2ea"}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bbc6134f9431d59c9c91c202bb8936a9"}, @IFLA_PORT_PROFILE={0xe, 0x2, '/dev/ptmx\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "72b6cc2d65a8b2d9f0df413ea2ea990f"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1c}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7a22d948df8c9dd19f68d84a23cbcf85"}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_PORT_ID={0xa, 0x22, "358e49dd9778"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80}, @IFLA_EVENT={0x8, 0x2c, 0x83b}, @IFLA_ADDRESS={0xa}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x348}, 0x1, 0x0, 0x0, 0x11}, 0x84) 07:33:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 07:33:52 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xe000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x20000000}, 0x0) [ 2485.154175][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:33:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x80, 0x81, 0x9, 0x0, 0x0, 0x8081, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x7}, 0x88, 0x1, 0xfffffb88, 0xd, 0xea, 0x60, 0x8, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xd, r2, 0x2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x7}, 0x4) [ 2485.253206][T20694] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2485.273320][T20695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:53 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xf000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 07:33:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x35040000}, 0x0) [ 2485.325667][T20699] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2485.386789][ T9762] Bluetooth: hci2: sending frame failed (-49) [ 2485.396612][T20702] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2485.465736][T20708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2485.489944][T20712] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2485.794102][ T7618] Bluetooth: hci7: command 0xfc11 tx timeout [ 2485.794178][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) 07:33:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x40, 0x4) 07:33:54 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x6, 0x4, 0x20, 0x0, 0x3, 0x1000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x5}, 0x1100, 0x0, 0x55ad7ba1, 0x7, 0x1082bfd3, 0x1, 0x2, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 2486.316279][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2486.366452][T20722] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2486.442355][T20727] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2487.394232][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2487.403074][ T7618] Bluetooth: hci2: command tx timeout [ 2487.423070][T20699] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2487.456835][ T9762] Bluetooth: hci2: sending frame failed (-49) [ 2488.524306][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2488.533412][T20690] Bluetooth: hci7: command tx timeout 07:33:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:33:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x43050000}, 0x0) 07:33:57 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x3f000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x2) 07:33:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) bind$packet(r1, &(0x7f0000000040)={0x11, 0x7, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) 07:33:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43be83c0000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe6c}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getroute={0x38, 0x1a, 0x200, 0x70bd28, 0x25dfdbfb, {0x1c, 0x14, 0x10, 0x8, 0xfc, 0x0, 0xfe, 0x2, 0x3800}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_MULTIPATH={0xc, 0x9, {0x62, 0x22, 0x2}}, @RTA_OIF={0x8, 0x4, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) [ 2489.474174][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2489.548969][T20757] __nla_validate_parse: 1 callbacks suppressed [ 2489.548986][T20757] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:33:57 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x52090000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_getscheduler(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x9, 0x81, 0x1, 0x0, 0x1, 0x4200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x1, 0x8, 0x7f, 0x5, 0xa6, 0x5, 0x1f, 0x0, 0x101}, r0, 0x7, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 2489.612149][T20774] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2489.628900][T20775] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x3) 07:33:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x48000000}, 0x0) [ 2489.674606][T20777] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:33:57 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x60000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2489.828536][T20791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x4c000000}, 0x0) [ 2489.946835][T20796] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2490.093686][T20799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 07:33:59 executing program 1: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:33:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x4) 07:33:59 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x9effffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:59 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_getscheduler(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x9, 0x81, 0x1, 0x0, 0x1, 0x4200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x1, 0x8, 0x7f, 0x5, 0xa6, 0x5, 0x1f, 0x0, 0x101}, r0, 0x7, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:33:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x60000000}, 0x0) 07:33:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) dup2(r0, r0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2491.794097][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2491.794454][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2491.888064][T20813] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2491.907244][T11461] Bluetooth: hci2: sending frame failed (-49) [ 2491.919358][T20812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x5) [ 2491.944757][T20817] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:33:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x65580000}, 0x0) 07:33:59 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xf0ffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x6) [ 2492.053858][T20824] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2492.110994][T20831] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:33:59 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xfffff000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:33:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x68000000}, 0x0) [ 2492.213769][T20837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2493.954335][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2493.963425][ T7618] Bluetooth: hci2: command tx timeout [ 2494.114236][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2494.139834][T20846] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2494.160312][T10631] Bluetooth: hci2: sending frame failed (-49) 07:34:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:34:03 executing program 5: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x3f, 0xff, 0x3, 0x40, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x0, 0x6}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="8402251026e89ac1009d9333dedf05a1aa8a79693ee7597cea57fd5df3fb8459f5a324f0982b79a201c6589a1d0bb46b7497db1c0d00d24b89c958d067c2685b7edd1aa42cbdec4151e4619cffafb9812737f80da3d531568b551f97ca6d4c7c34036b5a6fd051317174126b8c564b186f61a1d14cd16d4c4a913b096ea9a940e5e57998f1158aa7deeb1b4c07460b5777e1d128dc827456a7bbb0e2ada492c899af5fb61707dbcbfbd14a72b9338de0ebdf7c6d4ca754532ae5ccbd2cb0c003", 0xc0, 0x80, &(0x7f0000000280)={0x11, 0x17, r3, 0x1, 0x1}, 0x14) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000500)=""/25, 0x19}, {&(0x7f0000000540)=""/146, 0x92}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/30, 0x1e}, {&(0x7f0000001640)=""/31, 0x1f}, {&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/150, 0x96}, {&(0x7f0000001840)=""/171, 0xab}], 0x9, 0x7ff, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) accept4(r1, &(0x7f0000000300)=@ethernet={0x0, @dev}, &(0x7f0000000380)=0x80, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x44, 0x8, 0xe048, 0x7}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:34:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x7) 07:34:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x6c000000}, 0x0) 07:34:03 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xffffff7f, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2496.194099][ T7618] Bluetooth: hci2: command 0xfc11 tx timeout [ 2496.194260][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) 07:34:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x74000000}, 0x0) [ 2496.279786][T20865] __nla_validate_parse: 1 callbacks suppressed [ 2496.279804][T20865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:34:04 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf051e1c770d581a0}, 0x0, 0x1, 0xc66}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 07:34:04 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xffffff9e, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x8) [ 2496.466924][T20881] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2496.495612][T20886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2496.591890][T20896] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x7a000000}, 0x0) 07:34:04 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xfffffff0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2496.790756][T20905] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2498.594196][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2498.599156][T27062] Bluetooth: hci2: command 0xfc11 tx timeout 07:34:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x400, 0x23) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2a, 0x800, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000100)=0x800) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_open_procfs(r4, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x9) 07:34:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:34:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x9) 07:34:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x80350000}, 0x0) 07:34:06 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xa) [ 2498.827850][T20939] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2498.871312][T20940] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:34:06 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x81000000}, 0x0) [ 2498.982104][T20947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xc) [ 2499.039785][T20950] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:34:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x86ddffff}, 0x0) 07:34:06 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2499.151636][T20955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2499.173251][T20956] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2499.178429][T20941] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:34:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x88470000}, 0x0) [ 2499.241164][ T10] Bluetooth: hci7: Frame reassembly failed (-84) [ 2499.256312][ T10] Bluetooth: hci7: Frame reassembly failed (-84) [ 2499.349235][T20964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2500.924177][ T7618] Bluetooth: hci2: command 0x1003 tx timeout [ 2500.931646][ T9762] Bluetooth: hci2: sending frame failed (-49) [ 2501.314120][ T9105] Bluetooth: hci7: command 0xfc11 tx timeout [ 2501.314219][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2501.358365][T20941] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2501.377585][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2503.004133][ T7618] Bluetooth: hci2: command 0x1001 tx timeout [ 2503.010620][ T9762] Bluetooth: hci2: sending frame failed (-49) 07:34:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDMKTONE(r0, 0x4b30, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) 07:34:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xe) [ 2503.394244][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2503.403981][T13286] Bluetooth: hci7: command tx timeout [ 2503.456375][T20975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2503.483298][T20977] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2503.497583][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2505.084153][ T9105] Bluetooth: hci2: command 0x1009 tx timeout [ 2505.554229][ T9105] Bluetooth: hci7: command 0xfc11 tx timeout [ 2505.558583][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2505.583395][T20984] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2507.634143][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2507.644178][ T9105] Bluetooth: hci7: command tx timeout 07:34:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:34:16 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x3, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x88480000}, 0x0) 07:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [], 0x8, "3c1d4c65c79995"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f100)={0x0, ""/256, 0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "329f34f6f105cf"}) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r5, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r6, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r7}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r7}], 0xfd, "d4c90300"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {}, {}, {}, {0x0, r133}, {r40}, {r52}, {}, {r92, r100}, {r127}, {}, {0x0, r57}, {}, {r67}, {r103}, {}, {r113}, {r49, r7}, {0x0, r102}, {0x0, r78}, {}, {}, {}, {}, {0x0, r47}, {}, {r8}, {}, {0x0, r20}, {0x0, r126}, {r101}, {r87}, {0x0, r16}, {r131, r108}, {}, {0x0, r119}, {}, {}, {0x0, r22}, {r74}, {r41}, {}, {}, {0x0, r33}, {0x0, r14}, {0x0, r54}, {0x0, r65}, {r68, r81}, {}, {}, {r93}, {r83}, {}, {}, {}, {}, {}, {}, {r120}, {0x0, r125}, {0x0, r111}, {r98}, {r109, r9}, {}, {}, {0x0, r105}, {0x0, r51}, {}, {r32}, {}, {}, {r24}, {}, {}, {}, {}, {r99, r82}, {}, {r112}, {0x0, r58}, {0x0, r117}, {}, {0x0, r95}, {}, {}, {}, {}, {r46}, {0x0, r62}, {}, {r61, r63}, {r31}, {0x0, r27}, {r38}, {}, {}, {}, {r86}, {}, {}, {r72, r128}, {}, {}, {r124, r30}, {0x0, r35}, {0x0, r85}, {}, {0x0, r108}, {}, {0x0, r79}, {}, {}, {0x0, r51}, {r60}, {0x0, r82}, {}, {r118}, {}, {0x0, r104}, {r36}, {r129, r84}, {}, {}, {}, {r12}, {}, {}, {0x0, r62}, {}, {r34, r54}, {0x0, r122}, {}, {}, {r76, r115}, {r29}, {r56, r25}, {0x0, r43}, {}, {r73}, {0x0, r88}, {r26}, {}, {}, {0x0, r64}, {0x0, r128}, {}, {}, {r23}, {r107}, {r15, r45}, {0x0, r114}, {}, {}, {}, {0x0, r106}, {}, {}, {0x0, r75}, {r80}, {0x0, r37}, {r116}, {0x0, r66}, {}, {}, {0x0, r50}, {}, {0x0, r90}, {r32}, {0x0, r11}, {}, {0x0, r20}, {}, {}, {r69, r110}, {}, {r44, r130}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r90}, {}, {}, {}, {0x0, r53}, {r59}, {r13, r66}, {}, {}, {}, {}, {0x0, r96}, {}, {}, {}, {}, {}, {0x0, r18}, {r8}, {}, {}, {r21}, {r48}, {r89}, {r55}, {}, {r123}, {}, {r10}, {}, {r28}, {r94}, {}, {r19}, {}, {}, {}, {0x0, r121}, {}, {0x0, r70}, {}, {0x0, r50}, {}, {}, {}, {}, {r6}, {r91}, {r39, r71}, {}, {}, {}, {}, {r17}, {}, {}, {r87, r77}, {0x0, r50}, {}, {r97}, {}, {0x0, r75}, {}, {}, {}, {0x0, r132}, {0x0, r42}], 0x8, "3c1d4c65c79995"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004f500)={0x418e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {0x0, r4}, {r6, r134}], 0x8, "2220ac42ecc9f6"}) 07:34:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xf) 07:34:16 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2a, 0xbd, 0x8, 0x81, 0x0, 0x6000000000000000, 0x5524, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xffffffff80000000, 0x5}, 0x4ec0, 0x3, 0xffffffe1, 0x8, 0x8, 0xffff, 0x4, 0x0, 0x7f, 0x0, 0x21c}, r2, 0x2, r0, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xa1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0xdf, 0x5, 0x7, 0x5, 0x1b, "304ff1368473594a"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x16) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) 07:34:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x10) [ 2509.118688][T21000] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2509.138660][T21007] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2509.153851][T10631] Bluetooth: hci2: sending frame failed (-49) [ 2509.163160][T21005] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2509.184557][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2509.203929][T21006] debugfs: Directory 'hci8' with parent 'bluetooth' already present! 07:34:16 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x88640000}, 0x0) 07:34:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x43) [ 2509.221231][T21013] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2509.228902][ T9587] Bluetooth: hci8: sending frame failed (-49) [ 2509.259056][T21016] hub 9-0:1.0: USB hub found [ 2509.263921][T21016] hub 9-0:1.0: 8 ports detected [ 2509.416847][T21028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:34:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x48) 07:34:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x88a8ffff}, 0x0) [ 2509.562980][T21033] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2509.573249][T21034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2511.154267][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2511.191458][T21000] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2511.204651][ T9587] Bluetooth: hci2: sending frame failed (-49) [ 2511.234185][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2511.234201][ T9105] Bluetooth: hci7: command 0xfc11 tx timeout [ 2511.314480][ T9105] Bluetooth: hci8: command 0x1003 tx timeout [ 2511.321027][T10631] Bluetooth: hci8: sending frame failed (-49) [ 2513.234285][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2513.235035][ T9105] Bluetooth: hci2: command 0xfc11 tx timeout [ 2513.394092][T27062] Bluetooth: hci8: command 0x1001 tx timeout [ 2513.401009][T11461] Bluetooth: hci8: sending frame failed (-49) [ 2515.474195][T10399] Bluetooth: hci8: command 0x1009 tx timeout 07:34:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:34:26 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x5, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x88caffff}, 0x0) 07:34:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x4c) 07:34:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) r2 = socket(0x10, 0x803, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) r3 = socket(0x10, 0x803, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x9) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:34:26 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9fffe006044238cb89e14f088a81bffffff00004000632977fbac141431e934a0a662079f4b4d2f06e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = syz_open_dev$vcsn(&(0x7f0000000780), 0x6, 0x1882) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000740)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}, {0x1, 0x8a, 0x0, 0x4}]}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000da80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="6198a971bb009955e0230258b41a710e7566737bad40daaed5945f076e9aea12e69516a163fee6ae927ed59d91a2a1051ac5351cf840e08c628ef9f7e8881db8209265a19fe2a255ed2b9262b821412faf4294ed7b25ec60b0bae8d1346f57807f5e96d56dec79c986cf5b3c5893b1e38919e79ddf74c03843d9cee56b2888f1a47d64b01124e80dfb7af601bb144b376797b4c505a0503116f55ee52b8671669192bdc762", 0xa5}, {&(0x7f00000002c0)="42034f0dc4003f0a33ff5ddbbebc432df835c0e957955afab9b964f4fa6b48a445408291d8e7abd74c1db3a9462597a2d26f80ca15f94564cb9843c04aa28cb38abcb5258774a43562d488c774f1578b47ec5bc4263e7503c88c240c457b56839b9287b04398da9fe310a9366918f5192c908045d16b05b9a57a89c8ee9fea897f723f2742d7917862f5fd0eb0464fd0eb395b43b11e5a20eafc52bb0b0c5a4f50d41cda759efef3f57b805d2281226e8e2d3c2b3e8442d137ef671063211008ab1cedeecb176c91382248a0ad645732c22eeafb3809dab43aaedea32ac58ca4ef49c92b0e53d68078c5364b3dee514d22deb5b288", 0xf5}, {&(0x7f0000000440)="e82a26fb41b77a7b1b15f11c6a4ed21201127952fc58b998a98e7a89b86b534e1c03127ab5dc6ab5c162cb8b4cda27f161f5e316b15ce6ca735246c0c69b3fac13031e1f9cf1ba9b6a1008df39dbae1265f026ae555d62846e7d54345975e713b5968be489f66e19cdde1cb8a404ab501bb83e08adbe69e9584d832d75c9cf075905c51f459634a970886f1f8092d104beedffeb9ca742ca17d9de76d6188d30020d77afa387335228bac0a7279077fe1e15f2318e63bc78b818bf7bd3a744608c9eed3c5dbcd602919185f145b093b838aa6a14513ecf", 0xd7}, {&(0x7f0000000080)="235c89b52953264fc3ab9f", 0xb}, {&(0x7f0000000540)="b097cc7b9ed90ff47970cad7e30a52ef33e841b2b42b0cf613de66d52ee0443f78b5406ed3ca5aaa197d18a2212e172a3503e6258cc2ce527098e7e63e7521406705cbd21d694edc6704a1f2ee7614ad8f8f4836b4d5cccc6fc5a6f43b9969e144695302d512d3a644c7c823bfec22d090c8f53466aa423fa423b789d4af52a488bd8a183599801a1312724aa1cd23664f8dc8744dfeff640a80ad3873f563ae2adbde5c1421a11b240daf0c45dc390619f0538419c5f69c9c02ae4a8d295bcc86ccfe66ea7b4ef0058ad4eca0fa137b3e847fe7e59c93408b432237ace5e7580b40c80214ae462770", 0xe9}, {&(0x7f0000000640)="5452d5039312d6575c4b693832c17258b43bc84f59dc3265341a2e8c48245e73f2ee65fe230cdb7d9af8faf9f0cc2bd5e43d59a3c450c2b650b21f0172943b8957504ed26db4e17ff2159b9199818d7bc33137c34722", 0x56}], 0x6, &(0x7f0000004040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000004180)="81ca28b1b7d47898ccd625956d0019d8806dce5e38e65926965c7b08", 0x1c}, {&(0x7f00000041c0)="016c", 0x2}], 0x2, &(0x7f0000004240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}], 0x40, 0x20040000}}, {{&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005640)=[{&(0x7f0000004300)="1064b378e24160be1e98d1d8ede4205190229072c61e20211c90f62168333f77050856ba9a1a2a1abd51730c9e745172b46c4cbc9187d7eac002977e6405424c62bf25a99e9066f0320afd7652da5b4ba0711796db3aa7fc700d1474e7fc0c22075758db5b04caee2321c507faba1f073b3c796bf439981c6f045278e581b545896cb10834b9", 0x86}, {&(0x7f00000043c0)="a77d43a1ce1e11c4e37f181d1b5e01f70644f9fd810f75b88efc8924cb8566176aca9fbe1b3eea0f2f379f46d99eff06dcae2c7fd5fd8772eec924337290f399ab1c134992ad8646cd6158206b6b44ad19096226838dbb70e4cccbfed47b631680952c917d2b81020a03b35c7634c43194dd81ea436926c37cf2318159646b3c5d6a341b9214", 0x86}, {&(0x7f0000004480)}, {&(0x7f00000044c0)="5bfbc367369ed2309ad81c54f0d2cd79e318e953dd591ce734ae8cb475b9c20f338bc8fdfe1869d7ef914e8ef765ba99ca1d1146ffcbb6f1eef15407be0d3c04ba09184f687f9f026093c15aa0886fdf07c16a9627588cce66e4458ee7be5f28ca606a38ce5483569318458ed9b6d5591b2a5f7c941b56c71606281fb2f459a2f55f824c3bb4858fc889e041a37a20be0a73d92209a27fcc345adce37b2919d0123dc68f48e536b265c4d6e769001a0b8be250273348faf7214f5b42a707ab42db19c4894a718d28ae8be676bdc9df5f95b1ffb315d293ef3f9c599db8", 0xdd}, {&(0x7f00000045c0)="1dacf4a0203e1b9700a21d7e7101328a1b4cca1cc5670f698e55000236febeabc3eef742b4e52dd9b6f6feb5df6f255a62241f0e023d635319df43eed1f9e869be503b9cd8b6db80dcd565f3b144da5fb81ebbb65cad28f5970a4c86fd130c5a9f5e49fe53e50deacd7501b8bb36f07e647927b020416d8322b123e3ea124f8e0029ddfb8c48c1bf0eddea4de4a2597a52e51ebcabdaf3f8a806cdb2db95475c3106ea611313805c096268e8455c93ea08e5918c4ab2065feb142a515839555b6606e3e7377e897bd95662343c57841e9a0061e75550dff0d16cff1260d5f554a3a751547aac2d7cac66d9c8f4b03c6555559f6b078e135c47c04fc9f6d5e7fabd96a906f80ecf14feb554e7994283d6e284c45f6bc0fd36d6ebb24db610470b281b53a6caf2e6e46715c8efcc5a32303bb787a35fc82fbf873d3ccb16379090c6a6d138186563e6e0d45027ba9cf8bce52166bb31054759ac5ed76ff765a150947c4f4f93de976c5fbecdc8782f9566bf0a9aa6688701a0fe2dec68c438134c7a28e05e4ef371075c3f0613b6b88c32a7e97cba54a930f56d9a916007a6b18c061be31cd515b2e289f795c418952e117a424cea2dc9046f4d5e6a27f681604df32034fa0ce9b466f3ac6ecadac8195d1cd19d0a3fc34def601fe449f39b7f4e7e05392f3cd8a6730917fad8c8362f107e0324e670d0734382d5868cbc4d5231c4d8a1db1f8c1edce62701f2431794f16d97b9b2a877db046edb98cf11b3139514a9140c45a17262faacd21b4ed01cd3ed794286eec5e90834c2586ff7789d0d4aff41d214edf0dd4a6db4f994f6962542c559e70bab55a3823a720886c6fa1669dac187fa4c9d48fbc9dc497129f0bc9d5e9915b6a34826c25fc003c736da5954b74d4f8c9561b896fce2cbd8ea9276709936e39bb1468be69f2dd70d9f214a83e385557130290dcbd38e43a5e1066aabc1d23fcafd0b4aecd57d92d724efcd6fc3409fcf3bb3d1e44e16265de7ffc5c61bd1553b796dd718178f59dd29571a86f9cc2a5300835bcc4a6cc9eb4c16d2339cc2e50a2fd04e7ad6cad66d10926016686537f9f12c7ca6ebbdcbe850385a175665eb8e26ec09f010795a2c9972faf7517ef13132f3b55ad10fd42695d2ae967591695d249144cefabf33f04324c07b3fcdbc321c42966f0e8b4c2033ddf263ea6b4860274a389e9a37aacf7bf154bcebcc51f6dac05458d6220c4b0a9ddc9a2d392d47f7837333ad179259b83419d7f00464079d87af3c8a4e8d5ef9671510dc5aac17bb55e8f5d2c8f903687a581c42d24e49ff97275f37c7e874065b076be99fb75ab889d56ba34285a846329ae6fa10661e62696a08b99ef5c16d8bafd80a69a926d1dbb1ffd1b7db5e713379eda7791f48ad81c9171e2b46116a5bfe0302b421d384f6f1f55eaa74709dd91cee16b997fabd125a450f9ae26b9c210ca262539300fe6079da1112b44d489d2b7b4c5071d4438ddfb55edb532346f68ecb955cbeb57e2153d43f1a0270a6e351b4cfa5ce4204989b5cc9d288691f54a3c39f253e8ca560c56bf59a479a7265a2ca04c68ad57f04305fa08d7bc1636c5eeb769e75c9d2df2f30f1a633c05fa0b186ae3a7eceba5a7e2005c96663768c22921977f329f1a6bc7294fa4505fb07b21551ae6e9a08999f56a9cc5df09a8dbd1e7629ddfa9fa21a61d23f4eaf6e1cc5e12d709a03f800859f48ecb4ae9802cff8800fc70966882cc9c9bd652c9bc6df662559f63f888971aee29d8fc5f0e7a313248b15d18f38686944f539e532b4dee289582552fc91c1c483a24f56760784dec05684950507fe2fc2a172075b6a91d0e30123ceb4d044c8f138709b4c0e64464ca28ceb421ba5f745b7b97c7b607d8898bfafbf38d9ee9d4108064f877817ee76b4affe12521271269f4098fc806a0b29d61f2fb82207b029c18297d2cd7cf92fef55b1c188f440d8faba15345d64b06967cfa7bd873a003fc6cdc8920d3627171798a35fff2978e039baa98836076160d6a9106b8715cafde11a78e3ed6a9d809a0f96e440373a8d549bd9e1ee4aa8ebc81fb8baf3fbf184df8b584c4bb7f21b5ab892876c3433b7db466de3b2d9c0fde417659016c5b617561b5e94b1d7bbc0d271b195707f4477dca0f7404904e6e673d41569b6989f302d6a3f413a20c88141b3dedbd2fc6507094a958811ee7eef2674e7ff6f0fb8cdb863df920a439b398d28f4aa65d0167fcd96e1cfc6fb0bc06ceb396d0b32c4238bc823d87a64803dba9234b62acf4d48b679a428a3662ea80eae6c106d98210c080bddba0922cd5fbcd71e8f32fd19c3dd0ecb35fd49c84aa1c4993fa13e521b2c1e000cc329f90c281d4ec9105b791b423673ace4c106cde55a9c3bfa5bf24a68a3dafe2bfaa6879e624f7130f30b64457b8dde85b86e630b6f8e9a14a0d7c70816fe463fd9c0476092f197e924ec97b7a0eaf9fed1652d992973ec058c39fc1d3ebcf90544f337f10e090c4d8859b15c5b166546c6296a2f6c794b35c62810d4cc3a85fd687b0fc46d74b784176bdf7edcd85b061c4d391b45abdf61714551bbb7e398580a6f8eb62fdb702b39d97632e4fea6727169f530cdb07d1c14b2b30f9386c973da2096d63e7a72d57477ba5c71fbd7b75ceed8630c8fc577ee53ef980cefacac8126842ca3b4740f9c5bc37f1067474bd905cf828b8beed4faef5134795ad99944966ad68c06b4e599840ad5a89961894bc1b9bce75528b8ae9d822291beecc4d238bb7ce36def4e6c81928b01a05a6937237da7cd1b7278e11ccce7dd4e5b5a7fe85eb9bd31178f5578d2811e4a5cabef432717084f79d1e963b2658032f82f26e97dc53d8872157d6d73b6c7c7f30167a4c9e10179902217863bcbd53e04d0e447c379c650ba836f547dabaeae29d0a653432f7c2768b3759c4a6bd7282312f937a8f2aecc171394282097289b9672190753a61cc0f135e1502f919179b07d2e313b67e26221fc608b8f5407d3d0cd59c0936beba8300a75a4a4249bb236f87fde2f8c41e761c2ddf55c3a2d95009b2b704df913a22383c76914265fa2728be71393f77635f1beea79bce7154821d5a505035610f912e7a9bc0fd2f88113c509897b4bf09d7ff706f753fbc6ba6152f27a4769e9f3da8870788a9d68bbaa7c3696df55c55d4d6f92a5f9dab2124ca423c98a2352fcd355e171a4f1812a0d86a4fc6c4465d260d54b04a6e9d92d17ba36f3ced7617983ce08c8d61791c5f2eda8ee432c3072aa842d7ccbb659b3c4bd3f4752330761655a5b365d93aaf4ee0390edb4d62114118c9f0d54ea55d027f57826d1d1659ad1a44d90465f5421a0da6550f961af290d798e92ad8ba8f7c077a69861a7e12d97e82571605c8f8dd03848688400dfa32c4875542380fdf6b85245b9fa75372049d3072eb0141ec6ee0b0aba277dd483cd5c5d3e9cf9250515e3f4dd4360a8f35206719e894f6edfbcfcf53cdc41d082cf875e641881ced03870b4e2ec88dab5156e4af58f5feb7367e37976a7ea1e5d0376e333f79a05b007838205196be1b431475fe4d973358cac913a8ea0172a07e16cd9eb464d8be3b359485eb8539a8e8a0f72ce2638a7c5f2e9f2f170b24450c7f0509b53d7b7eb2e2a1125961147a3eb8ca0fa63a905b40e43a69e000f641ef0bad32db77bde079fde47b805bc259ae6fbef5272d51d4e004ddef5ec0e5ad8b04f12c0470d264722087f2f32fbdb404b25ffca5e83c9acc7a4be6a1227f89bb0063da21d0e0ab85d778c8c9801284757a1e4bfc0faa92109b189eeaba8414f34ddfc27c5d9afb43807135e60443ec5b9afad8ccf2d72d58343152f4425c2caf0b29200f290233fac15bc88a7c8ea008c442c0289b33304c8b84ee46e2e703c77f263a730bdf5ec0e9354c76fbb8d42e1cae0f859563d773bee9715fd8fa0d2731cc11cccefbc576151963ee4b0113dee8b28e9be3ece9fa8bde3c3a9a8f11a859006c5c9edf20918e4633a5b5aa61fd93768db39bc93616865c1f17b5b6e94137e329ad515bb5159310d30c1530c3874d12b771f39a5ec8d44dab3fd6b8f866f3100963c4b0234083641adcd4e87dea7b917e8d8d9d21935caf7c25b636e86c478a1cb81b8378e6a06ec119d19885df50b3d9a36c703f8bbed654062b91639d3f6af38aa16cbd01681d85ac0114313f4816e428619fa508f9d580cbf0f6d4c3f48425b187825324c29dc76d725535ab21523f25c811df478f57e4189876b164902994f8286aaec560e714859a64fb90f7f2114bb4e83e3f7194d7c44443f5b9e3e087df17e5c535a30cbdb75a683f2d9e4bb4a6c3bcf7853578d727fb433e0c44cf0406a8d0e060f5d9fcf4c845e0789d0869625b5605aed915b0b2479b8a995bc6b60763e6d9ae5eb6ada5c5c10a0dc72620c0d0ba268e294bfad47ec5aeea44ebd72c5aa1c5945d5a2920798f91a95e2ff27cee411f51dfb27b15f129f4fcef7546bc08fc4014346f08dd3a206591365730474866c45d110a5ec2102387817c939f51514cfa3d602a66afd8854fc34c349220ec764cb1ef477c4691be9f4620642b64fad611d580ecc8a079b4fb8713f12a1dee125ecd60b94ee9dcfc00460efb84101663a7a6b04821643b1cfc2b82ec2594a2ca7b39de0fc1df09af583960ba7e6ed6a03bbeb0a77adc08209f80b4ccbd8aa6353df96705f0f01387073a56be5aedb8f7a7b8d10e0353a69b5c025f04f79f49e91d6bf5d410dfdbcc0d6faec78b7531aa16fed4159cbc6b2bb997476b4c4b7b3b5a9897d006869fd2e83bd9e8e2efcc96204ba78d2a35e582a487acc377cb0934ac51628994c3bf9b37fab9ca7c914c1ed29d98135830c0631788737d38e2754f12d6605376be9413719d845ff481a30d7c577df4067402d3aad4a4341592fbb005ce7b0b5a3d58d0ec42e3459856d10fc6c015fa14512f0f991ad7aef1a8f22c696e84fd027ee75211431130a935915708ff3c21c3108262cb6109e8aee09055ff568d045e4d059eba2b967676c6f15fcbd35763abd2e33aee905054d2e00e8ba9259431637bd2ecf48404da7e350d096a00973e6363554922388c95e4230f883f2710b526abda680fec2bf40d2ff9e8ae8e531a69ab34c75cf551b013306d7fd98893abe9d0f050d5ad87df3a643140610d95558760eecef086778e9fa69cb42b65b48eb52589138ee956a0da209bf9a5923b6f8e5d099003c503132cc7f751bdabb358c5afcc4b0c735f29849cc94efd618d1df93c7f9e1148b3a520d53bc98b95a368c87539a1bdffb08b506044c1446328a43bd3bcfa7a4a62e5b286a7f051a6829110157b240c88902e5afaa54240addd9dda3caf4cf3579a5177f19c55b429f98af3d34419e447f4993a002d8a835f80e3b436d2556206603897534d4e01bb2ac3aa3d8182810f047bb9ddb620513a025ce1ed30de7408852ef86c575bc6cab9d628406f558f313400a60a86a73eff7f322961c8c69382d84198afea75128c8e14e9735a9d00cdbfc02ee9d0992e8a301e87f2019fd19a6a4559e0997f39d80396459af7f6095734c26c48ae447cfc73c7d26bc0d515edfe4e301419b965ab764c3f6a1916ffb29c8e986e620e5081c1400530cb85d243de9b74ffd823d7853193a4991f67c9fb21a694ed7b6c153322cdaeae07de395ac3285669a4e122a6fcbd67eb6ee4f52404ef870e957a8df9b9dad1d08892ac7ff5c900d049b818b0f1445c7e5020ea77a78ed32aff08bd221e0ff", 0x1000}, {&(0x7f00000055c0)="eee987c0a3c25b023590e6adb111d07cea8454c089f7863041e27b54f24d94d2aad68bdf624abfa2f8ee63714dbc93f421195392e5489c3504b02fc8cf6aaa33ac69919d2f1365085fdbc03cd8f3f0072f23a094f088a0fb64879e039f7dcbe493d511292a03d6589ceb2cb939a5ad", 0x6f}], 0x6, &(0x7f000000c080)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x88, 0x20000000}}, {{&(0x7f000000c140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000000d800)=[{&(0x7f000000c1c0)="8ab78bc8ca930151dad6e14ea1149c186cf19f9f067e3d04ca62254d2bb6c698515c8e9424ec38ac1c80a5856fc3224a1a99ddac39ef353ab3709fe314132db96663f0c01240b690a9d7a8d9ce55fe481ca5ac24409ece0d8aa179924a21cd9903be467a0539caaa6eb40f5e154bf3cac7a58eb3ac6e20be533c88bfc45cdf398bb9528756bcb00cc88eb96fa0bf6cca13afaca0b7989fd787d5e46340f2df92d01659886482d6be33bbcc0a9596ae828385e993b1cfc92d998ed596c570642748bf7a4f15fdf29931a0243b8cab637a35ea9509cee102c7c719a2b22b0c4b0c", 0xe0}, {&(0x7f000000c2c0)="34bcddb6ef58d1a5d4f95fd0528010e4275d1d39ce4fd3f29dd76b999373d04971723edbc1705cbb385cfcb02bbfe3fb39522fbcd99537800a41ffab15e2577f4fc95d50c2810fa34857dfd23776fb035200d7e08a49d14960f2798e2ffdf054dc75d1bfe12667f63c76f651746f691dfd281518bdcc9d86340e5d3614165a49f11d7b05b4d3f3b2813522c035b91e3224e09fc67d97922dad6cf9574e033765a99825bfb774256139e4f4ffca887ef335b6ee06b5f703ee2705db24cca42f53a95906b72e178a9f79", 0xc9}, {&(0x7f000000c3c0)="a24ad2eb2e48225053b1dba88adee7ff22c6ebcd9db732db31fe5e5bda8fae960c3626290738095a4056240d8e8184c1506d4df88494404e3878790ab7beb5da1cc3ca464f6b6a3005bd4c88741083cda8258b1931bd1d069cbb1c334fffbd91771f9ed0bffafaa679f8002ea2aa0b4ac1dcc8cb4047122c6bec90c0733bc42df4ef3fca45ea5c5ec6aea399fc9a61ed700c0f8eafb35f006c4aa348314879e80c008761f29dc2d7e1121acd93ca27d7dc2cfb31e7912967f394adeb2848aa76a306b6fa4f705a80d017f941dd37fb", 0xcf}, {&(0x7f000000c4c0)="47b25710184be2fe3d189d708e4371e7e0e39f98ce6072281408764d12ad662e783e05756d7fb08da0ddbc7d0324417250539348281442d0901ce99a6a40d260904df16812ccbe08c139bed5d2b2c7c7549f790cd8f12e6e861d20366fe722c588ae80c3e91623ce1094ae4dee4ed40019eeb01d3318d50d5cdd4ba99d48aa321c52abd1422964c089561e0abf05502e0f1e", 0x92}, {&(0x7f000000c580)="4a9f2b91b3f9c064e4d9369aeee5bcec93d7191c3cbb4d0d8580ac71d299224ad9f4848e43eb8086d1a063b9738723a14cb7985477935b6bb36d80f037eccded2d50403d411f9de20c5cdd49f8d4307884483ece522a8f7a5296bf273584174d02fc2a15b72d27f3c058fa8606c3adc01c01dfbb4199bd0a32310e959ab32ef1a395b4489e0a", 0x86}, {&(0x7f000000c640)="40613cbd597058af86d91f507f6c9f871dcf4b75671b8e2b4b4e14d4ec1ab4183b9cbc42700f4ddce8358311510c5aa0f9f193b52d902e8f6451366ea5b72c21b5fe2dfe389fcb906654d0c00214363a6fa1b8be656eca9f0e26bd38998972baf20354c347b7d4622f5fadd57af1793f937d1d4b9acd2196da3f691335050ae2cb3cfcadd6fdddb849fd876c43a757701a0060a126ef172ceafc27aabd3f0f5ef3cea5f666da7082526e8f4501a15ba2956aa908dff153a6090320c98816", 0xbe}, {&(0x7f000000c700)="f99a22f409d38ae96c748d41dd2e592bfbad09f3ced7f17c486c71fd35d93c2f5f8a677c9643b8ef8dea89f3f255e7b098c5cbf0200b87cba578b7dbfaaa7b3e419c454d122e5eed38fc7ae784ff0cbec7c22e5a1c4839c2a1a7b21aa6437bb318013306908381c0f83a3c1c9691571ef1960bb2cb8f1df4e17761494dc76c3241a4eac546dc108ea26ad3df33fb9e0896e2cd9606ff3eb87a5c460e15c29c68e8e0be33d3ee7b2cae037ab59daeb32d4357e70c6fcc1633c07c9770e4324ca023ca0eb3ad9ae09e9c7827e908b7d2a920dc75baaeee0c26d0", 0xd9}, {&(0x7f000000c800)="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", 0x1000}], 0x8, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f000000d900)=[{&(0x7f000000d880)="fa8cb0cd74ff4666025bdd769ae725f13d31c2d3fb8890c35a68f7ae4e551daf5620d84205f3ea9181cb90ef0717b561b77b7fa71394af7c648c53c23e6e80eb28907bb39117aef6177d798577b7e5a16afc07dc0ad2d5", 0x57}], 0x1, &(0x7f000000d9c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r2, r3, r4, r0, r1, r5]}}], 0xa0, 0x40000}}], 0x5, 0x4008081) ioctl$KDADDIO(r1, 0x400455c8, 0x9) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = dup3(r7, r6, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000000)={0x1, 0x2, 0x0, 0xff, 0x100000000, 0x40}) [ 2519.349523][T21061] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2519.363706][T21064] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:34:27 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x6, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2519.391101][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 2519.423690][T21062] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2519.455516][T21069] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2519.481686][T21068] debugfs: Directory 'hci8' with parent 'bluetooth' already present! [ 2519.496424][T10631] Bluetooth: hci7: sending frame failed (-49) 07:34:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x88f7ffff}, 0x0) [ 2519.519016][ T9587] Bluetooth: hci8: sending frame failed (-49) 07:34:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x60) 07:34:27 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x7, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2519.698162][T21084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2519.736070][T21085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x89060000}, 0x0) 07:34:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x68) [ 2519.839915][T21091] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2519.849733][T21092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2521.394281][ T9762] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2521.554194][T27062] Bluetooth: hci8: command 0x1003 tx timeout [ 2521.554284][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2521.564722][T27062] Bluetooth: hci7: command 0xfc11 tx timeout [ 2521.567897][ T9762] Bluetooth: hci8: sending frame failed (-49) [ 2523.634144][T13286] Bluetooth: hci8: command 0x1001 tx timeout [ 2523.640864][ T9762] Bluetooth: hci8: sending frame failed (-49) [ 2525.714995][T13286] Bluetooth: hci8: command 0x1009 tx timeout [ 2528.205019][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.211300][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 07:34:37 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:34:37 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x8, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x9effffff}, 0x0) 07:34:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x6c) 07:34:37 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xb3, 0x7, 0x1b, 0xff, 0x0, 0xb3, 0x84a09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x8, 0x3, 0x3f, 0x2, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0, 0x2}, r0, 0xc, 0xffffffffffffffff, 0xa) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x264, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x2f0}, @device_b, @device_b}}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_b, @broadcast, @from_mac=@broadcast, {0x0, 0x3f}}, 0x4, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18d, 0x33, @mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@broadcast, {0xf, 0x5e2}}, 0x0, 0x2, 0x5, @val={0x10, 0x1, 0x68}, [{0xdd, 0x6e, "04a775e2c8acfc11af7409414691d865c73be5925fc482c1891093ced823dfc7d411842036064725cc7975c19061884c4a1229fb66505601a03e50efc1a5edce496677022f9aafa9d80c466488ed66ed6e41de6e3ecaab0879e92bc71999ab1facba82467b4108ce06ea1b8d79b3"}, {0xdd, 0xaa, "3829c06013eb80a52828e60a47409a2847be2a1208abe9023bfb59441e9954d254f96933394e8d3018624dcb35ae978b7a99cfff8acd50a8d195083cba1e0a2ab72321205e85be87523dbbd9a817b88f1b7f2a2afcc0c01d3724ae37e137a8665deac33b257faa75e933ef07e4d16c4e479308712776b2627274d70d0ff239f29a2db64ade5753e4307bdf7d8b1f06309cab9abb1ab64e3510bf5062adbb110bbdbb68c709e5254d3d64"}, {0xdd, 0x20, "5e07e84ab4b169628389a7882f97c976e333504f51fa0754adaf98c2c145710b"}, {0xdd, 0x28, "568080a48e5baa0594b01d173efd2c1c50ddf94c6404f61b7b4665c65f0fb209b090687fc13062f3"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @from_mac=@device_b, {0x8, 0xb48}}, @ntf_ch_w}}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @device_a, @device_b, @initial, {0x0, 0x4}}, @ver_80211n={0x0, 0x81, 0x2, 0x0, 0x0, 0x2}}, 0x12, @void}}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x8000) ioctl$KDADDIO(r2, 0x400455c8, 0x9) 07:34:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x40000) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000000)) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x2, 0x101000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000280)={0x0, {{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1f}}}, 0x88) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r5 = accept4$unix(r3, &(0x7f0000000180), &(0x7f0000000100)=0x6e, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r6 = dup2(r0, r0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2530.222890][T21114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2530.248321][T21115] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2530.258844][T21117] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:34:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x74) 07:34:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 2530.270449][ T9762] Bluetooth: hci2: sending frame failed (-49) [ 2530.293083][T21118] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:34:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xc2030000}, 0x0) [ 2530.331346][T11461] Bluetooth: hci7: sending frame failed (-49) [ 2530.353149][T21127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x7a) 07:34:38 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x9, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 2530.513345][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2530.552967][T21137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf0ffffff}, 0x0) 07:34:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xf0) 07:34:38 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0xe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) [ 2530.703138][T21149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2530.716351][T21150] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2532.274193][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2532.364137][T10399] Bluetooth: hci7: command 0xfc11 tx timeout [ 2532.370431][ T9762] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2532.405784][T21176] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2532.431205][T10631] Bluetooth: hci2: sending frame failed (-49) [ 2532.851136][T21115] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:34:42 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x300) 07:34:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xfcffffff}, 0x0) 07:34:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 07:34:42 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0xf, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2534.434129][ T9762] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2534.523345][T21216] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2534.531625][T21217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2534.549359][T21219] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xffffa888}, 0x0) 07:34:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) [ 2534.587678][T11461] Bluetooth: hci2: sending frame failed (-49) 07:34:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xffffca88}, 0x0) 07:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x381) [ 2534.638822][T21226] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:34:42 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x60, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xffffdd86}, 0x0) 07:34:44 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x1, 0x1, 0x5, 0xbf0, 0x19, "ca22add0d89a35f1833e77e4dfd8a6a83b0196"}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:34:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x500) 07:34:44 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0xf0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xfffff000}, 0x0) 07:34:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x6, 0xaa, 0x1, 0x0, 0x4e4], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r2 = dup2(r0, r0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2536.594185][ T9762] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2536.665246][T21250] __nla_validate_parse: 2 callbacks suppressed [ 2536.665265][T21250] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2536.701226][T21252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2536.710754][T21253] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2536.731022][T11461] Bluetooth: hci2: sending frame failed (-49) [ 2536.747778][T21255] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x600) [ 2536.783714][T10631] Bluetooth: hci7: sending frame failed (-49) [ 2536.807643][T21260] debugfs: Directory 'hci8' with parent 'bluetooth' already present! 07:34:44 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x700) [ 2536.842744][ T9587] Bluetooth: hci8: sending frame failed (-49) [ 2536.858803][T21270] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xfffff788}, 0x0) 07:34:44 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x500, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xffffff7f}, 0x0) [ 2536.981447][T21276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2536.999966][T21277] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2537.072995][T21282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2538.764130][T27062] Bluetooth: hci2: command 0x1003 tx timeout [ 2538.771144][ T9587] Bluetooth: hci2: sending frame failed (-49) [ 2538.844248][T27062] Bluetooth: hci7: command 0xfc11 tx timeout [ 2538.844355][T11461] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2538.914362][T10631] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 2538.947954][T21289] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2540.834097][T27062] Bluetooth: hci2: command 0x1001 tx timeout [ 2540.840691][T11461] Bluetooth: hci2: sending frame failed (-49) 07:34:48 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x57) [ 2540.994148][T20690] Bluetooth: hci7: command 0xfc11 tx timeout [ 2540.994231][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2541.056253][T21300] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2541.076901][ T8757] Bluetooth: hci7: Frame reassembly failed (-84) [ 2542.914285][T20690] Bluetooth: hci2: command 0x1009 tx timeout [ 2543.074233][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2543.105489][T21300] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2543.122620][T11461] Bluetooth: hci7: sending frame failed (-49) [ 2545.164185][T10631] Bluetooth: hci7: Entering manufacturer mode failed (-110) 07:34:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x900) 07:34:54 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x600, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:34:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xffffff9e}, 0x0) 07:34:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup3(r3, r2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000008380)={0x0, @initdev, @multicast1}, &(0x7f00000083c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1903}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x28}}, 0x0) ioctl$TIOCCBRK(r4, 0x5428) 07:34:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0xf2, 0x4, 0x4, 0x0, 0x80000000, 0x400, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x1f}, 0x1010, 0x3, 0x6, 0x5, 0xdf4, 0x10000, 0x1, 0x0, 0x1000, 0x0, 0x8}, 0x0, 0xd, r2, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = dup3(r5, r4, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r6, 0x80184153, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[&(0x7f0000000180)="971cedbe6219932df36ad45f8fe421a156513e7074b65e92a9447cb8639513a977e36a60334a3cb2d8eda50bd2c5cac031e026e3b5b5836f049065c21ca6ce5fac2aadf9a5b3ea9748d1399a0e1cbf62d017aa7aa718f2b30180deea410d888601dea0c00b2085b86e1fdd718df782cab5bdda49878a009b81c0ba05f9ab76bff93918a80b31cc8f5609b28ebe066b98608ce759f818503c80d23dbb8eb95985484b7664198b07cd53c790c18cee51a1af5c9e8474b7483fa15abaed401de9c45418187bc861934ce83cec0e42468159a8ba0487f1f7dba77b"]}) ioctl$KDADDIO(r3, 0x400455c8, 0x9) 07:34:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xfffffff0}, 0x0) [ 2546.849447][T21324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2546.869995][T21322] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xa00) [ 2546.910094][T21325] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:34:54 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x700, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2546.959174][T21329] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2546.986123][T11461] Bluetooth: hci7: sending frame failed (-49) [ 2546.988119][T21334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xc00) [ 2547.046985][T21341] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:34:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xfffffffc}, 0x0) 07:34:54 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x900, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2547.190478][T21347] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2547.207559][T21348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2548.994228][ T9762] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2549.003513][T10399] Bluetooth: hci7: command 0x1003 tx timeout [ 2549.013614][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2551.074131][T27062] Bluetooth: hci7: command 0x1001 tx timeout [ 2551.081419][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2553.154129][T10399] Bluetooth: hci7: command 0x1009 tx timeout 07:35:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:35:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x40030000000000}, 0x0) 07:35:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xe00) 07:35:04 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x952, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000000}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x3ff, 0x5, 0x6, 0xfbe, 0x11, "a57d6664dfb4bd83"}) 07:35:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xff, 0x3, 0x0, 0x1000, 0x20000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x80000001, 0x6}, 0x2c0, 0x7c49, 0x8000, 0x2, 0x3, 0x6, 0x5, 0x0, 0x800, 0x0, 0x80000000}, 0xffffffffffffffff, 0xb, r0, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = dup3(r6, r5, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$KDADDIO(r7, 0x400455c8, 0x8) [ 2557.100211][T21371] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2557.118604][T21372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2557.170201][T21373] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2557.172484][ T9762] Bluetooth: hci2: sending frame failed (-49) 07:35:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}, 0x3200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 2557.225532][T21383] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2557.237230][T11461] Bluetooth: hci7: sending frame failed (-49) 07:35:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xf0ffffffffffff}, 0x0) 07:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0xf00) 07:35:05 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0xe00, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x100000000000000}, 0x0) [ 2557.381732][T21392] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2557.443109][T21396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2557.477007][T21395] debugfs: Directory 'hci8' with parent 'bluetooth' already present! 07:35:05 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0xf00, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2557.510221][ T9587] Bluetooth: hci8: sending frame failed (-49) [ 2557.565754][T21403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2559.234327][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2559.243448][T10399] Bluetooth: hci2: command tx timeout [ 2559.314196][T27062] Bluetooth: hci7: command 0x1003 tx timeout [ 2559.320661][T10631] Bluetooth: hci7: sending frame failed (-49) [ 2559.554153][T27062] Bluetooth: hci8: command 0xfc11 tx timeout [ 2559.554331][T11461] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 2559.587611][T21412] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2561.394109][T10399] Bluetooth: hci7: command 0x1001 tx timeout [ 2561.400981][T10631] Bluetooth: hci7: sending frame failed (-49) [ 2561.634225][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2563.484107][T27062] Bluetooth: hci7: command 0x1009 tx timeout 07:35:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:35:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x1f00) 07:35:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x200000000000000}, 0x0) 07:35:15 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x3f00, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x1f, 0x2, 0x98f, 0x5}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000010c0)=@deltfilter={0x1694, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0xfff2, 0x1}, {0xb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x654f}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x1590, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x400, 0x9, 0x80, 0x1ff}, {0xe, 0x2, 0x0, 0x9}, {0x8, 0x6, 0x81, 0x6f}]}}, @TCA_BPF_POLICE={0x494, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x3f, 0xd6, 0x800, {0x5, 0x2, 0xae0f, 0x6, 0xa9e, 0x2}, {0x7e, 0x0, 0x7, 0x600, 0x0, 0x1}, 0x1, 0x5cfe, 0xca5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfb, 0x8, 0x4, 0x0, 0x1f, 0x5, 0x1f, 0x8, 0x2, 0x1, 0x101, 0xf2, 0x6, 0x0, 0x2f2342f1, 0x1e74, 0x10001, 0x9, 0xffffffff, 0x4, 0xfffffffe, 0x1ff, 0x6, 0x7, 0x3, 0x7, 0x1ff, 0x6, 0x138e, 0x4, 0x9, 0x7fffffff, 0x6ea, 0x1f, 0x403, 0x6, 0x1, 0x2, 0x80, 0x1, 0x8, 0xfff, 0x5, 0xffffffff, 0x1f, 0xb6c2, 0x9, 0x81, 0x8, 0x7, 0x80, 0x9, 0x4, 0x3, 0x80000000, 0x3, 0x0, 0x5, 0x3, 0x8000, 0x5, 0x6, 0x4, 0xbec, 0xf8f, 0xd10, 0x7, 0x1f, 0x6, 0x6, 0x20, 0x40, 0x101, 0x70, 0x87, 0x7ff, 0x7f, 0x2, 0x8, 0x74, 0x45fceb2e, 0x9, 0x1, 0x1, 0x100, 0xdec, 0x8, 0x8, 0x9, 0x6, 0x81, 0x7, 0xff, 0xdab, 0x8001, 0x81, 0x200, 0x4ed, 0x7, 0x0, 0xc050, 0x2, 0x800, 0x20, 0x0, 0x8, 0x912f, 0x3f, 0xff, 0x0, 0x1, 0xa5, 0x80, 0x1c7f5d24, 0x400, 0x929, 0x6, 0x9, 0x1, 0x23, 0x3, 0x0, 0x0, 0x9d0, 0x7, 0x8000, 0x7, 0x7ff, 0x2, 0x5, 0x1f, 0x6, 0x1, 0x6, 0x8, 0x438, 0x4, 0x6, 0xad4, 0x10000, 0x0, 0x1, 0x20, 0xfffffffe, 0x3, 0x3, 0x9, 0x74, 0x7fff, 0x8, 0x9, 0xffff, 0x6, 0x7fff, 0x3f, 0x8, 0x4, 0x4, 0x9, 0x400000, 0xef, 0x1f, 0x1800, 0x4, 0x800, 0x3, 0x4, 0x5, 0x6, 0x5a68, 0x9a, 0x6, 0x7ff, 0x1, 0xd9f, 0x10001, 0x7, 0xa3d, 0x9, 0x1000, 0x4, 0x8, 0x3, 0x3f, 0x1f, 0x20, 0x7fff, 0x2, 0x4, 0x3, 0x1000, 0x5, 0x6, 0xffff8000, 0x3ff, 0x80, 0x6, 0x8, 0x1f, 0x998, 0x2, 0x1, 0x354, 0x90de, 0x9, 0xa539, 0x8, 0x6, 0x5, 0x4, 0x25, 0x8, 0x2, 0x1000, 0x5, 0x80000001, 0x20, 0x0, 0x7, 0x6d060, 0x6bc2, 0x0, 0x8, 0xfffffeff, 0x6, 0x4, 0x6, 0xfffff448, 0x0, 0x800, 0x2, 0x0, 0x7fffffff, 0x5, 0x40, 0xffff, 0x0, 0x1f, 0x8, 0xffffffff, 0x8, 0x7, 0x3, 0x1, 0x1, 0x7, 0x54, 0x4, 0x6, 0x4a, 0x80, 0x4, 0x3ff, 0x9, 0x8, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x0, 0x401, 0x7, 0x800, {0x8, 0x1, 0x7, 0x9, 0x6, 0xd8}, {0xc0, 0x2, 0xc99, 0xbd, 0x1ff, 0x1}, 0x20, 0x7, 0xd29}}]}, @TCA_BPF_POLICE={0x10d4, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1f, 0x0, 0x6, 0xd6, 0x8000, 0x4, 0x2, 0x7, 0x0, 0x1, 0x3ff, 0x9, 0xc96, 0xffffffff, 0x4, 0xff, 0x1000, 0x6, 0x81, 0x0, 0xfffffff9, 0x4, 0x5, 0x0, 0x1, 0x971265d, 0x2, 0x8000, 0x4, 0x10000, 0xfff, 0x1, 0x8, 0x10001, 0x2, 0x80000001, 0x8000, 0x40, 0x982, 0x0, 0x800, 0x1ff, 0x0, 0x101, 0x9, 0xb8b, 0x80000001, 0x7, 0x7ff, 0xaf, 0xa1, 0xfffffffd, 0x8000, 0x9, 0x5, 0x5, 0x7fffffff, 0x6, 0x56, 0x8, 0x1, 0x2, 0x7f, 0x10001, 0x1000, 0xf0, 0x8, 0x5, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0x1f, 0x200, 0x1, 0x0, 0x7fffffff, 0x1, 0x800, 0x1, 0xbe, 0x4, 0x8, 0x9, 0x101, 0x80, 0x8, 0x6, 0x8, 0x1, 0xf2d, 0x9, 0xd31e, 0x7fff, 0x7fffffff, 0x9, 0xfff, 0x1f, 0xb0b1, 0x40, 0x100, 0x1ff, 0x9, 0x6, 0x7ff, 0x47, 0x6, 0x0, 0xffffff8d, 0x20, 0x0, 0xffffe23f, 0x2, 0x38, 0x9, 0x2, 0x9, 0x89, 0xfffffffd, 0x1ff, 0x8, 0x102, 0x1, 0x1, 0x1, 0x4, 0x6, 0x7ff, 0x3ff, 0xaf36, 0x1, 0x7fffffff, 0x6, 0x3d, 0x9, 0x0, 0x2, 0x6, 0x8, 0x8, 0x0, 0x7, 0x4, 0x9, 0x80000001, 0x2, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x3f, 0x20, 0x9, 0x3, 0x1, 0x15f1, 0x4, 0x10000, 0x5, 0x7, 0x8000, 0x8000, 0x6, 0x7, 0x5, 0x5, 0x80, 0xec8f, 0x2, 0x10001, 0x0, 0x9, 0x9, 0x8, 0x52, 0x4, 0x6, 0x7fffffff, 0x14, 0x47, 0x1, 0x2, 0x3, 0x80000000, 0x2, 0x2, 0x10000, 0x2, 0x8, 0x3, 0x3, 0xf6, 0x2, 0x0, 0x401, 0x0, 0x9, 0x5708, 0x5, 0x4fa1, 0xf0, 0x1, 0x80000000, 0xc88d, 0x8, 0x8, 0x100, 0xff, 0xc4, 0x5, 0x2, 0x9, 0xf8, 0xef88, 0x6, 0x8e6, 0x0, 0x81, 0x2, 0x4, 0x400, 0x400, 0xb7fa, 0xb1, 0x6, 0xdd69, 0x6, 0x80000001, 0x4, 0x1ff, 0xffff, 0x0, 0x1, 0x126, 0x524, 0x2, 0x400, 0x8, 0x0, 0x7, 0xfc2, 0x8000, 0x9, 0xb134, 0x7fffffff, 0x5, 0x81, 0x800, 0xe0, 0x8, 0xfe, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x88f, 0xffffffffffffffff, 0x4, 0x401, 0xa65, {0x4, 0x2, 0x6, 0xfffd, 0x6, 0x3}, {0x9, 0x0, 0x8229, 0x7f, 0x1, 0x2}, 0xfffffff7, 0x2, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1, 0x5, 0x1, 0x80000000, 0x8000, 0x1, 0x1000, 0x80, 0x6, 0x7, 0xffffffff, 0x0, 0x3, 0xfffffffb, 0x8, 0xf4a, 0x0, 0x2, 0x5, 0x89f, 0x4, 0xfffffff9, 0x1f, 0xe07, 0xffffff5e, 0x4e4b4b82, 0x6, 0x4d, 0x9, 0x6, 0x2, 0x100, 0xcb52, 0x2, 0x7ff, 0x9, 0xd, 0x3, 0x1ff, 0x329, 0xedda, 0x7fff, 0x4f002dd9, 0x9, 0x0, 0x8, 0x6, 0x7, 0x1ff, 0x7, 0x10000, 0x7fff, 0x1, 0x1, 0x2, 0xea, 0x10001, 0x4, 0x4, 0x4, 0x4836, 0xfc000000, 0x1f, 0xf539, 0x5c67, 0x7ff, 0x0, 0x0, 0x1, 0xb41, 0x9, 0x4, 0x7, 0x4, 0x2, 0x6, 0x1, 0x729, 0x2, 0xd26, 0x87, 0x80, 0x8, 0x6, 0x7fff, 0xffffffff, 0x3, 0x1ff, 0x3f29, 0x5, 0x6, 0x9, 0x8001, 0x0, 0x1000, 0x14ad898d, 0x7f, 0x268, 0x6000, 0x8, 0x100, 0x101, 0x1, 0x40, 0x2, 0x6c, 0x7, 0x8, 0x6, 0x1, 0x20, 0x5, 0x10001, 0x5, 0xcf0, 0xd067, 0x2, 0x1, 0x0, 0x3, 0x20, 0x2, 0x10001, 0x8, 0x0, 0x4, 0x9, 0x4, 0x763e, 0x80, 0xffff0001, 0x7, 0x0, 0x5f9, 0x7fff, 0x10001, 0x3, 0xe13d, 0x3ff, 0x3ff, 0xfffffff9, 0x2, 0x5, 0x609, 0x5, 0xbfaa, 0x6, 0x66, 0x3, 0x8, 0xffffffff, 0x0, 0x100, 0x7fff, 0x0, 0x9, 0x1, 0x0, 0x5, 0xffff, 0x6, 0x4, 0xffffffae, 0xffff, 0x1, 0x5, 0x1, 0x5, 0x10001, 0x3, 0x0, 0x3, 0x3f, 0x4, 0x8f2, 0x2, 0x8, 0xf1, 0x3, 0x80000001, 0x5e0, 0x477, 0x3, 0x8, 0x40, 0x4, 0x2, 0x9, 0x0, 0x4, 0x3f, 0x0, 0xaa3, 0x5, 0x6, 0x3f, 0x7, 0x1, 0x7, 0x400, 0x400, 0x7, 0x3, 0x9, 0x8, 0x9, 0x4, 0x0, 0x5, 0x7fff, 0x1ff, 0x4, 0x1, 0x8001, 0x5, 0x6, 0x6, 0x3ff, 0x40, 0x8001, 0x1, 0x6, 0x5, 0xffffffe1, 0xfffffffc, 0x7fff, 0x101, 0x6, 0x5, 0x6, 0x9, 0x4, 0x2, 0x80000000, 0x6, 0x6, 0x5, 0x2, 0x1, 0x8001, 0x9, 0x100, 0x40, 0x72, 0x3, 0x0, 0xffffff00, 0x4, 0x0, 0x10001, 0xfffffff7, 0x4, 0x0, 0x3, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0xffffffffffffffff, 0x1, 0x7ff, 0x40, {0x0, 0x2, 0x3, 0x8001, 0x3, 0x1000}, {0x2, 0x1, 0x4, 0xe1e1, 0x7, 0x1}, 0x400, 0xffffffff, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x1f, 0x9, 0xe44, 0x10001, 0xad, 0x4, 0x8, 0x5, 0x3ff, 0x6, 0x5, 0x3, 0x2, 0x4, 0x1, 0xcd, 0x8, 0x9, 0x2, 0x86, 0x7, 0x45fdf2b7, 0x40, 0x100, 0xffffffe1, 0x9, 0x1ff, 0x6, 0x1, 0x0, 0x9, 0x8, 0x0, 0x7b66, 0x7, 0x400, 0x8, 0x408, 0x5, 0x101, 0x7, 0x5, 0xd70a, 0x7fffffff, 0x0, 0x8, 0xdef8, 0x7, 0x4, 0x1f, 0x9, 0x2, 0x5, 0x3, 0x40, 0x8, 0x1, 0x9, 0x0, 0x2, 0x3, 0x5, 0x401, 0x8, 0xc6, 0x12000000, 0xfffffc01, 0x5, 0xa7a9, 0x40000, 0x7, 0x8, 0xe33, 0x2, 0x3, 0x2, 0x4, 0x10000, 0x80000000, 0x4, 0x8, 0x14fb, 0x4, 0x6, 0x8001, 0x2, 0x4, 0x20, 0x100, 0x80000001, 0x10000, 0xb3e, 0xffff7fff, 0x7, 0x5, 0x81, 0x6, 0x1, 0xbe, 0x3, 0x7ff, 0x2f, 0xb77, 0x5f, 0x7f, 0x0, 0x2, 0x9, 0x10001, 0x1ff, 0x101, 0x10000, 0xfff, 0x8, 0x10001, 0x1, 0x61b, 0x6, 0x5, 0x10000, 0x400, 0x8000, 0x7, 0x0, 0xb9, 0x1f, 0x1f, 0x8, 0x0, 0x611, 0xfffffff8, 0x7, 0x1ff, 0x7, 0x9, 0x6b0, 0xfffffffc, 0x8, 0x0, 0x40, 0x1ff, 0xfffffffa, 0x2, 0xbd86, 0xfffffffe, 0x7c04e5c6, 0x7, 0xfffffffe, 0x8, 0x10000, 0x6, 0x45800000, 0x4, 0x4, 0x5, 0x7fffffff, 0x15b00, 0x1000, 0xff, 0x7fff, 0x1, 0x19b4b110, 0x80000000, 0x6, 0xfff, 0x101, 0x2, 0x8, 0x80000001, 0x0, 0xf39, 0x400, 0x8, 0x9, 0x2, 0x31a3b95d, 0x53, 0xf19560e, 0xffffff7f, 0x8, 0x8000, 0x6, 0x1, 0x4, 0x5, 0x5, 0x3ff, 0x8, 0x1, 0x1ff, 0x9, 0x6, 0x4, 0x1000, 0x3, 0x10001, 0x9, 0x3dd, 0x4, 0x1, 0x1, 0xffff0001, 0x80, 0x9, 0x800, 0x1, 0x100, 0x6, 0x2, 0x72, 0x3e2e, 0x6030, 0x3, 0x1f, 0x10000, 0x400, 0x7, 0x1000, 0x0, 0x0, 0x4, 0x1000, 0x5cfa, 0x431, 0x1, 0x8, 0x200, 0x0, 0x20000, 0x20, 0x5f160000, 0x100, 0x10001, 0x2, 0x4, 0x6, 0xffffffff, 0x6, 0x5, 0x1, 0x2, 0xea, 0x17, 0x2, 0xfffffff7, 0x7f, 0x400, 0x7ff, 0x1, 0x7fff, 0xac, 0x2, 0x10000, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdd6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x842b30395bccc7d7, 0x7, 0x9, 0x5, {0x76, 0x1, 0x5, 0x4, 0x7, 0x10000}, {0x1f, 0x0, 0x101, 0xffff, 0x7, 0x8}, 0xcb06, 0x5a64, 0xfffffff8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x0, 0x4, 0xf985, 0xef, 0x0, 0xcf27, 0x2, 0x1, 0xd145, 0x2, 0x6, 0x3, 0x8203, 0xfffffffa, 0x3, 0x7fff, 0x1, 0xffffffff, 0x9, 0x6, 0x0, 0x5, 0x2, 0x0, 0x9, 0x6, 0x3, 0x5bf3, 0x1, 0x2cf8, 0xffff5eee, 0x80000000, 0xffffffff, 0xd2, 0xef44, 0x9, 0x7fff, 0xfffffffe, 0x9, 0x4, 0x8, 0xffffffff, 0x6, 0x400, 0x7, 0x1, 0x5, 0x8, 0x8, 0x8, 0x1, 0xffff0000, 0x2, 0xfffffffa, 0x8, 0x5, 0x4, 0x7, 0x7, 0x6, 0x6a3b4c13, 0x7, 0x40, 0x100, 0x40, 0x2, 0xb8b, 0x5, 0x28b, 0x1, 0x3f, 0x1, 0x4, 0x2, 0x9, 0x7, 0x65d, 0xff800000, 0x3, 0x9, 0x7, 0x20, 0xff, 0x9, 0x1, 0x7, 0x3, 0x6a, 0x40, 0x5, 0x2, 0x3f, 0x40, 0x3ff, 0x780, 0x0, 0x72, 0x138, 0x7, 0x5, 0x3f, 0xff, 0x800, 0x40, 0x8, 0x7fffffff, 0x80000001, 0x66e, 0x7fffffff, 0x3ff, 0xc1, 0x9, 0x6, 0x100, 0x7fff, 0x3, 0xfff, 0x4, 0x5, 0x8001, 0xb9, 0x1, 0x1, 0x1f, 0xfff, 0xce3, 0x80, 0x4, 0x4, 0x0, 0x200, 0x0, 0x9, 0xffff, 0x7, 0x100, 0x8, 0x0, 0x6, 0x80, 0x3, 0x3, 0x3, 0x982f, 0x8, 0x3, 0x8000, 0xe94, 0x2, 0x0, 0x1f, 0x81, 0x6, 0xfffffffa, 0x9, 0x5, 0x2, 0xffffffe1, 0x4, 0x4, 0x9, 0xff, 0x0, 0x0, 0x800, 0x4d3421d, 0x8001, 0x2, 0xfffffff9, 0xc39, 0x6, 0x8, 0x2, 0x4, 0x9, 0xffffffff, 0x1, 0x4, 0x9, 0x98, 0x1000, 0x6, 0xfffffffc, 0x4, 0x6fb, 0x3, 0x800, 0x80, 0x200, 0x5, 0x80000001, 0x2, 0x9, 0x1, 0x4, 0x4, 0x32, 0x371, 0xffffffff, 0x1000, 0x8, 0x5, 0x7, 0x5, 0x4, 0xeae8, 0x2, 0x0, 0x6, 0x0, 0x7, 0xfffffff7, 0x7, 0x7ff, 0x80, 0xa6, 0x80000000, 0x10000, 0xfffffff7, 0x7, 0x8, 0x8, 0x7f, 0xca, 0x548, 0x3, 0xcc, 0x4, 0x100, 0x7a6, 0x1f, 0x29, 0x100, 0x0, 0x1, 0x1, 0x6, 0x6, 0xa1ba, 0xabd, 0xf3, 0x54, 0xfffffc00, 0x3, 0x6bfd, 0x40, 0x0, 0x400, 0x80000000, 0x80, 0x7f, 0x2fc, 0x4, 0x336, 0x3]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xe}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6b}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x1c}, @TCA_ROUTE4_IIF={0x8}]}}, @filter_kind_options=@f_rsvp={{0x9}, {0x74, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x5, 0x7f}, {0x0, 0xee64, 0x9}, 0x6, 0x0, 0x4}}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x4}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2, 0xf}}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff801}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x1694}, 0x1, 0x0, 0x0, 0x20000045}, 0x1) r5 = dup2(r0, r0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:35:15 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x2, 0x0, 0x80, 0xe, 0x0, 0x101, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x1400, 0x1, 0x2, 0x9, 0x51a, 0x2f65, 0x3f, 0x0, 0x8, 0x0, 0x10000}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = dup3(r6, r5, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0x10) r8 = dup3(r4, r3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000b10599854068a43f029be1fda93625109b097680eb566cf3cb254da017341538836850d3848fbe61d466d61f1f7b8e3f1dd849f3453b3ab28921427d14ed3380bee862b45323235312b83cde6c705eb744a9188de7aec91021710b", @ANYRES32=0x0, @ANYBLOB="00000004000000001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0xa7, 0x2, 0x6, 0x0, 0x0, 0x2000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffeffffffff, 0xfffffffffffffc96}, 0x8008, 0x3, 0x85ac, 0x3, 0x6, 0x9, 0x200, 0x0, 0x7}, r2, 0xe, r8, 0xb) ioctl$KDADDIO(r1, 0x400455c8, 0x9) [ 2567.978588][T21434] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2567.989488][T21437] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2568.010881][T11192] Bluetooth: hci2: Frame reassembly failed (-84) [ 2568.023115][T21438] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:35:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x2000) 07:35:15 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x5209, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x300000000000000}, 0x0) [ 2568.109447][T21443] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2568.198085][T21449] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2568.240369][T21452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:35:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x4300) 07:35:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x400000000000000}, 0x0) 07:35:16 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x6000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2568.417539][T21462] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2568.442021][T21461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2568.477995][T21436] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2568.500686][T21436] debugfs: Directory 'hci8' with parent 'bluetooth' already present! [ 2568.527375][ T9587] Bluetooth: hci8: sending frame failed (-49) [ 2570.034182][T20690] Bluetooth: hci2: command 0xfc11 tx timeout [ 2570.034257][ T9762] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2570.194620][T10399] Bluetooth: hci7: command 0x1003 tx timeout [ 2570.201728][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2570.594175][T27062] Bluetooth: hci8: command 0xfc11 tx timeout [ 2570.600457][T10631] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 2570.642363][T21436] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2570.657887][T21436] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2572.274945][ T9105] Bluetooth: hci7: command 0x1001 tx timeout [ 2572.281789][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2572.674252][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2574.355090][ T9105] Bluetooth: hci7: command 0x1009 tx timeout 07:35:26 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:35:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x500000000000000}, 0x0) 07:35:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x4800) 07:35:26 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0xf000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r4 = dup2(r0, r0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 07:35:26 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x9, 0xffffffffffffffff, 0x2) fcntl$setsig(r0, 0xa, 0x28) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDADDIO(r1, 0x400455c8, 0x9) [ 2578.865613][T21494] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 2578.901590][T10631] Bluetooth: hci2: sending frame failed (-49) 07:35:26 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x30000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2578.943773][T21497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2578.971653][T21496] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 2578.980975][T21498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:35:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x4c00) [ 2579.049045][T21511] debugfs: Directory 'hci7' with parent 'bluetooth' already present! 07:35:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x600000000000000}, 0x0) 07:35:26 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x34000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/printk', 0x115000, 0x1c0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x4, 0x5}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) 07:35:26 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x400300, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2579.267843][T21534] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2579.288124][T21536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2579.321452][T21540] debugfs: Directory 'hci8' with parent 'bluetooth' already present! [ 2579.382612][ T10] Bluetooth: hci8: Frame reassembly failed (-84) [ 2580.915576][T13286] Bluetooth: hci2: command 0xfc11 tx timeout [ 2580.919025][T11461] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2581.154123][T13286] Bluetooth: hci7: command 0x1003 tx timeout [ 2581.160985][T11461] Bluetooth: hci7: sending frame failed (-49) [ 2581.394085][T27062] Bluetooth: hci8: command 0xfc11 tx timeout [ 2581.394252][ T9762] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 2583.234079][T10399] Bluetooth: hci7: command 0x1001 tx timeout [ 2583.241039][ T9762] Bluetooth: hci7: sending frame failed (-49) [ 2585.314069][T13286] Bluetooth: hci7: command 0x1009 tx timeout [ 2589.635602][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 2589.642335][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 07:35:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x700000000000000}, 0x0) 07:35:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x5865) 07:35:37 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0xf0ffff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:35:37 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:35:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000080)) [ 2589.824627][T21583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2589.827623][T21584] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:35:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x6000) [ 2589.875062][T21586] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2589.899436][ T8757] Bluetooth: hci2: Frame reassembly failed (-84) 07:35:37 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x1000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2589.931370][T21585] debugfs: Directory 'hci8' with parent 'bluetooth' already present! 07:35:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x800000000000000}, 0x0) [ 2590.091433][T21603] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2590.141182][T21605] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:35:37 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x2000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x806000000000000}, 0x0) 07:35:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x6558) 07:35:38 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x3000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 2590.313354][T21613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2590.350122][T21614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:35:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0x900000000000000}, 0x0) 07:35:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x6800) [ 2590.437351][T21618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2590.499384][T21621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2591.954096][T21598] Bluetooth: hci7: command 0x1003 tx timeout [ 2591.961311][ T9587] Bluetooth: hci7: sending frame failed (-49) [ 2591.964178][T10631] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 2591.977475][ T9105] Bluetooth: hci2: command tx timeout [ 2592.034683][T11461] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 2592.043919][T21598] Bluetooth: hci8: command tx timeout [ 2594.034238][T21598] Bluetooth: hci7: command 0x1001 tx timeout [ 2594.040815][T11461] Bluetooth: hci7: sending frame failed (-49) [ 2596.114071][ T8195] Bluetooth: hci7: command 0x1009 tx timeout 07:35:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xa00000000000000}, 0x0) 07:35:48 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x4000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x6c00) 07:35:48 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 07:35:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 07:35:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup2(r0, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x1}}, './file0\x00'}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x10000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 2600.648502][T21644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2600.667854][T21646] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2600.669388][T21645] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 07:35:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xc00000000000000}, 0x0) [ 2600.712845][T21647] sp0: Synchronizing with TNC 07:35:48 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000e40)={0x30, r1, 0x1, 0x0, 0x5000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 07:35:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x7400) [ 2600.757284][T21650] debugfs: Directory 'hci7' with parent 'bluetooth' already present! [ 2600.791621][T10631] Bluetooth: hci7: sending frame failed (-49) [ 2600.804803][T21641] ================================================================== [ 2600.811103][T21664] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2600.813132][T21641] BUG: KASAN: use-after-free in sixpack_close+0x236/0x270 [ 2600.829619][T21641] Read of size 8 at addr ffff888089df4c90 by task syz-executor.1/21641 [ 2600.837853][T21641] [ 2600.840343][T21641] CPU: 0 PID: 21641 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 2600.849352][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2600.859569][T21641] Call Trace: [ 2600.862856][T21641] [ 2600.865771][T21641] dump_stack_lvl+0xcd/0x134 [ 2600.870355][T21641] print_address_description.constprop.0.cold+0x8d/0x320 [ 2600.877370][T21641] ? sixpack_close+0x236/0x270 [ 2600.882146][T21641] ? sixpack_close+0x236/0x270 [ 2600.886907][T21641] kasan_report.cold+0x83/0xdf [ 2600.891666][T21641] ? sixpack_close+0x236/0x270 [ 2600.896507][T21641] sixpack_close+0x236/0x270 [ 2600.901084][T21641] ? sp_set_mac_address+0x3d0/0x3d0 [ 2600.906271][T21641] tty_ldisc_close+0x110/0x190 [ 2600.911114][T21641] tty_ldisc_kill+0x94/0x150 [ 2600.915696][T21641] tty_ldisc_release+0xe3/0x2a0 [ 2600.920627][T21641] tty_release_struct+0x20/0xe0 [ 2600.925463][T21641] tty_release+0xc70/0x1200 [ 2600.930311][T21641] __fput+0x286/0x9f0 [ 2600.934279][T21641] ? tty_release_struct+0xe0/0xe0 [ 2600.939293][T21641] task_work_run+0xdd/0x1a0 [ 2600.943790][T21641] exit_to_user_mode_prepare+0x27e/0x290 [ 2600.949499][T21641] syscall_exit_to_user_mode+0x19/0x60 [ 2600.954945][T21641] do_syscall_64+0x42/0xb0 [ 2600.959351][T21641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2600.965230][T21641] RIP: 0033:0x7f0d3d9f372b [ 2600.969635][T21641] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 2600.989227][T21641] RSP: 002b:00007ffddb9e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2600.997630][T21641] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f0d3d9f372b [ 2601.005584][T21641] RDX: 00007f0d3db58cc8 RSI: ffffffff815c589f RDI: 0000000000000004 [ 2601.013627][T21641] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31e26808 [ 2601.021667][T21641] R10: 0000000000001f4c R11: 0000000000000293 R12: 000000000027af1e [ 2601.029637][T21641] R13: 00000000000003e8 R14: 00007f0d3db53f60 R15: 000000000027aec2 [ 2601.037618][T21641] ? perf_trace_lock+0x2ef/0x4d0 [ 2601.042819][T21641] [ 2601.045828][T21641] [ 2601.048135][T21641] Allocated by task 21647: [ 2601.052525][T21641] kasan_save_stack+0x1e/0x50 [ 2601.057214][T21641] __kasan_kmalloc+0xa9/0xd0 [ 2601.061790][T21641] kvmalloc_node+0x61/0x120 [ 2601.066278][T21641] alloc_netdev_mqs+0x98/0xec0 [ 2601.071028][T21641] sixpack_open+0xfa/0xa50 [ 2601.075428][T21641] tty_ldisc_open+0x9b/0x110 [ 2601.080092][T21641] tty_set_ldisc+0x2f1/0x680 [ 2601.084670][T21641] tty_ioctl+0xae0/0x1670 [ 2601.089070][T21641] __x64_sys_ioctl+0x193/0x200 [ 2601.093819][T21641] do_syscall_64+0x35/0xb0 [ 2601.098224][T21641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2601.104276][T21641] [ 2601.106579][T21641] Freed by task 21641: [ 2601.110621][T21641] kasan_save_stack+0x1e/0x50 [ 2601.115288][T21641] kasan_set_track+0x21/0x30 [ 2601.119861][T21641] kasan_set_free_info+0x20/0x30 [ 2601.124784][T21641] __kasan_slab_free+0xff/0x130 [ 2601.129704][T21641] slab_free_freelist_hook+0x8b/0x1c0 [ 2601.135057][T21641] kfree+0xf6/0x560 [ 2601.138846][T21641] kvfree+0x42/0x50 [ 2601.142637][T21641] device_release+0x9f/0x240 [ 2601.147222][T21641] kobject_put+0x1c8/0x540 [ 2601.151622][T21641] netdev_run_todo+0x75a/0xa80 [ 2601.156379][T21641] sixpack_close+0x184/0x270 [ 2601.160956][T21641] tty_ldisc_close+0x110/0x190 [ 2601.165702][T21641] tty_ldisc_kill+0x94/0x150 [ 2601.170368][T21641] tty_ldisc_release+0xe3/0x2a0 [ 2601.175306][T21641] tty_release_struct+0x20/0xe0 [ 2601.180152][T21641] tty_release+0xc70/0x1200 [ 2601.184658][T21641] __fput+0x286/0x9f0 [ 2601.188622][T21641] task_work_run+0xdd/0x1a0 [ 2601.193111][T21641] exit_to_user_mode_prepare+0x27e/0x290 [ 2601.198732][T21641] syscall_exit_to_user_mode+0x19/0x60 [ 2601.204261][T21641] do_syscall_64+0x42/0xb0 [ 2601.208670][T21641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2601.214546][T21641] [ 2601.216850][T21641] The buggy address belongs to the object at ffff888089df4000 [ 2601.216850][T21641] which belongs to the cache kmalloc-cg-4k of size 4096 [ 2601.231243][T21641] The buggy address is located 3216 bytes inside of [ 2601.231243][T21641] 4096-byte region [ffff888089df4000, ffff888089df5000) [ 2601.244764][T21641] The buggy address belongs to the page: [ 2601.250546][T21641] page:ffffea0002277c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x89df0 [ 2601.260765][T21641] head:ffffea0002277c00 order:3 compound_mapcount:0 compound_pincount:0 [ 2601.269069][T21641] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2601.277051][T21641] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888010c4c280 [ 2601.285618][T21641] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 2601.294183][T21641] page dumped because: kasan: bad access detected [ 2601.300579][T21641] page_owner tracks the page as allocated [ 2601.306269][T21641] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25405, ts 797161167748, free_ts 797067716590 [ 2601.327437][T21641] get_page_from_freelist+0xa72/0x2f50 [ 2601.332882][T21641] __alloc_pages+0x1b2/0x500 [ 2601.337454][T21641] alloc_pages+0x1a7/0x300 [ 2601.341855][T21641] new_slab+0x32d/0x4a0 [ 2601.346011][T21641] ___slab_alloc+0x918/0xfe0 [ 2601.350586][T21641] __slab_alloc.constprop.0+0x4d/0xa0 [ 2601.355942][T21641] __kmalloc_node+0x2cb/0x390 [ 2601.360779][T21641] kvmalloc_node+0x61/0x120 [ 2601.365266][T21641] alloc_netdev_mqs+0x98/0xec0 [ 2601.370187][T21641] rtnl_create_link+0x95a/0xb80 [ 2601.375023][T21641] veth_newlink+0x20e/0xb00 [ 2601.379512][T21641] __rtnl_newlink+0x106d/0x1750 [ 2601.384345][T21641] rtnl_newlink+0x64/0xa0 [ 2601.388663][T21641] rtnetlink_rcv_msg+0x413/0xb80 [ 2601.393583][T21641] netlink_rcv_skb+0x153/0x420 [ 2601.398331][T21641] netlink_unicast+0x533/0x7d0 [ 2601.403356][T21641] page last free stack trace: [ 2601.408007][T21641] free_pcp_prepare+0x374/0x870 [ 2601.412851][T21641] free_unref_page+0x19/0x690 [ 2601.417515][T21641] __unfreeze_partials+0x343/0x360 [ 2601.422615][T21641] qlist_free_all+0x5a/0xc0 [ 2601.427805][T21641] kasan_quarantine_reduce+0x180/0x200 [ 2601.433252][T21641] __kasan_slab_alloc+0xa2/0xc0 [ 2601.438109][T21641] __kmalloc+0x1e7/0x340 [ 2601.442336][T21641] tomoyo_realpath_from_path+0xc3/0x620 [ 2601.447977][T21641] tomoyo_path_number_perm+0x1d5/0x590 [ 2601.453424][T21641] security_file_ioctl+0x50/0xb0 [ 2601.458344][T21641] __x64_sys_ioctl+0xb3/0x200 [ 2601.463009][T21641] do_syscall_64+0x35/0xb0 [ 2601.467416][T21641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2601.473319][T21641] [ 2601.475626][T21641] Memory state around the buggy address: [ 2601.481241][T21641] ffff888089df4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2601.489286][T21641] ffff888089df4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2601.497346][T21641] >ffff888089df4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2601.505388][T21641] ^ 07:35:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}}, 0x7a00) [ 2601.509957][T21641] ffff888089df4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2601.518019][T21641] ffff888089df4d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2601.526166][T21641] ================================================================== [ 2601.534421][T21641] Disabling lock debugging due to kernel taint 07:35:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x38}, 0x1, 0xe00000000000000}, 0x0) [ 2601.587680][T21668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2601.612318][T21670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2601.623177][T21641] Kernel panic - not syncing: panic_on_warn set ... [ 2601.629764][T21641] CPU: 1 PID: 21641 Comm: syz-executor.1 Tainted: G B 5.16.0-rc1-syzkaller #0 [ 2601.640173][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2601.650296][T21641] Call Trace: [ 2601.653558][T21641] [ 2601.656470][T21641] dump_stack_lvl+0xcd/0x134 [ 2601.661050][T21641] panic+0x2b0/0x6dd [ 2601.664932][T21641] ? __warn_printk+0xf3/0xf3 [ 2601.669593][T21641] ? preempt_schedule_common+0x59/0xc0 [ 2601.675041][T21641] ? sixpack_close+0x236/0x270 [ 2601.679796][T21641] ? preempt_schedule_thunk+0x16/0x18 [ 2601.685416][T21641] ? trace_hardirqs_on+0x38/0x1c0 [ 2601.690432][T21641] ? trace_hardirqs_on+0x51/0x1c0 [ 2601.695444][T21641] ? sixpack_close+0x236/0x270 [ 2601.700196][T21641] ? sixpack_close+0x236/0x270 [ 2601.704947][T21641] end_report.cold+0x63/0x6f [ 2601.709525][T21641] kasan_report.cold+0x71/0xdf [ 2601.714271][T21641] ? sixpack_close+0x236/0x270 [ 2601.719020][T21641] sixpack_close+0x236/0x270 [ 2601.723940][T21641] ? sp_set_mac_address+0x3d0/0x3d0 [ 2601.729124][T21641] tty_ldisc_close+0x110/0x190 [ 2601.733881][T21641] tty_ldisc_kill+0x94/0x150 [ 2601.738475][T21641] tty_ldisc_release+0xe3/0x2a0 [ 2601.743316][T21641] tty_release_struct+0x20/0xe0 [ 2601.748242][T21641] tty_release+0xc70/0x1200 [ 2601.752737][T21641] __fput+0x286/0x9f0 [ 2601.756700][T21641] ? tty_release_struct+0xe0/0xe0 [ 2601.761728][T21641] task_work_run+0xdd/0x1a0 [ 2601.766220][T21641] exit_to_user_mode_prepare+0x27e/0x290 [ 2601.771837][T21641] syscall_exit_to_user_mode+0x19/0x60 [ 2601.777296][T21641] do_syscall_64+0x42/0xb0 [ 2601.781711][T21641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2601.787589][T21641] RIP: 0033:0x7f0d3d9f372b [ 2601.791984][T21641] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 2601.811920][T21641] RSP: 002b:00007ffddb9e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2601.820318][T21641] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f0d3d9f372b [ 2601.828271][T21641] RDX: 00007f0d3db58cc8 RSI: ffffffff815c589f RDI: 0000000000000004 [ 2601.836221][T21641] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31e26808 [ 2601.844187][T21641] R10: 0000000000001f4c R11: 0000000000000293 R12: 000000000027af1e [ 2601.852224][T21641] R13: 00000000000003e8 R14: 00007f0d3db53f60 R15: 000000000027aec2 [ 2601.860219][T21641] ? perf_trace_lock+0x2ef/0x4d0 [ 2601.865148][T21641] [ 2601.868839][T21641] Kernel Offset: disabled [ 2601.873379][T21641] Rebooting in 86400 seconds..