4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:07:52 executing program 1: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x2, 0xd}, 0x18) r1 = dup2(r0, r0) getsockname$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '*@\\'}, {}, {0x20, '\\]!\x18^%&\x00'}, {0x20, '[--&#(-%%$-}-@\\*'}, {0x20, '-'}, {0x20, '^^*{/'}, {}, {}, {0x20, '.'}, {0x20, '^'}], 0xa, "658423f0ee266b915a9102cf5759c0a2199dc7eb8fa2c83e602eb54bd462d2b1590507a1ea2bd70e31762ec929addbb80d293dece9e1dbc5e4feaadc0d960d395a8663dcf377b91c8b02bb896825572d7a562c453034614608038ef3e283d989cdf8399362bfaf13636771f3100fd7e6e6cb"}, 0xaa) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r1, 0x20e9b000) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x3) syz_mount_image$erofs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10000, 0x9, &(0x7f0000000840)=[{&(0x7f00000002c0)="f2cf1f482d60a67bf3558c3a55a8db007dba02f357b9ce2a827c24dfa9ebb7c875e79cd98a131e05405a5672e51dfc5f00c8b5687224e888e9ff3e5e135995689f54c63998254f756f385fdd69f16cfdb9b05d", 0x53, 0x8}, {&(0x7f0000000340)="99aad9484520", 0x6, 0x9000000000000000}, {&(0x7f0000000380)="d2a78cd48a1a2ba183234dfee910f8b16e1975048dbb9e80aaf0cda23ce4ea72ac9d9e90a28260e3aa9d8d442fd85f8945d8e9c8afd39b24c1", 0x39, 0x200}, {&(0x7f00000003c0)="0556274f52421506ec23daf7e46aa23cb72ec112b152b191712740ca0f61fcacf2986f05f88d1d356f38c8c12352a3a4105b00099069f8cafe668b5df86c6c88df2b42a61a483466fcc5f8a29f400907968820c5f6adb06f698d11c34be75ee9fa041fe6109367ed6278997fa1f68628f587f62769c8566d4cc3e0a75f24940eda4313beabe0f829780e35f2694cc083400ed0a0a2f5e36cb93b9e4def76894d6e384dc2c73b", 0xa6, 0x80000001}, {&(0x7f0000000480)="cfc769fbc50562768c12cd0f5f5a5ee6511d4afef2f81b", 0x17, 0x3acb}, {&(0x7f00000004c0)="1da937ae00bbbffda9ed7c451075b8485b3c0a68410b597a5a90f442385754451ae682c2419a344dbc31cfd41606c64b4f4cd3c48a4b2d35396d9fd256dcf5491ff4ee3be1e5dd454d529042b9cc74ee1134c8b39b7e899fa39d6e93390fd764ffc1adf2e26ff8fa5336739d30e9b0de6ae263e683e1", 0x76, 0x7fffffffffffffff}, {&(0x7f0000000540)="b559816feb4a7c96ac05c8879582c4e39163805a59596d5f82ccf482b65cf735cfe1cf567e76cdcdb62ddbff544966fde874be1dd0ede82355a2da130859e844f560e7a50a8cfcda740632a5dca5c5357f4e52eab4847cff5fab504fc08b03dd403e5896ef27e176d979721a7c300a174d826cee1cbe30a00e8ff1ef084516afc605e7d77d0c3a9c726b42125912c757eb3ed311aad2e944a8fce74b8f9ea6dd589c2275a38e9180c8b3ba6d5e34a5540df67887cfb7c649e85355dca81d5b27dd6d2aa8", 0xc4, 0x7ff}, {&(0x7f0000000640)="a5fe68cad3392090be0432dc2f5e4b42b1d342787bccd3495d8c4c2bdc8787e03fd6ad68078222909c7ffc3d2a2c96fce309d2788e3e7e88a728bf8d838c67ca1b07961adda8d3b2005169ba86fdadf137be7c12527532ad0beade87c29703e3b308e9ce3fe6c8e49bab3c057eeefe52f8ee7758e87e4f87c8b8e689e0ffd37f75e2c870370602ee3ef2f99f6ca9d2e6e6ac5cbea014499864f3e68c706e9c371f75fee15f24682a561544ef73f914100258ff9f44a9d5b7732c7d64ee3751139c54f0f3dac392b87635b3aba75eab5e19960866bcdf75078d", 0xd9, 0x6}, {&(0x7f0000000740)="19ec1515a55fe9b09e73b565a8da429c75046dbe08bb7ee94644d916f8b3b03b8f6e7972db6023c4b476fb95ec265c8bd0907486730be8204c7d02dcc9aba45cb76a1b9db586351454b607a6bbd1cac038941cc84e8a44632bd1ccb96ff901ad02aa5422c5610208d3d45ef8fb235fbea61151b50fcce4b597de96b70c174066beacac8d461b29ce2b948a8124312a3df28b6de890ecd8aa5394a6903bf18c2f3ba8cce13a4c64d3687a9f70f227e63411399721f1a7f14d6ad49fff68f33e54aac9", 0xc2, 0x80000000}], 0x20, &(0x7f0000000940)={[{@fault_injection={'fault_injection', 0x3d, 0x4}}], [{@pcr={'pcr', 0x3d, 0x1d}}, {@subj_user={'subj_user', 0x3d, ')-'}}]}) r3 = fsmount(r1, 0x1, 0x6) ftruncate(r3, 0x832d) sendfile(r1, r3, &(0x7f00000009c0)=0xffffffffffffffff, 0xba) r4 = syz_mount_image$omfs(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x9, 0x6, &(0x7f0000001e40)=[{&(0x7f0000000a80)="513f347e59b3dd2fff51e966d7fe7f6e53287bb35985b5bb0a9026ffc3153b420294c2b8bf2b29c3a5d47fbb61292ffe658da11341d659fc2a74ba200f4ca21e092a87c14d6e7e47f27c20105fbbfc04bc0fdb24ef2f5ca2bacabac615585af1390025285a1a64875a77bf6609ab126a14a0f3746ab27c75294fd2d0bcd1ed70380d215a20b9d40bfc280823fd5af1023ca85475cac559f29ed48e26fc15e5761327db903571a7788ce44b384a84d6d801182385c578993f8a33294961c9c4464bee5829f2ade9437b8620611f1281b58cc4518157dd6e0c12aef01662b03320fd800db66b013ff8ee69180fbc6ccd29d8c4d88b77d7", 0xf6, 0x19}, {&(0x7f0000000b80)="d259cba62c959800ae4b69984a40a059fb584b42330f42ec6c5365b2fc91c5835d99055c8e3892ce8c43faad106d499bd8542f18aa6818a9dcc7365b3a2895a3c6a503d24baacfbfc0a040038bb3d3bf87328c839c6321703333beee120d37bb47cd9531954f30d750a920bca68471b9b4115c559ddaae8f2fb83e621e7b37d36b4aff306941ffaf15a746f60841cabd7ff01a8d2fe7bb22c1a8e05b2103465c1898138d5d6341ae7bf0d0358b9b3d3c7ca323c0b422ab5f3fd20c1666706a75c1c9636e00b3719e23edd331c3653aedf9ffef18d09375578051be1bf71388064793ee24e64329492ad8e1b1", 0xec, 0xfb}, {&(0x7f0000000c80)="404db1d9a445bd641c9901e265fc7e1ea488411bb65ecaf149d032764949590c1a8af713c34ee2eab98942e003f83a95930e8f0f0b21a40f6cdadf", 0x3b, 0x10000}, {&(0x7f0000000cc0)="26c910d099fce00354fe9e4a5b6b18a567ba6fdd838a11eaec166d3254c276a2a7fdda86926c939a8fb5d971c101f617ffa03284a755ea0bb62a9bf511e4eed5e5935b3946bc6a99acfcb7a61e0e5d06d752d58dbd1d7fa567d2d1d7a143aa1859ab3f1c0017188d6ddc881aa14e7c553a6ab425016b80bf4261d5a8efb24d939e5135bb8bfba1f3972eb6a348e80e3c10e69a4acc7d6f1b7ce0d56a56e36b66ee134d3ca5028036285e310d1172f04c4a637c79c63ef46d7a08833b439ab009823bc9ad70d7aa6eef181705c5cb76be58513029099d661dd8ba6714a1a3", 0xde, 0xffffffff}, {&(0x7f0000000dc0)="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", 0x1000, 0x6}, {&(0x7f0000001dc0)="a67f4e6a11637e0d3202a206788ed2589f6ef6ef5b6f31299824f39b07bc214ada6397d322fe1f01652943a18a75f44f67b604edb7883afdde541765539243ea0d5a014f45941b4e97f1c722843120f27a74e455e86a5f31a948e9f65c87686bdb3ba4091a504a20704dd311a550f0290ac03de10860711fde1e7a48", 0x7c, 0xff}], 0x8008, &(0x7f0000001f00)={[{'\']!'}, {}, {'[--&#(-%%$-}-@\\*'}, {'^\xd4,!o^+)[%{*:'}, {'.'}, {'.'}], [{@context={'context', 0x3d, 'user_u'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'fault_injection'}}, {@euid_gt}, {@subj_user={'subj_user', 0x3d, '\\]!\x18^%&\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit}]}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001fc0)={r2, 0x7fffffffffffffff, 0x101, 0x1f}) clock_gettime(0x0, &(0x7f0000005d40)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002000)=""/152, 0x98}, {&(0x7f00000020c0)=""/126, 0x7e}, {&(0x7f0000002140)=""/192, 0xc0}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/202, 0xca}], 0x5, &(0x7f0000002400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002500)=""/184, 0xb8}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/173, 0xad}, {&(0x7f0000003680)=""/76, 0x4c}, {&(0x7f0000003700)=""/107, 0x6b}, {&(0x7f0000003780)=""/178, 0xb2}], 0x6, &(0x7f00000038c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000003980), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003a00)=""/155, 0x9b}, {&(0x7f0000003ac0)=""/42, 0x2a}, {&(0x7f0000003b00)=""/82, 0x52}, {&(0x7f0000003b80)=""/137, 0x89}], 0x4, &(0x7f0000003c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f00000053c0)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/248, 0xf8}, {&(0x7f0000004e40)=""/207, 0xcf}, {&(0x7f0000004f40)=""/103, 0x67}, {&(0x7f0000004fc0)=""/124, 0x7c}, {&(0x7f0000005040)=""/140, 0x8c}, {&(0x7f0000005100)=""/189, 0xbd}, {&(0x7f00000051c0)=""/172, 0xac}, {&(0x7f0000005280)=""/243, 0xf3}, {&(0x7f0000005380)}], 0xa, &(0x7f0000005480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x40}}, {{&(0x7f00000054c0)=@abs, 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005540)=""/14, 0xe}, {&(0x7f0000005580)=""/101, 0x65}, {&(0x7f0000005600)=""/54, 0x36}, {&(0x7f0000005640)=""/114, 0x72}, {&(0x7f00000056c0)=""/235, 0xeb}, {&(0x7f00000057c0)=""/155, 0x9b}, {&(0x7f0000005880)=""/71, 0x47}, {&(0x7f0000005900)=""/6, 0x6}, {&(0x7f0000005940)=""/25, 0x19}, {&(0x7f0000005980)=""/224, 0xe0}], 0xa, &(0x7f0000005b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x5, 0x4, &(0x7f0000005d80)={r6, r7+10000000}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r11, 0xc10c5541, &(0x7f0000005dc0)={0x2, 0x9, 0x1}) openat$cgroup_procs(r9, &(0x7f0000005f00)='cgroup.threads\x00', 0x2, 0x0) r12 = syz_mount_image$gfs2meta(&(0x7f0000005f40), &(0x7f0000005f80)='./file0\x00', 0x7fffffff, 0x3, &(0x7f00000061c0)=[{&(0x7f0000005fc0)="2ae3cccc65af735275beda70bdf384a0788a4f1e285dc2e1cde6593ec97e745ec136e1fe8373b69561d6eee075b15bfc22444778e6ca67b25ce018bd48e215a599609b7ed9e222f13cb17ba6c33eb7490bad7e95123c2cc13760bb97d34c73a043b0d2d221029b748b321819", 0x6c, 0x1}, {&(0x7f0000006040)="2d1f0910532738f8983a5aa30d3817e867689a90eafdcb59261cbdf94916e3f6cc1a091205b944c86362c229b83db82110ab73e3ea80b1203324fb6976f42757378eac23c9e68c5c0b8e90571941d90622670f054bfc52642156072c1f6bd5efb709519548d6f8708ce69a60644f5d372ce85d3fcf7de100dd43c9c8a2e73158062fbfe722bddf7731eee7d37cc1032fbfd51cbab4129276c6a42a10b852d7cf2b546969ca45a068f70f7939f001b31089f502f9d3e2541f43590e94", 0xbc, 0xad}, {&(0x7f0000006100)="2b37a7be78cb01fbe3025edbcc205791f30fafce6b7f51f2892bd2edc2fec7331d3591f0712cb88673025d5a9d0cdd2cb3f3fa755aee30e220f1b228711391633bd43e22b3436ba48214466dbd7a51f4e3d11ef07f7e3efeb2ba0c0235f487062f22afd7febbabcedfb04548acc6fc0555d6813149fe648754ed690bf3a83584f01065c8d9ea5fe69dda82d76a5986642a98e6a2c413950c", 0x98, 0x7fffffffffffffff}], 0x2066, &(0x7f0000006240)={[{'\''}, {'\'},*-/[]'}], [{@appraise_type}]}) dup(r12) newfstatat(0xffffffffffffff9c, &(0x7f0000007a00)='./file0\x00', &(0x7f0000007a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$hfsplus(&(0x7f0000006280), &(0x7f00000062c0)='./file0\x00', 0x112, 0x9, &(0x7f0000007900)=[{&(0x7f0000006300)="f01bf368880fa5a4e96f1facd4ae7def7e4d3c3bbc2b617fe2e942b0c7d4ff2804b7f7767559700544c30c9391b3b2c31fecccd807ffc82a5fb40e9eba27ae3b8593f36c612f203d27eb8cad78c6699f0e81da54b4236ca541e1279427f48747f89dab2c0329f5c7a0a5588ee5a445b9a73fb236aec76153a34c1ba7800ed6a9f86cd32a7dc2fa6317ea5dc3ddbf0328c68c373dc91c4bd727979d3bde14abd1f87b437ee235a7125fa397aff77369d98b63907edd1fb7a244649f3547a46f190b7cfde4619c725fbfffbc9c54fcef5c3be3dbbf68dd7a04828dbb625a1da2", 0xdf, 0x496}, {&(0x7f0000006400)="f55edcd9ccf8d821a1aa2bb3afe9c4e41d1d2997a9c052c5145de3f1b10d3eb1cb6db8293574dcb6e88c7f4f236f0af347a64c9532ed4c6d5f4d197e86f30366134248e086bb22e5e32f29655c2cecc647f2cb68ae6e67d5b263927d3210817d36833af22390788026fbeb7bdb68103edafb16a27bbf3d8262a01daec2b87a9d9a", 0x81, 0x3}, {&(0x7f00000064c0)="a05b23f80425d8c9ff8125ae3d3539c8570d1db6ffbaeb7f7539dda54841f4de895c455736486d657545fad0bbecb71cc102912bfafe6bc9dabf0e4f6f77e6a6379ef6c14ed92a26a611552948684caba9530ffd1c1d6a5d5066d429ceaa9e3bba54fca00d6a520f0548696350024533bc1524becd64cff1eb98af0a90a292", 0x7f, 0x339}, {&(0x7f0000006540)="c8355f30227108436e3e48bb367bb2fc2608c6b871f683593b5c075a29048105619581b714ef12eea7d09a6844a546f6500b227cc2ee8674813eb312c20a0b5e621cf0c1d06f05084ebc10fe7102ce778d866f773060984d0d749c7806ff7d56671986038094738e84fa217f527f5e87d0c41f6b3d8bbe9e5d490f429a64e04b4606421f926a7716d07d6809699bd59213d8610054269430151d7e2a199f8d14f3045383c787d2f5be7477736f58f222bec0395bfa38f615b6b5979f404df16ee703d6b670835163a120b71579", 0xcd, 0x3}, {&(0x7f0000006640)="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", 0x1000, 0x3}, {&(0x7f0000007640)="1be3fe8b19e96a187a46f35c3656fb33d7d48efdbf103a67080daec97bf810dc5411b37c87b25f460b9b93cf23e3551e10e2e1fc0436a38a612d1c370a5777faba0ec5ccba46676b818d44ab304fdc443838df9c39d9c987ad71c6890b564b33de7571eeff8710bd84a813df91d3e28edcc2d7fccf394dfc64da7c88a4389e900e04d45a058f4918b43366820febc7ca4f62fbff0faa3ddc3fc4eb358339b7d535b5", 0xa2, 0x9}, {&(0x7f0000007700)="567ed8ccc80474d31458cb2447f3821db2d1be3617ab46e9f846b9a486d2502fdd1ad1bbc6f622073dde3e44a95c2f2c92ac3fce92400979001f1484c7c932f5cd5d3a91db80471f75fba7bdfcc560ed44bc7fe9b6391636ce49124514f8b6253ece8eeb345e5a2c4ac3d059045c4616b5e83c19b5c73fc8f93b86b46fc7aa637f19", 0x82, 0x7}, {&(0x7f00000077c0)="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", 0xfb, 0x9}, {&(0x7f00000078c0)="c7c8b1f99060b1", 0x7, 0x6}], 0x60c14, &(0x7f0000007c00)={[{@gid={'gid', 0x3d, r13}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@umask={'umask', 0x3d, 0x3}}, {@nobarrier}, {@gid={'gid', 0x3d, r8}}, {@uid={'uid', 0x3d, r10}}], [{@uid_gt}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 15:07:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 402.995000][T10055] loop1: detected capacity change from 0 to 264192 [ 403.012925][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:07:52 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) [ 403.080642][T10055] loop1: detected capacity change from 0 to 264192 [ 403.092727][ T3730] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.101903][ T3730] Buffer I/O error on dev loop1, logical block 0, async page read 15:07:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (fail_nth: 1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 403.140436][ T3730] loop1: unable to read partition table [ 403.161319][ T3640] Bluetooth: hci6: sending frame failed (-49) [ 403.171511][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:07:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:52 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) [ 403.284415][T10060] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 15:07:52 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15:07:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 403.438075][ T27] audit: type=1804 audit(1658848072.863:103): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/339/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 15:07:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 403.547159][T10072] FAULT_INJECTION: forcing a failure. [ 403.547159][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 403.637355][T10072] CPU: 0 PID: 10072 Comm: syz-executor.1 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 403.647395][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 403.657474][T10072] Call Trace: [ 403.660774][T10072] [ 403.663735][T10072] dump_stack_lvl+0xcd/0x134 [ 403.668453][T10072] should_fail.cold+0x5/0xa [ 403.673003][T10072] _copy_to_user+0x2a/0x140 [ 403.677579][T10072] simple_read_from_buffer+0xcc/0x160 [ 403.683005][T10072] proc_fail_nth_read+0x187/0x220 [ 403.688068][T10072] ? proc_exe_link+0x1d0/0x1d0 [ 403.692877][T10072] ? security_file_permission+0xab/0xd0 [ 403.698531][T10072] ? proc_exe_link+0x1d0/0x1d0 [ 403.703328][T10072] vfs_read+0x1ef/0x5d0 [ 403.707517][T10072] ksys_read+0x127/0x250 [ 403.711786][T10072] ? vfs_write+0xac0/0xac0 [ 403.716232][T10072] ? syscall_enter_from_user_mode+0x22/0xb0 [ 403.722216][T10072] do_syscall_64+0x35/0xb0 [ 403.726668][T10072] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 403.732649][T10072] RIP: 0033:0x7f3bb2e3bdbc [ 403.737086][T10072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 403.756724][T10072] RSP: 002b:00007f3bb3f65160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.765257][T10072] RAX: ffffffffffffffda RBX: 00007f3bb2f9c030 RCX: 00007f3bb2e3bdbc [ 403.773253][T10072] RDX: 000000000000000f RSI: 00007f3bb3f651e0 RDI: 0000000000000007 [ 403.774048][T10067] FAULT_INJECTION: forcing a failure. 15:07:53 executing program 2: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000980), 0x0, 0x5e, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001e00)={0x0, 0x3, 0x0, [0x4, 0x1, 0x3ff, 0xf9a2, 0x3], [0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x20, 0x4e0, 0x0, 0x8, 0x5, 0x3, 0xff, 0x1000, 0xdf3, 0x8, 0x3f, 0x9, 0x7, 0x4, 0x55b, 0x3, 0x9, 0x7fff, 0xfffffffffffffffa, 0x0, 0x6, 0x4, 0x1f, 0x5, 0x4, 0x80000001, 0xe9, 0xd4, 0x6, 0x79c8118, 0x9, 0x8f, 0x100, 0x0, 0x805, 0x4, 0x8b, 0x4, 0x3, 0x0, 0x3ff, 0x5, 0x3ff, 0x6, 0xc7, 0x0, 0x1, 0x390b, 0x2, 0x9, 0x1, 0x5, 0x1, 0x9, 0xea32, 0x2ac5, 0x20000000000, 0x400, 0x0, 0x5, 0xc, 0x2, 0x104, 0x2, 0x6, 0x0, 0x6, 0x0, 0x1, 0x8001, 0x7, 0x0, 0x4, 0x7ff, 0x54f2b578, 0x8, 0x5, 0x4, 0x6, 0x7fffffff, 0x8000000000, 0x8000000000000001, 0x3, 0x9bc2, 0x4f9e, 0xffffffff, 0x5eb, 0x7, 0x400, 0x5, 0x8, 0x5, 0x3ff, 0x20, 0x1, 0x2000000000000, 0x7f, 0x11963be64, 0x8, 0x7fff, 0x80, 0x401, 0x7, 0x0, 0x8, 0x5, 0x1000000000, 0xfffffffffffffff8, 0x9, 0x589f, 0x8, 0x4, 0x3, 0xffff, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000e00)={r2, "db3da424d547a896ac5b49066e46862b"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 403.774048][T10067] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 403.781229][T10072] RBP: 00007f3bb3f651d0 R08: 0000000000000000 R09: 0000000000000000 [ 403.781275][T10072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.781292][T10072] R13: 00007ffd4e9395bf R14: 00007f3bb3f65300 R15: 0000000000022000 [ 403.781333][T10072] [ 403.856034][T10067] CPU: 1 PID: 10067 Comm: syz-executor.0 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 403.866080][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 403.876173][T10067] Call Trace: [ 403.879470][T10067] [ 403.882426][T10067] dump_stack_lvl+0xcd/0x134 [ 403.887058][T10067] should_fail.cold+0x5/0xa [ 403.891614][T10067] _copy_from_user+0x2a/0x170 [ 403.896340][T10067] sctp_getsockopt+0x2194/0x6e90 [ 403.901392][T10067] ? sctp_getsockopt_peeloff_common+0x310/0x310 [ 403.907677][T10067] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 403.913693][T10067] ? _parse_integer+0x30/0x30 [ 403.918400][T10067] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 403.924423][T10067] ? find_held_lock+0x2d/0x110 [ 403.929241][T10067] ? aa_sk_perm+0x30f/0xaa0 [ 403.933834][T10067] ? aa_af_perm+0x230/0x230 [ 403.938375][T10067] ? bpf_lsm_socket_getsockopt+0x5/0x10 [ 403.943979][T10067] ? sock_def_destruct+0x10/0x10 [ 403.949014][T10067] __sys_getsockopt+0x216/0x690 [ 403.953876][T10067] ? __ia32_sys_setsockopt+0x150/0x150 [ 403.959436][T10067] ? syscall_enter_from_user_mode+0x22/0xb0 [ 403.965365][T10067] __x64_sys_getsockopt+0xba/0x150 [ 403.970486][T10067] ? syscall_enter_from_user_mode+0x22/0xb0 [ 403.976391][T10067] do_syscall_64+0x35/0xb0 [ 403.980811][T10067] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 403.986877][T10067] RIP: 0033:0x7fbb5b089209 [ 403.991293][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 404.010901][T10067] RSP: 002b:00007fbb5c25a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 404.019312][T10067] RAX: ffffffffffffffda RBX: 00007fbb5b19c030 RCX: 00007fbb5b089209 [ 404.027284][T10067] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000006 [ 404.035249][T10067] RBP: 00007fbb5c25a1d0 R08: 0000000020000040 R09: 0000000000000000 [ 404.043310][T10067] R10: 0000000020001280 R11: 0000000000000246 R12: 0000000000000001 [ 404.051276][T10067] R13: 00007ffe0f87118f R14: 00007fbb5c25a300 R15: 0000000000022000 [ 404.059349][T10067] 15:07:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (fail_nth: 1) 15:07:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) 15:07:53 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:07:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (fail_nth: 2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 404.278908][T10090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.290765][ T8970] Bluetooth: hci6: Frame reassembly failed (-84) [ 404.304689][ T8970] Bluetooth: hci6: Frame reassembly failed (-84) 15:07:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:53 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) [ 404.428339][ T27] audit: type=1804 audit(1658848073.853:104): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/340/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 15:07:53 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 15:07:54 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 15:07:54 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 15:07:54 executing program 2: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000980), 0x0, 0x5e, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001e00)={0x0, 0x3, 0x0, [0x4, 0x1, 0x3ff, 0xf9a2, 0x3], [0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0x20, 0x4e0, 0x0, 0x8, 0x5, 0x3, 0xff, 0x1000, 0xdf3, 0x8, 0x3f, 0x9, 0x7, 0x4, 0x55b, 0x3, 0x9, 0x7fff, 0xfffffffffffffffa, 0x0, 0x6, 0x4, 0x1f, 0x5, 0x4, 0x80000001, 0xe9, 0xd4, 0x6, 0x79c8118, 0x9, 0x8f, 0x100, 0x0, 0x805, 0x4, 0x8b, 0x4, 0x3, 0x0, 0x3ff, 0x5, 0x3ff, 0x6, 0xc7, 0x0, 0x1, 0x390b, 0x2, 0x9, 0x1, 0x5, 0x1, 0x9, 0xea32, 0x2ac5, 0x20000000000, 0x400, 0x0, 0x5, 0xc, 0x2, 0x104, 0x2, 0x6, 0x0, 0x6, 0x0, 0x1, 0x8001, 0x7, 0x0, 0x4, 0x7ff, 0x54f2b578, 0x8, 0x5, 0x4, 0x6, 0x7fffffff, 0x8000000000, 0x8000000000000001, 0x3, 0x9bc2, 0x4f9e, 0xffffffff, 0x5eb, 0x7, 0x400, 0x5, 0x8, 0x5, 0x3ff, 0x20, 0x1, 0x2000000000000, 0x7f, 0x11963be64, 0x8, 0x7fff, 0x80, 0x401, 0x7, 0x0, 0x8, 0x5, 0x1000000000, 0xfffffffffffffff8, 0x9, 0x589f, 0x8, 0x4, 0x3, 0xffff, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000e00)={r2, "db3da424d547a896ac5b49066e46862b"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 405.422102][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802599e800: rx timeout, send abort [ 405.433955][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802599e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:07:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:07:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:55 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) 15:07:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (fail_nth: 3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:07:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x4) 15:07:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 1) [ 406.293124][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:07:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 406.374580][T10127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.397457][ T3640] Bluetooth: hci6: sending frame failed (-49) [ 406.404709][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:07:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000040)=0x1d) 15:07:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:56 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 15:07:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 406.584407][ T27] audit: type=1804 audit(1658848076.003:105): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/341/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 406.683578][T10138] FAULT_INJECTION: forcing a failure. [ 406.683578][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.711951][T10138] CPU: 1 PID: 10138 Comm: syz-executor.0 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 406.721990][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 406.732078][T10138] Call Trace: [ 406.735379][T10138] [ 406.738331][T10138] dump_stack_lvl+0xcd/0x134 [ 406.742973][T10138] should_fail.cold+0x5/0xa [ 406.747529][T10138] _copy_to_user+0x2a/0x140 [ 406.752084][T10138] simple_read_from_buffer+0xcc/0x160 [ 406.757499][T10138] proc_fail_nth_read+0x187/0x220 [ 406.762565][T10138] ? proc_exe_link+0x1d0/0x1d0 [ 406.767370][T10138] ? security_file_permission+0xab/0xd0 [ 406.772957][T10138] ? proc_exe_link+0x1d0/0x1d0 [ 406.777756][T10138] vfs_read+0x1ef/0x5d0 [ 406.781954][T10138] ksys_read+0x127/0x250 [ 406.786228][T10138] ? vfs_write+0xac0/0xac0 [ 406.790685][T10138] ? syscall_enter_from_user_mode+0x22/0xb0 [ 406.796629][T10138] do_syscall_64+0x35/0xb0 [ 406.801095][T10138] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 406.807024][T10138] RIP: 0033:0x7fbb5b03bdbc [ 406.811465][T10138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 15:07:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 406.831102][T10138] RSP: 002b:00007fbb5c25a160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.839548][T10138] RAX: ffffffffffffffda RBX: 00007fbb5b19c030 RCX: 00007fbb5b03bdbc [ 406.847544][T10138] RDX: 000000000000000f RSI: 00007fbb5c25a1e0 RDI: 0000000000000007 [ 406.855544][T10138] RBP: 00007fbb5c25a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 406.863544][T10138] R10: 0000000020001280 R11: 0000000000000246 R12: 0000000000000001 [ 406.871545][T10138] R13: 00007ffe0f87118f R14: 00007fbb5c25a300 R15: 0000000000022000 [ 406.879570][T10138] 15:07:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 407.116227][ T27] audit: type=1804 audit(1658848076.543:106): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/342/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 15:07:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x6) [ 407.600802][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888075332800: rx timeout, send abort [ 407.609785][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888075332800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:07:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 2) 15:07:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:57 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) [ 408.462960][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 408.463004][ T146] Bluetooth: hci7: command 0x1003 tx timeout [ 408.547145][T10171] ERROR: Out of memory at tomoyo_realpath_from_path. 15:07:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000040)=0x1d) 15:07:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x2, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:07:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 408.623093][ T7310] Bluetooth: hci6: command 0x1003 tx timeout [ 408.623160][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:07:58 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r5 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x88000) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x1d) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4090010, r6, 0x8e09c000) 15:07:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 408.779362][ T27] audit: type=1804 audit(1658848078.203:107): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/343/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 15:07:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:07:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x7) [ 408.905990][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888072ce4800: rx timeout, send abort [ 408.916099][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888072ce4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 410.233380][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888078d15000: rx timeout, send abort [ 410.241871][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888078d15000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 3) 15:08:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:08:00 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r5 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x88000) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x1d) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4090010, r6, 0x8e09c000) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x88000) (async) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x1d) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4090010, r6, 0x8e09c000) (async) [ 410.612861][ T146] Bluetooth: hci7: command 0x1003 tx timeout [ 410.612871][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 410.699783][T10202] Bluetooth: Can't allocate HCI device 15:08:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000040)=0x1d) 15:08:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:00 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xc) 15:08:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 15:08:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 4) [ 410.773040][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 410.773264][ T146] Bluetooth: hci6: command 0x1003 tx timeout 15:08:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 5) 15:08:00 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r5 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x88000) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x1d) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4090010, r6, 0x8e09c000) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x88000) (async) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x1d) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4090010, r6, 0x8e09c000) (async) 15:08:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 6) [ 410.909441][ T27] audit: type=1804 audit(1658848080.333:108): pid=10219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/344/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 410.948687][T10221] Bluetooth: Can't register HCI device 15:08:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 7) [ 411.016972][T10224] Bluetooth: Can't register HCI device [ 411.131831][ T3646] Bluetooth: hci8: sending frame failed (-49) [ 411.139737][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -49 15:08:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 8) 15:08:00 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 411.241937][ T3640] Bluetooth: hci8: sending frame failed (-49) [ 411.249259][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 15:08:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 9) [ 411.405681][T10249] Bluetooth: Can't register HCI device [ 412.120668][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801d0c4c00: rx timeout, send abort [ 412.129302][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801d0c4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 412.932915][ T7228] Bluetooth: hci6: command 0x1003 tx timeout [ 412.939115][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:08:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000040)=0x1d) 15:08:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x4, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 10) 15:08:02 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x12) 15:08:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 413.013006][ T146] Bluetooth: hci7: command 0x1003 tx timeout [ 413.013019][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 413.128173][T10257] Bluetooth: Can't register HCI device 15:08:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 11) [ 413.170450][ T27] audit: type=1804 audit(1658848082.593:109): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/345/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 15:08:02 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:02 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x68, 0x6, 0x3, "15730b6c0f971c5bb8881658aa6139f6", "b834c1200177a4b0220c1cdf9f154d5026e297e877b5521ae3c49655bdca8c4ba3fa37dac404bafef7337bc560df5fd0248b6e6d172a556894ffa427ff34ed36fd63a6f5def30c72644bf6841eccf6b864c0f6"}, 0x68, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 413.631984][ T27] audit: type=1804 audit(1658848083.053:110): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/346/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 15:08:03 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x68, 0x6, 0x3, "15730b6c0f971c5bb8881658aa6139f6", "b834c1200177a4b0220c1cdf9f154d5026e297e877b5521ae3c49655bdca8c4ba3fa37dac404bafef7337bc560df5fd0248b6e6d172a556894ffa427ff34ed36fd63a6f5def30c72644bf6841eccf6b864c0f6"}, 0x68, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r0) (async) bind$bt_hci(r1, &(0x7f0000000080), 0x6) (async) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x68, 0x6, 0x3, "15730b6c0f971c5bb8881658aa6139f6", "b834c1200177a4b0220c1cdf9f154d5026e297e877b5521ae3c49655bdca8c4ba3fa37dac404bafef7337bc560df5fd0248b6e6d172a556894ffa427ff34ed36fd63a6f5def30c72644bf6841eccf6b864c0f6"}, 0x68, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r5) (async) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 15:08:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x7, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 414.050414][ T27] audit: type=1804 audit(1658848083.473:111): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/347/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 414.339972][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801e71d000: rx timeout, send abort [ 414.348661][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801e71d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:04 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) (async) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x68, 0x6, 0x3, "15730b6c0f971c5bb8881658aa6139f6", "b834c1200177a4b0220c1cdf9f154d5026e297e877b5521ae3c49655bdca8c4ba3fa37dac404bafef7337bc560df5fd0248b6e6d172a556894ffa427ff34ed36fd63a6f5def30c72644bf6841eccf6b864c0f6"}, 0x68, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x8, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000040)=0x1d) 15:08:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x18) 15:08:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 415.173000][ T7307] Bluetooth: hci8: command 0x1003 tx timeout [ 415.173018][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 415.185606][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 415.258780][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:08:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 12) 15:08:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000040)=0x1d) [ 415.333221][ T27] audit: type=1804 audit(1658848084.763:112): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/348/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 415.363092][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 415.373017][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:08:04 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x7, 0x100, 0x8, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0xe, 0x0, [{0x0, 0x8, "8573bc9fbb40"}]}, @cipso={0x86, 0x5b, 0xffffffffffffffff, [{0x5, 0xf, "44442a2a7473c4b2ba2b9fab80"}, {0x1, 0x9, "62b1be53d6fabb"}, {0x1, 0xa, "23b33440beb1713d"}, {0x6, 0x3, "fb"}, {0x0, 0xf, "4d6030c9cf1a10f05992a73ee1"}, {0x0, 0x7, "855a796d43"}, {0x2, 0xd, "08dabfebeea4b0f2a788ae"}, {0x7, 0x8, "ed84b235f9d4"}, {0x1, 0x5, "bedfcc"}]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newneigh={0x54, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r1, 0x2, 0x0, 0x6}, [@NDA_VNI={0x8, 0x7, 0xcd31}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x7, 0x4, 0x80000001}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 415.475836][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 415.483370][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:08:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 13) [ 415.576701][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 415.586253][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 415.742505][T10326] Bluetooth: Can't register HCI device 15:08:05 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x7, 0x100, 0x8, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0xe, 0x0, [{0x0, 0x8, "8573bc9fbb40"}]}, @cipso={0x86, 0x5b, 0xffffffffffffffff, [{0x5, 0xf, "44442a2a7473c4b2ba2b9fab80"}, {0x1, 0x9, "62b1be53d6fabb"}, {0x1, 0xa, "23b33440beb1713d"}, {0x6, 0x3, "fb"}, {0x0, 0xf, "4d6030c9cf1a10f05992a73ee1"}, {0x0, 0x7, "855a796d43"}, {0x2, 0xd, "08dabfebeea4b0f2a788ae"}, {0x7, 0x8, "ed84b235f9d4"}, {0x1, 0x5, "bedfcc"}]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newneigh={0x54, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r1, 0x2, 0x0, 0x6}, [@NDA_VNI={0x8, 0x7, 0xcd31}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x7, 0x4, 0x80000001}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 14) [ 415.792517][ T27] audit: type=1804 audit(1658848085.213:113): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/349/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 415.860291][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 415.868881][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:05 executing program 3: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:05 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1e) 15:08:05 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x7, 0x100, 0x8, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0xe, 0x0, [{0x0, 0x8, "8573bc9fbb40"}]}, @cipso={0x86, 0x5b, 0xffffffffffffffff, [{0x5, 0xf, "44442a2a7473c4b2ba2b9fab80"}, {0x1, 0x9, "62b1be53d6fabb"}, {0x1, 0xa, "23b33440beb1713d"}, {0x6, 0x3, "fb"}, {0x0, 0xf, "4d6030c9cf1a10f05992a73ee1"}, {0x0, 0x7, "855a796d43"}, {0x2, 0xd, "08dabfebeea4b0f2a788ae"}, {0x7, 0x8, "ed84b235f9d4"}, {0x1, 0x5, "bedfcc"}]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newneigh={0x54, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r1, 0x2, 0x0, 0x6}, [@NDA_VNI={0x8, 0x7, 0xcd31}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x7, 0x4, 0x80000001}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0xa, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 416.496410][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079de1c00: rx timeout, send abort [ 416.504924][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079de1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 416.648138][ T27] audit: type=1804 audit(1658848086.073:114): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/350/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 15:08:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1d) 15:08:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:07 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x8, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x7ff, 0x2}, 0x6) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000080)={0x6f, 0x4, 0x7}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15:08:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0xb, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 417.652802][ T7310] Bluetooth: hci6: command 0x1003 tx timeout [ 417.652973][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 417.735505][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 417.736331][T10365] Bluetooth: hci6: Frame reassembly failed (-84) [ 417.748941][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 417.804649][ T27] audit: type=1804 audit(1658848087.233:115): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/351/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 417.845069][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880765da800: rx timeout, send abort 15:08:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000040)=0x1d) 15:08:07 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x24) [ 417.853692][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880765da800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 417.876315][ T27] audit: type=1804 audit(1658848087.263:116): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/439/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 417.984276][ T3682] Bluetooth: hci8: command 0x1003 tx timeout [ 417.990456][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 15:08:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 15) 15:08:07 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x8, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x7ff, 0x2}, 0x6) (async) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000080)={0x6f, 0x4, 0x7}) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15:08:07 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x8, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x7ff, 0x2}, 0x6) (async) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000080)={0x6f, 0x4, 0x7}) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 418.218393][T10378] Bluetooth: Can't register HCI device 15:08:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 16) 15:08:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0xc, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:07 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 17) [ 418.358157][T10394] Bluetooth: Can't register HCI device 15:08:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 418.479669][T10402] Bluetooth: Can't register HCI device 15:08:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 18) [ 418.517583][ T27] audit: type=1804 audit(1658848087.943:117): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/352/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 418.638368][T10408] Bluetooth: Can't register HCI device 15:08:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 19) [ 418.666749][ T27] audit: type=1804 audit(1658848088.093:118): pid=10405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/440/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 419.220540][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888020452000: rx timeout, send abort [ 419.229018][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888020452000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000040)=0x1d) 15:08:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:09 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2a) 15:08:09 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) [ 420.052807][ T3682] Bluetooth: hci6: command 0x1003 tx timeout [ 420.052898][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 420.192314][ T27] audit: type=1804 audit(1658848089.613:119): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/353/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 [ 420.251230][ T27] audit: type=1804 audit(1658848089.663:120): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/441/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 15:08:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0xe, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:09 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 15:08:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) socket$nl_netfilter(0x10, 0x3, 0xc) [ 420.645754][ T27] audit: type=1804 audit(1658848090.073:121): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/354/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 [ 420.773787][ T27] audit: type=1804 audit(1658848090.203:122): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/442/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 420.853202][ T7310] Bluetooth: hci7: command 0x1003 tx timeout [ 420.863875][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 20) 15:08:10 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 420.971170][T10458] debugfs: out of free dentries, can not create directory 'hci7' [ 420.993069][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 421.000609][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) socket$nl_netfilter(0x10, 0x3, 0xc) 15:08:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 21) [ 421.139246][T10464] debugfs: out of free dentries, can not create directory 'hci7' [ 421.151965][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 421.159770][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 22) [ 421.197927][ T27] audit: type=1804 audit(1658848090.623:123): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/443/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 421.314453][T10469] Bluetooth: Can't register HCI device [ 421.385781][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025ac3000: rx timeout, send abort [ 421.394367][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888025ac3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000040)=0x1d) 15:08:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 23) 15:08:11 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x30) 15:08:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0xf, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) socket$nl_netfilter(0x10, 0x3, 0xc) 15:08:11 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 422.132941][ T3683] Bluetooth: hci6: command 0x1003 tx timeout [ 422.132990][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:08:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 24) 15:08:11 executing program 1: syz_open_procfs(0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 422.214845][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 422.222604][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 422.246018][T10476] Bluetooth: Can't register HCI device 15:08:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000040)=0x1d) [ 422.342356][ T27] audit: type=1804 audit(1658848091.763:124): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/444/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:08:11 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) 15:08:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 25) [ 422.397526][T10495] Bluetooth: Can't register HCI device [ 422.456944][ T27] audit: type=1804 audit(1658848091.803:125): pid=10481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/355/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 422.519815][T10505] kobject_add_internal failed for hci6 (error: -12 parent: bluetooth) 15:08:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 26) [ 422.566151][T10505] Bluetooth: Can't register HCI device 15:08:12 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) (async) 15:08:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 27) [ 422.709069][T10511] kobject_add_internal failed for hci6 (error: -12 parent: bluetooth) [ 422.733609][T10511] Bluetooth: Can't register HCI device [ 422.873954][T10514] Bluetooth: Can't register HCI device 15:08:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x36) 15:08:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 15:08:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x10, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 28) 15:08:12 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) (async) [ 423.484785][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807606dc00: rx timeout, send abort [ 423.493353][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807606dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 29) [ 423.608326][T10534] Bluetooth: Can't register HCI device [ 423.653729][ T27] audit: type=1804 audit(1658848093.083:126): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/445/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 423.701273][T10541] Bluetooth: Can't register HCI device [ 423.746095][ T27] audit: type=1804 audit(1658848093.173:127): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/356/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 15:08:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 15:08:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 30) 15:08:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000040)=0x1d) 15:08:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x11, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:13 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x94800, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2b, 0x81, 0x4, 0xc9, 0x14, @mcast1, @mcast1, 0x7800, 0x20, 0x40, 0x8}}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="65060000", @ANYRES16=r1, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x11, r4, 0x1, 0x1c, 0x6, @link_local}, 0x14) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 424.452853][ T7310] Bluetooth: hci7: command 0x1003 tx timeout [ 424.453108][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:14 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x94800, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2b, 0x81, 0x4, 0xc9, 0x14, @mcast1, @mcast1, 0x7800, 0x20, 0x40, 0x8}}) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="65060000", @ANYRES16=r1, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x11, r4, 0x1, 0x1c, 0x6, @link_local}, 0x14) (async, rerun: 32) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 424.580758][ T27] audit: type=1804 audit(1658848094.003:128): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/446/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 424.583140][T10563] Bluetooth: Can't register HCI device 15:08:14 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3c) 15:08:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 31) 15:08:14 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x94800, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2b, 0x81, 0x4, 0xc9, 0x14, @mcast1, @mcast1, 0x7800, 0x20, 0x40, 0x8}}) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="65060000", @ANYRES16=r1, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x11, r4, 0x1, 0x1c, 0x6, @link_local}, 0x14) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:08:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) [ 424.879359][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807ec2c800: rx timeout, send abort [ 424.887994][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ec2c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:14 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 424.989826][T10576] Bluetooth: Can't register HCI device 15:08:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 32) 15:08:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x12, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 425.136876][T10590] Bluetooth: Can't register HCI device [ 425.378383][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 425.378400][ T27] audit: type=1804 audit(1658848094.803:131): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/358/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 426.281058][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888011ba7000: rx timeout, send abort [ 426.289639][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888011ba7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000040)=0x1d) 15:08:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 33) 15:08:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x13, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:16 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:16 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x59) [ 426.612846][ T146] Bluetooth: hci6: command 0x1003 tx timeout [ 426.624248][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 426.720718][T10602] Bluetooth: Can't register HCI device 15:08:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 34) 15:08:16 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r3) (async) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 426.789276][ T27] audit: type=1804 audit(1658848096.213:132): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/448/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 426.890851][ T27] audit: type=1804 audit(1658848096.313:133): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/359/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 426.891490][T10614] Bluetooth: Can't register HCI device 15:08:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 35) 15:08:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 427.168505][ T27] audit: type=1804 audit(1658848096.593:134): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/449/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 15:08:16 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@newlinkprop={0x78, 0x6c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x2}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7f}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x32a7d}, @IFLA_EXT_MASK={0x8, 0x1d, 0xa476}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="0f0ffa96baa000b86000ef0f30660faebb0000baf80c66b8147b758166efbafc0c66eddff066b9800000c00f326635004000000f3064660f3adf4500000f20e06635002000000f22e067640fc79cb200a00000", 0x53}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 427.524983][ T27] audit: type=1804 audit(1658848096.953:135): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/450/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 427.974444][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801fd7ac00: rx timeout, send abort [ 427.983187][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801fd7ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000040)=0x1d) 15:08:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x14, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:18 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@newlinkprop={0x78, 0x6c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x2}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7f}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x32a7d}, @IFLA_EXT_MASK={0x8, 0x1d, 0xa476}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="0f0ffa96baa000b86000ef0f30660faebb0000baf80c66b8147b758166efbafc0c66eddff066b9800000c00f326635004000000f3064660f3adf4500000f20e06635002000000f22e067640fc79cb200a00000", 0x53}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:18 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x600) [ 428.692820][ T7310] Bluetooth: hci6: command 0x1003 tx timeout [ 428.692925][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 428.852957][ T27] audit: type=1804 audit(1658848098.273:136): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/451/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 428.884252][ T27] audit: type=1804 audit(1658848098.283:137): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/360/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:08:18 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@newlinkprop={0x78, 0x6c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x2}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7f}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x32a7d}, @IFLA_EXT_MASK={0x8, 0x1d, 0xa476}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="0f0ffa96baa000b86000ef0f30660faebb0000baf80c66b8147b758166efbafc0c66eddff066b9800000c00f326635004000000f3064660f3adf4500000f20e06635002000000f22e067640fc79cb200a00000", 0x53}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 36) [ 429.093223][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 37) [ 429.151381][T10662] Bluetooth: Can't register HCI device [ 429.164903][ T27] audit: type=1804 audit(1658848098.593:138): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/452/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 15:08:18 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) bind$bt_hci(r3, &(0x7f0000000080), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newroute={0x44, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x6, 0xff, 0x4, 0xfd, 0xa}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3, 0x0, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x1, 0x63}}, @RTA_PREF={0x5, 0x14, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) 15:08:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 429.316030][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 429.323322][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 38) [ 429.504311][ T27] audit: type=1804 audit(1658848098.933:139): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/453/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 429.551239][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 429.558931][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 430.020553][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807716c800: rx timeout, send abort [ 430.029024][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807716c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)=0x1d) 15:08:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x15, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 39) 15:08:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 15:08:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) bind$bt_hci(r3, &(0x7f0000000080), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newroute={0x44, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x6, 0xff, 0x4, 0xfd, 0xa}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3, 0x0, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x1, 0x63}}, @RTA_PREF={0x5, 0x14, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) dup(0xffffffffffffffff) (async) bind$bt_hci(r3, &(0x7f0000000080), 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newroute={0x44, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x6, 0xff, 0x4, 0xfd, 0xa}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3, 0x0, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x1, 0x63}}, @RTA_PREF={0x5, 0x14, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) (async) 15:08:20 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x700) [ 430.772803][ T7308] Bluetooth: hci6: command 0x1003 tx timeout [ 430.772995][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 430.920561][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 430.927954][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 40) [ 430.964035][ T27] audit: type=1804 audit(1658848100.393:140): pid=10693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/454/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 431.067181][ T27] audit: type=1804 audit(1658848100.443:141): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/361/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 431.113535][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 431.120721][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 41) 15:08:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) bind$bt_hci(r3, &(0x7f0000000080), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newroute={0x44, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x6, 0xff, 0x4, 0xfd, 0xa}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3, 0x0, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x1, 0x63}}, @RTA_PREF={0x5, 0x14, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) dup(0xffffffffffffffff) (async) bind$bt_hci(r3, &(0x7f0000000080), 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newroute={0x44, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x6, 0xff, 0x4, 0xfd, 0xa}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3, 0x0, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x1, 0x63}}, @RTA_PREF={0x5, 0x14, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) (async) 15:08:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) [ 431.356199][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 431.365120][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 42) [ 431.402966][ T27] audit: type=1804 audit(1658848100.823:142): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/455/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 431.481035][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 431.488717][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 43) [ 431.630033][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 431.638229][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 432.124614][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c47e800: rx timeout, send abort [ 432.133113][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c47e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)=0x1d) 15:08:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x16, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 15:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 44) 15:08:22 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0xfffffffffffffede) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xc00) [ 432.852801][ T7307] Bluetooth: hci6: command 0x1003 tx timeout [ 432.852907][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 432.952073][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 432.959822][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 45) [ 433.051017][ T27] audit: type=1804 audit(1658848102.473:143): pid=10739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/456/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 433.080045][ T27] audit: type=1804 audit(1658848102.493:144): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/362/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 15:08:22 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0xfffffffffffffede) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 433.129625][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 433.136787][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 46) 15:08:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x17, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:22 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0xfffffffffffffede) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) [ 433.557077][ T27] audit: type=1804 audit(1658848102.983:145): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/363/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 434.151098][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801d59a000: rx timeout, send abort [ 434.159728][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801d59a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000040)=0x1d) 15:08:24 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1128], 0x468) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="9a9500e9000c4951f009aa000066b923a409000000320f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f02", 0x34}], 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x4}, {0xe, 0x5}, {0x3, 0x2}}, [{0x8, 0xb, 0x3f}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x600000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x58dc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 15:08:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x18, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1200) [ 434.932801][ T7307] Bluetooth: hci6: command 0x1003 tx timeout [ 434.942948][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 435.071665][ T27] audit: type=1804 audit(1658848104.493:146): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/364/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 15:08:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 15:08:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 47) [ 435.413054][ T7308] Bluetooth: hci7: command 0x1003 tx timeout [ 435.422801][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x19, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 435.552360][T10792] kobject_add_internal failed for rfkill94 (error: -12 parent: hci7) 15:08:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 435.597837][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 435.605765][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 48) [ 435.786232][T10801] kobject_add_internal failed for rfkill95 (error: -12 parent: hci7) [ 435.797751][ T27] audit: type=1804 audit(1658848105.223:147): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/365/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 435.846122][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 435.853658][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 49) 15:08:25 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1128], 0x468) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="9a9500e9000c4951f009aa000066b923a409000000320f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f02", 0x34}], 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x4}, {0xe, 0x5}, {0x3, 0x2}}, [{0x8, 0xb, 0x3f}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x600000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x58dc) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 436.078257][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 436.085460][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 436.233479][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880768dc400: rx timeout, send abort [ 436.242176][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880768dc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 436.705257][ T27] audit: type=1800 audit(1658848106.133:148): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1179 res=0 errno=0 15:08:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d) 15:08:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 50) 15:08:26 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1800) 15:08:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x1a, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:26 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1128], 0x468) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="9a9500e9000c4951f009aa000066b923a409000000320f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f02", 0x34}], 0x1, 0x0, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x4}, {0xe, 0x5}, {0x3, 0x2}}, [{0x8, 0xb, 0x3f}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x600000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x58dc) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 437.092827][ T7308] Bluetooth: hci6: command 0x1003 tx timeout [ 437.099147][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 437.256612][ T4698] Bluetooth: hci7: Frame reassembly failed (-84) 15:08:26 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r7, r6, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000210004002bbd7000fedbdf2500000000000000000000000000000000ac1414bb0000000000000000000000004e2180004e241000020020202f000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="b96b6e000000000008000c0004000000080018000000000008001d0001800000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0f01c30f01d166baf80cb88cd32d8cef66bafc0cec640f010fc4c135de01660f3882660eb99b030000b88a0d0000ba000000000f30640f01c9c4e20da8e80f08", 0x40}], 0x1, 0x6f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="abf02b3e91b9dbc900aa79b10c94c25f84285c73343e3e958207", 0x1a, r8) [ 437.318177][ T27] audit: type=1804 audit(1658848106.743:149): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/366/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 15:08:27 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) (async) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r7, r6, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000210004002bbd7000fedbdf2500000000000000000000000000000000ac1414bb0000000000000000000000004e2180004e241000020020202f000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="b96b6e000000000008000c0004000000080018000000000008001d0001800000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0f01c30f01d166baf80cb88cd32d8cef66bafc0cec640f010fc4c135de01660f3882660eb99b030000b88a0d0000ba000000000f30640f01c9c4e20da8e80f08", 0x40}], 0x1, 0x6f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="abf02b3e91b9dbc900aa79b10c94c25f84285c73343e3e958207", 0x1a, r8) 15:08:27 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r7, r6, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000210004002bbd7000fedbdf2500000000000000000000000000000000ac1414bb0000000000000000000000004e2180004e241000020020202f000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="b96b6e000000000008000c0004000000080018000000000008001d0001800000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0f01c30f01d166baf80cb88cd32d8cef66bafc0cec640f010fc4c135de01660f3882660eb99b030000b88a0d0000ba000000000f30640f01c9c4e20da8e80f08", 0x40}], 0x1, 0x6f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="abf02b3e91b9dbc900aa79b10c94c25f84285c73343e3e958207", 0x1a, r8) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r3) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffe) (async) keyctl$chown(0x4, r7, r6, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000210004002bbd7000fedbdf2500000000000000000000000000000000ac1414bb0000000000000000000000004e2180004e241000020020202f000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="b96b6e000000000008000c0004000000080018000000000008001d0001800000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0f01c30f01d166baf80cb88cd32d8cef66bafc0cec640f010fc4c135de01660f3882660eb99b030000b88a0d0000ba000000000f30640f01c9c4e20da8e80f08", 0x40}], 0x1, 0x6f, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) (async) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="abf02b3e91b9dbc900aa79b10c94c25f84285c73343e3e958207", 0x1a, r8) (async) 15:08:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x1b, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:27 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="65d9fc0c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0xffffffffffffff0d}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) [ 438.024555][ T27] audit: type=1804 audit(1658848107.453:150): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/367/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 15:08:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 438.296881][ T27] audit: type=1800 audit(1658848107.723:151): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1178 res=0 errno=0 [ 438.413840][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880766b2c00: rx timeout, send abort [ 438.422280][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880766b2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 439.055657][ T27] audit: type=1804 audit(1658848108.483:152): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/462/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 15:08:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000040)=0x1d) [ 439.252774][ T3683] Bluetooth: hci7: command 0x1003 tx timeout [ 439.253113][ T7308] Bluetooth: hci6: command 0x1003 tx timeout [ 439.264842][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 439.264953][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 51) 15:08:28 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="65d9fc0c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0xffffffffffffff0d}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="65d9fc0c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0xffffffffffffff0d}], 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) (async) 15:08:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1e00) 15:08:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x1c, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 439.425444][ T27] audit: type=1804 audit(1658848108.853:153): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/368/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 439.460509][ T8] Bluetooth: hci6: Frame reassembly failed (-84) [ 439.470287][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 439.477621][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000040)=0x1d) [ 439.573943][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.580282][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 15:08:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:29 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="65d9fc0c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0xffffffffffffff0d}], 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) [ 440.625763][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880228d5c00: rx timeout, send abort [ 440.634310][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880228d5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 52) 15:08:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x1d, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:30 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, ':#'}, {0x20, '/dev/kvm\x00'}, {}, {0x20, '(*'}], 0xa, "80913f17a13859529e7deab2b5b12fecb2588890e522bd684e54fee524715fe8f35fa67e32e0fdceb9290f5eb11409ca8de4663062aa5c5681e62843bfac66532f4f6592dc6ec780eb465166565c9c7ca0faf0a5c2ae156c345141f35dd06de4afa4e4748f30cb3cd17d96b2acb2dd6e5e408d5c3442833b2c16392f25c21a142430fb4337e8a3dbfbae3a3c22aabebc2d5f233c1607733c1f2f98e305c3a97f3bf630a0bb511e9f05ff2dd1903c90bc0ef805cb274ea9a28e2d19240fc82da898cb9fbae99eb32290fb6af88c0667fa994b814948f5a546da177c5bd670379d142b9f3c"}, 0x114) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:30 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1f00) [ 441.492937][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 441.493117][ T14] Bluetooth: hci6: command 0x1003 tx timeout [ 441.653076][ T14] Bluetooth: hci7: command 0x1003 tx timeout [ 441.662786][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 441.671257][ T27] audit: type=1804 audit(1658848111.083:154): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/369/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 15:08:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000040)=0x1d) 15:08:31 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, ':#'}, {0x20, '/dev/kvm\x00'}, {}, {0x20, '(*'}], 0xa, "80913f17a13859529e7deab2b5b12fecb2588890e522bd684e54fee524715fe8f35fa67e32e0fdceb9290f5eb11409ca8de4663062aa5c5681e62843bfac66532f4f6592dc6ec780eb465166565c9c7ca0faf0a5c2ae156c345141f35dd06de4afa4e4748f30cb3cd17d96b2acb2dd6e5e408d5c3442833b2c16392f25c21a142430fb4337e8a3dbfbae3a3c22aabebc2d5f233c1607733c1f2f98e305c3a97f3bf630a0bb511e9f05ff2dd1903c90bc0ef805cb274ea9a28e2d19240fc82da898cb9fbae99eb32290fb6af88c0667fa994b814948f5a546da177c5bd670379d142b9f3c"}, 0x114) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 441.886396][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 441.894745][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000040)=0x1d) 15:08:31 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, ':#'}, {0x20, '/dev/kvm\x00'}, {}, {0x20, '(*'}], 0xa, "80913f17a13859529e7deab2b5b12fecb2588890e522bd684e54fee524715fe8f35fa67e32e0fdceb9290f5eb11409ca8de4663062aa5c5681e62843bfac66532f4f6592dc6ec780eb465166565c9c7ca0faf0a5c2ae156c345141f35dd06de4afa4e4748f30cb3cd17d96b2acb2dd6e5e408d5c3442833b2c16392f25c21a142430fb4337e8a3dbfbae3a3c22aabebc2d5f233c1607733c1f2f98e305c3a97f3bf630a0bb511e9f05ff2dd1903c90bc0ef805cb274ea9a28e2d19240fc82da898cb9fbae99eb32290fb6af88c0667fa994b814948f5a546da177c5bd670379d142b9f3c"}, 0x114) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, ':#'}, {0x20, '/dev/kvm\x00'}, {}, {0x20, '(*'}], 0xa, "80913f17a13859529e7deab2b5b12fecb2588890e522bd684e54fee524715fe8f35fa67e32e0fdceb9290f5eb11409ca8de4663062aa5c5681e62843bfac66532f4f6592dc6ec780eb465166565c9c7ca0faf0a5c2ae156c345141f35dd06de4afa4e4748f30cb3cd17d96b2acb2dd6e5e408d5c3442833b2c16392f25c21a142430fb4337e8a3dbfbae3a3c22aabebc2d5f233c1607733c1f2f98e305c3a97f3bf630a0bb511e9f05ff2dd1903c90bc0ef805cb274ea9a28e2d19240fc82da898cb9fbae99eb32290fb6af88c0667fa994b814948f5a546da177c5bd670379d142b9f3c"}, 0x114) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 15:08:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x1e, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 442.371498][ T27] audit: type=1804 audit(1658848111.793:155): pid=10944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/370/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 15:08:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 442.414212][ T27] audit: type=1800 audit(1658848111.833:156): pid=10921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1165 res=0 errno=0 15:08:32 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f01b43cf97f000066baf80cb89499ea89ef66bafc0c66edf6694cc744240075000000c744240207000000ff1c2466baf80cb89c67788aef66bafc0ced0f30c482893aef66460f3880590d400fc75db5c744240056000000c7442402d61d0000ff2c24", 0x63}], 0x1, 0x9, &(0x7f00000001c0)=[@efer={0x2, 0x100}, @cr4={0x1, 0x490400}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet(0x2, 0xa, 0x1f) fstatfs(r2, &(0x7f0000000200)) [ 442.840949][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807d87f800: rx timeout, send abort [ 442.851817][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807d87f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.286520][ T27] audit: type=1804 audit(1658848112.713:157): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/470/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 15:08:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 53) 15:08:33 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f01b43cf97f000066baf80cb89499ea89ef66bafc0c66edf6694cc744240075000000c744240207000000ff1c2466baf80cb89c67788aef66bafc0ced0f30c482893aef66460f3880590d400fc75db5c744240056000000c7442402d61d0000ff2c24", 0x63}], 0x1, 0x9, &(0x7f00000001c0)=[@efer={0x2, 0x100}, @cr4={0x1, 0x490400}], 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet(0x2, 0xa, 0x1f) fstatfs(r2, &(0x7f0000000200)) 15:08:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x21, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2000) 15:08:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 443.652928][ T3683] Bluetooth: hci6: command 0x1003 tx timeout [ 443.652960][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:08:33 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f01b43cf97f000066baf80cb89499ea89ef66bafc0c66edf6694cc744240075000000c744240207000000ff1c2466baf80cb89c67788aef66bafc0ced0f30c482893aef66460f3880590d400fc75db5c744240056000000c7442402d61d0000ff2c24", 0x63}], 0x1, 0x9, &(0x7f00000001c0)=[@efer={0x2, 0x100}, @cr4={0x1, 0x490400}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet(0x2, 0xa, 0x1f) fstatfs(r2, &(0x7f0000000200)) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f01b43cf97f000066baf80cb89499ea89ef66bafc0c66edf6694cc744240075000000c744240207000000ff1c2466baf80cb89c67788aef66bafc0ced0f30c482893aef66460f3880590d400fc75db5c744240056000000c7442402d61d0000ff2c24", 0x63}], 0x1, 0x9, &(0x7f00000001c0)=[@efer={0x2, 0x100}, @cr4={0x1, 0x490400}], 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) socket$inet(0x2, 0xa, 0x1f) (async) fstatfs(r2, &(0x7f0000000200)) (async) [ 443.799125][ T27] audit: type=1804 audit(1658848113.223:158): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/371/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 15:08:33 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x1000, &(0x7f000000a000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5433, &(0x7f0000000040)=0x1d) [ 444.133148][ T3683] Bluetooth: hci7: command 0x1003 tx timeout [ 444.139447][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 444.209694][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 444.217193][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000040)=0x1d) 15:08:33 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x1000, &(0x7f000000a000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 444.360851][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 444.368378][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000040)=0x1d) 15:08:33 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x1000, &(0x7f000000a000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x1000, &(0x7f000000a000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 444.645946][ T27] audit: type=1804 audit(1658848114.073:159): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/471/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 444.672945][ T27] audit: type=1800 audit(1658848114.073:160): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1164 res=0 errno=0 [ 444.969198][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802189d400: rx timeout, send abort [ 444.977661][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802189d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 54) 15:08:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x22, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:35 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0fc71e000064660f38248e3f33660f38df640366b94f0a00000f32640f0966b99a03000066b8fd00000066ba000000000f3066b96208000066b80000000066ba000000000f300f303ef30f09f4", 0x4d}], 0x1, 0x6f, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2}], 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="f30f1c6c04baf80c66b88d9e6b8b66efbafc0cecba2000b89734ef66b9340800000f32b8a1008ec066b9800000c00f326635008000000f300fc7ae0c00ba4100ec66b9800000c00f326635002000000f30bad104ed", 0x55}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:35 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2400) [ 445.892918][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 446.076578][ T27] audit: type=1804 audit(1658848115.503:161): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/372/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 15:08:35 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0fc71e000064660f38248e3f33660f38df640366b94f0a00000f32640f0966b99a03000066b8fd00000066ba000000000f3066b96208000066b80000000066ba000000000f300f303ef30f09f4", 0x4d}], 0x1, 0x6f, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2}], 0x1) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="f30f1c6c04baf80c66b88d9e6b8b66efbafc0cecba2000b89734ef66b9340800000f32b8a1008ec066b9800000c00f326635008000000f300fc7ae0c00ba4100ec66b9800000c00f326635002000000f30bad104ed", 0x55}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) 15:08:35 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0fc71e000064660f38248e3f33660f38df640366b94f0a00000f32640f0966b99a03000066b8fd00000066ba000000000f3066b96208000066b80000000066ba000000000f300f303ef30f09f4", 0x4d}], 0x1, 0x6f, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2}], 0x1) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="f30f1c6c04baf80c66b88d9e6b8b66efbafc0cecba2000b89734ef66b9340800000f32b8a1008ec066b9800000c00f326635008000000f300fc7ae0c00ba4100ec66b9800000c00f326635002000000f30bad104ed", 0x55}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:35 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x23, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000040)=0x1d) [ 446.620571][ T143] Bluetooth: hci7: command 0x1003 tx timeout [ 446.626792][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 446.726561][ T27] audit: type=1804 audit(1658848116.143:162): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/373/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 446.771979][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 446.779320][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 446.829855][ T27] audit: type=1800 audit(1658848116.253:163): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1177 res=0 errno=0 15:08:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000040)=0x1d) [ 447.205037][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888077072400: rx timeout, send abort [ 447.213656][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888077072400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 447.640823][ T27] audit: type=1804 audit(1658848117.063:164): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/473/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 15:08:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 55) 15:08:37 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 15:08:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x24, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:37 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2a00) 15:08:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 448.052843][ T3683] Bluetooth: hci6: command 0x1003 tx timeout [ 448.052957][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 448.119785][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 448.133143][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:08:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 56) [ 448.197928][ T27] audit: type=1804 audit(1658848117.623:165): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/374/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 448.280502][T11079] kobject_add_internal failed for hci6 (error: -12 parent: bluetooth) 15:08:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 57) [ 448.327697][T11079] Bluetooth: Can't register HCI device 15:08:37 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 15:08:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x25, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 448.855532][ T27] audit: type=1804 audit(1658848118.283:166): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/375/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 15:08:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:38 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) r8 = dup2(r0, r2) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x7f, 0x20, 0x2d, 0x5, 0x34, 0x6, 0x0, 0x4, 0xfd, 0x3f, 0x9f, 0x1, 0x81, 0x4, 0x0, 0x80}}) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="26360f852c000f01c366b98a01000066b82000000066ba000000000f303e0f0f6b0096ff8ff54fbaf80c66b81871e88e66efbafc0c66b80700000066ef67640fc76b7a363e0f01cf260f22470fc76bae", 0x50}], 0x1, 0x0, &(0x7f00000001c0)=[@dstype3={0x7, 0x5}], 0x1) [ 448.985635][ T27] audit: type=1800 audit(1658848118.413:167): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1182 res=0 errno=0 [ 449.012866][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 449.021222][ T14] Bluetooth: hci7: command tx timeout 15:08:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000040)=0x1d) 15:08:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 449.222269][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 449.230988][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:38 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3000) 15:08:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000040)=0x1d) 15:08:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 449.373587][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888016a18400: rx timeout, send abort [ 449.382267][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888016a18400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 58) 15:08:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x66, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:39 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) r8 = dup2(r0, r2) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x7f, 0x20, 0x2d, 0x5, 0x34, 0x6, 0x0, 0x4, 0xfd, 0x3f, 0x9f, 0x1, 0x81, 0x4, 0x0, 0x80}}) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="26360f852c000f01c366b98a01000066b82000000066ba000000000f303e0f0f6b0096ff8ff54fbaf80c66b81871e88e66efbafc0c66b80700000066ef67640fc76b7a363e0f01cf260f22470fc76bae", 0x50}], 0x1, 0x0, &(0x7f00000001c0)=[@dstype3={0x7, 0x5}], 0x1) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r6) (async) bind$bt_hci(r7, &(0x7f0000000080), 0x6) (async) dup2(r0, r2) (async) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x7f, 0x20, 0x2d, 0x5, 0x34, 0x6, 0x0, 0x4, 0xfd, 0x3f, 0x9f, 0x1, 0x81, 0x4, 0x0, 0x80}}) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="26360f852c000f01c366b98a01000066b82000000066ba000000000f303e0f0f6b0096ff8ff54fbaf80c66b81871e88e66efbafc0c66b80700000066ef67640fc76b7a363e0f01cf260f22470fc76bae", 0x50}], 0x1, 0x0, &(0x7f00000001c0)=[@dstype3={0x7, 0x5}], 0x1) (async) [ 450.452974][ T14] Bluetooth: hci6: command 0x1003 tx timeout [ 450.452987][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:08:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 450.607393][ T27] audit: type=1804 audit(1658848120.033:168): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/376/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 15:08:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:40 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3600) [ 450.759134][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880792a4000: rx timeout, send abort [ 450.767840][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880792a4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:40 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) r8 = dup2(r0, r2) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x7f, 0x20, 0x2d, 0x5, 0x34, 0x6, 0x0, 0x4, 0xfd, 0x3f, 0x9f, 0x1, 0x81, 0x4, 0x0, 0x80}}) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="26360f852c000f01c366b98a01000066b82000000066ba000000000f303e0f0f6b0096ff8ff54fbaf80c66b81871e88e66efbafc0c66b80700000066ef67640fc76b7a363e0f01cf260f22470fc76bae", 0x50}], 0x1, 0x0, &(0x7f00000001c0)=[@dstype3={0x7, 0x5}], 0x1) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r6) (async) bind$bt_hci(r7, &(0x7f0000000080), 0x6) (async) dup2(r0, r2) (async) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x7f, 0x20, 0x2d, 0x5, 0x34, 0x6, 0x0, 0x4, 0xfd, 0x3f, 0x9f, 0x1, 0x81, 0x4, 0x0, 0x80}}) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="26360f852c000f01c366b98a01000066b82000000066ba000000000f303e0f0f6b0096ff8ff54fbaf80c66b81871e88e66efbafc0c66b80700000066ef67640fc76b7a363e0f01cf260f22470fc76bae", 0x50}], 0x1, 0x0, &(0x7f00000001c0)=[@dstype3={0x7, 0x5}], 0x1) (async) 15:08:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x8933, &(0x7f0000000040)=0x1d) 15:08:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 451.492896][ T3683] Bluetooth: hci7: command 0x1003 tx timeout [ 451.492917][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 452.110545][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f31c000: rx timeout, send abort [ 452.119044][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807f31c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 59) 15:08:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:42 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080), 0xffffffffffffffff, 0x200) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/2742], 0xab6) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3c00) [ 452.612842][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 452.619636][ T7307] Bluetooth: hci6: command tx timeout 15:08:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x10, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 452.769374][ T27] audit: type=1804 audit(1658848122.193:169): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/377/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:08:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:42 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080), 0xffffffffffffffff, 0x200) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/2742], 0xab6) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_open_dev$midi(&(0x7f0000000080), 0xffffffffffffffff, 0x200) (async) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/2742], 0xab6) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) [ 453.174509][ T27] audit: type=1804 audit(1658848122.603:170): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/378/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:08:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6f, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:42 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_open_dev$midi(&(0x7f0000000080), 0xffffffffffffffff, 0x200) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/2742], 0xab6) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 453.592482][ T27] audit: type=1804 audit(1658848123.013:171): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/379/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 453.653094][ T7308] Bluetooth: hci7: command 0x1003 tx timeout [ 453.659327][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400448c9, &(0x7f0000000040)=0x1d) 15:08:43 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x10000, 0x0, 0x10001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRESOCT=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x57, 0x50, 0xfe, r6}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 453.949291][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888075058400: rx timeout, send abort [ 453.959253][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888075058400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 454.069149][ T27] audit: type=1804 audit(1658848123.493:172): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/487/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 15:08:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x10, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00) 15:08:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:44 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x10000, 0x0, 0x10001}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 32) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async, rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRESOCT=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x57, 0x50, 0xfe, r6}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x3}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 60) [ 454.692882][ T7307] Bluetooth: hci6: command 0x1003 tx timeout [ 454.692939][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 454.831706][ T27] audit: type=1804 audit(1658848124.253:173): pid=11225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/380/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 15:08:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x71, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:44 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x10000, 0x0, 0x10001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRESOCT=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x57, 0x50, 0xfe, r6}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x10000, 0x0, 0x10001}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRESOCT=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x57, 0x50, 0xfe, r6}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x3}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) [ 455.261967][ T27] audit: type=1804 audit(1658848124.683:174): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/381/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 15:08:45 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r3 = signalfd(r1, &(0x7f0000000080)={[0x9ac]}, 0x8) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="0f013e0e00f08097ef920026260fc76b4ac6f8ad707fea00009400262ef26f0f01da0fe42df3f32ee500", 0x2a}], 0x1, 0x40, &(0x7f00000001c0)=[@efer={0x2, 0x1001}, @flags={0x3, 0x148000}], 0x2) r4 = signalfd(r2, &(0x7f0000000200)={[0x6]}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="f30fc776002e660f38827b01c4c2f147f9660fdaea66baf80cb88000e184ef66bafc0cb800300000ef66ba2100b010eeb9800000c00f3235001000000f3066ba6100ec0f205a360f01c5", 0x4a}], 0x1, 0x2a, &(0x7f0000000300)=[@cstype0={0x4, 0xe}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x72, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 455.766443][ T27] audit: type=1800 audit(1658848125.193:175): pid=11236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1177 res=0 errno=0 15:08:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x10, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 455.846565][ T27] audit: type=1804 audit(1658848125.273:176): pid=11263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/382/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 15:08:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400448dd, &(0x7f0000000040)=0x1d) [ 455.892894][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x4000) [ 455.979950][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888021df6800: rx timeout, send abort [ 455.988760][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888021df6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 456.016775][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 456.024117][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 61) 15:08:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400454ca, &(0x7f0000000040)=0x1d) 15:08:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x73, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:46 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) r3 = signalfd(r1, &(0x7f0000000080)={[0x9ac]}, 0x8) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="0f013e0e00f08097ef920026260fc76b4ac6f8ad707fea00009400262ef26f0f01da0fe42df3f32ee500", 0x2a}], 0x1, 0x40, &(0x7f00000001c0)=[@efer={0x2, 0x1001}, @flags={0x3, 0x148000}], 0x2) (async) r4 = signalfd(r2, &(0x7f0000000200)={[0x6]}, 0x8) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="f30fc776002e660f38827b01c4c2f147f9660fdaea66baf80cb88000e184ef66bafc0cb800300000ef66ba2100b010eeb9800000c00f3235001000000f3066ba6100ec0f205a360f01c5", 0x4a}], 0x1, 0x2a, &(0x7f0000000300)=[@cstype0={0x4, 0xe}], 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 456.852838][ T7307] Bluetooth: hci6: command 0x1003 tx timeout [ 456.863032][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 456.966546][ T27] audit: type=1804 audit(1658848126.393:177): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/489/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 457.033894][ T27] audit: type=1804 audit(1658848126.453:178): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/383/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 457.061358][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 457.069357][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 62) 15:08:46 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r3 = signalfd(r1, &(0x7f0000000080)={[0x9ac]}, 0x8) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="0f013e0e00f08097ef920026260fc76b4ac6f8ad707fea00009400262ef26f0f01da0fe42df3f32ee500", 0x2a}], 0x1, 0x40, &(0x7f00000001c0)=[@efer={0x2, 0x1001}, @flags={0x3, 0x148000}], 0x2) (async) r4 = signalfd(r2, &(0x7f0000000200)={[0x6]}, 0x8) (async, rerun: 32) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="f30fc776002e660f38827b01c4c2f147f9660fdaea66baf80cb88000e184ef66bafc0cb800300000ef66ba2100b010eeb9800000c00f3235001000000f3066ba6100ec0f205a360f01c5", 0x4a}], 0x1, 0x2a, &(0x7f0000000300)=[@cstype0={0x4, 0xe}], 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:46 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b8010000000f01c1f30f01eac4e1f173f7e9660f5f4499040f06440f20c03505000000440f22c0c7442400ed250000c744240200000000c7442406000000000f011c240fc71d900000002e660f3882280f01c3", 0x53}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) 15:08:46 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x5900) [ 457.349310][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880203c2400: rx timeout, send abort [ 457.360381][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880203c2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x74, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:47 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b8010000000f01c1f30f01eac4e1f173f7e9660f5f4499040f06440f20c03505000000440f22c0c7442400ed250000c744240200000000c7442406000000000f011c240fc71d900000002e660f3882280f01c3", 0x53}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b8010000000f01c1f30f01eac4e1f173f7e9660f5f4499040f06440f20c03505000000440f22c0c7442400ed250000c744240200000000c7442406000000000f011c240fc71d900000002e660f3882280f01c3", 0x53}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) 15:08:47 executing program 1: syz_open_procfs(0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b8010000000f01c1f30f01eac4e1f173f7e9660f5f4499040f06440f20c03505000000440f22c0c7442400ed250000c744240200000000c7442406000000000f011c240fc71d900000002e660f3882280f01c3", 0x53}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_NMI(r2, 0xae9a) 15:08:47 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="2e0f01cbc74424000b010000c744240208000000ff1c24c4a1fde68d7f9a0000c4827d30203e640f798cb3f1000000f3440f5360f43e643ef30f0966430f38815b7f360f2a86cb0000000f07", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 458.569888][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 458.569904][ T27] audit: type=1804 audit(1658848127.993:180): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/490/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 458.605626][ T27] audit: type=1800 audit(1658848127.993:181): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1174 res=0 errno=0 [ 458.697582][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801bccdc00: rx timeout, send abort [ 458.706162][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801bccdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000040)=0x1d) 15:08:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:48 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="2e0f01cbc74424000b010000c744240208000000ff1c24c4a1fde68d7f9a0000c4827d30203e640f798cb3f1000000f3440f5360f43e643ef30f0966430f38815b7f360f2a86cb0000000f07", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 459.012973][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 459.014121][ T7308] Bluetooth: hci6: command 0x1003 tx timeout [ 459.145388][ T27] audit: type=1804 audit(1658848128.573:182): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/385/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 459.194431][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 459.201598][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:08:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 63) 15:08:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:48 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x40000) 15:08:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000040)=0x1d) [ 459.332848][ T3683] Bluetooth: hci7: command 0x1003 tx timeout [ 459.342776][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x76, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:49 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="2e0f01cbc74424000b010000c744240208000000ff1c24c4a1fde68d7f9a0000c4827d30203e640f798cb3f1000000f3440f5360f43e643ef30f0966430f38815b7f360f2a86cb0000000f07", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 459.912857][ T27] audit: type=1804 audit(1658848129.333:183): pid=11362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/386/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 15:08:49 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x402841, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r1, 0x20, &(0x7f0000000080)="0ed8613a7c43b4505166aa66c179f592cbdf31c8f64a145d58ca26f8c68690dd0128cc47e46cfa01221f517d") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x800) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) r6 = eventfd2(0x0, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000001c0)={0x5000, &(0x7f0000000180), 0x8, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) 15:08:49 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x402841, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl(r1, 0x20, &(0x7f0000000080)="0ed8613a7c43b4505166aa66c179f592cbdf31c8f64a145d58ca26f8c68690dd0128cc47e46cfa01221f517d") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x800) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) (async, rerun: 32) r6 = eventfd2(0x0, 0x1) (rerun: 32) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000001c0)={0x5000, &(0x7f0000000180), 0x8, r6}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) 15:08:49 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x402841, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r1, 0x20, &(0x7f0000000080)="0ed8613a7c43b4505166aa66c179f592cbdf31c8f64a145d58ca26f8c68690dd0128cc47e46cfa01221f517d") (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x800) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) (async) r6 = eventfd2(0x0, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000001c0)={0x5000, &(0x7f0000000180), 0x8, r6}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) 15:08:49 executing program 1: getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3f, 0x18}, &(0x7f0000000200)=0xc) syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) r6 = dup(0xffffffffffffffff) bind$bt_hci(r6, &(0x7f0000000080), 0x6) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x11e8, 0x33, 0x400, 0x70bd28, 0x25dfdbfe, {0xd}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="5bab798422d6b14834a46d7525a6a3c59c1a835335dc2374c509d642ad5bd634b910a41466fab22f4438d096512a", @nested={0x115f, 0x7f, 0x0, 0x1, [@generic="6eef7cde9c76dafb28b64f1d91f4938763c48214b5071a2fd7e0fc0e43788501532d695174b5e09ae3b61b46d42399c973d316c112d1419312c3d1ae76f2f055109e0c55f26ece176cd274542df9130b809258be10044449fc8a8f", @generic="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", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x7}, @generic="1e474f9fc63ec20ec1566e2acb5b787acc7ab8f0bc67c0b7fefc11d5b5bb16a57bb09efb96d2f0afef3a90355f101b02d211ef19c9d14e9a4ee16d13e105922f9497a166c151409e7103fd9bcd33981dd7b1903f64535407c59cbdfddd2bd61a2603768f89f20c48189e5f018d86334a1d041837d76085d52f1bd1", @generic="ff87582f1eeb9a7a2b523c1020b54dd7411cd28eebd3fe1a673420683a65812d5c99b6db927fed51c0ad2b1905963331a804b9073f3bbf660e54a04ca965b6a420c32e032b763d35e63d7cea9a7a650ce7774ed4e6bd9e0c1bd439394cced1ab4ee652355b3e8025d142e8f61f163aa9f5433005f9243cb6803d99b347"]}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xd, 0x5, 0x0, 0x0, @str='/dev/kvm\x00'}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 460.488196][ T27] audit: type=1800 audit(1658848129.913:184): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1174 res=0 errno=0 15:08:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:08:49 executing program 1: getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3f, 0x18}, &(0x7f0000000200)=0xc) syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) r6 = dup(0xffffffffffffffff) bind$bt_hci(r6, &(0x7f0000000080), 0x6) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x11e8, 0x33, 0x400, 0x70bd28, 0x25dfdbfe, {0xd}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="5bab798422d6b14834a46d7525a6a3c59c1a835335dc2374c509d642ad5bd634b910a41466fab22f4438d096512a", @nested={0x115f, 0x7f, 0x0, 0x1, [@generic="6eef7cde9c76dafb28b64f1d91f4938763c48214b5071a2fd7e0fc0e43788501532d695174b5e09ae3b61b46d42399c973d316c112d1419312c3d1ae76f2f055109e0c55f26ece176cd274542df9130b809258be10044449fc8a8f", @generic="ff80bcfeb5b6f0186f4da23d884e40efd295eb0027e08da4ce0cb56c4e37c66dadbbfe548024d140349e7c6077b2d52f0c36aa96be7dc10a407e042e62821c509be3b1e1e07ef4ad6a9e501fb6863cd1f6a76fcaa3c2352e06ffac8fbbbf3ea25f4f36040e85873d010381afa64fc3b4d953d5a8009024b05fc87b372af549397d1e499771a041e6fb8f83be242f4eadc0e1fbd4d5b58428df1c3e27d84dd673cac54a69b297bc7d98ddbb5596bb83bbcb56dc904d788921ebd8540363c517dfafbe79240bdcb4b0ddf434ea4dc0283403bd0e163db29804ee29f3e1850db57e088c4487aa5032da43e19fe68979e3665b8372749572444c7c9ed9fc67367985d925f69fa7d3cf9cdef44118ca14ad7e4ac94d08ee37c0792d4f729ae1c1a3853e61835bd69e76d3d833306c363a5bfa958cf93ab41058ef859cf60ba229e6a02105851e5af893bfbd02e107186d9a3107eddb9c63419f330a7e64915e67576121d0afd6337c7e61a16a1532037a4b60e9a595ba2b9ad17fd1776a42baf594de0b2b6ab7a21697013f9e527adf66346cf8163a6db9707884542497b7d653c0ae0713172ff3f0a251669c2e50442af62c9740b03386786639b0bbd6ed17afed7cc2eee4cfcfdf82b87d9751d9253a776013542bef4ab180794cf877871f2ae49cfa0d9451c39889cdbeffce08487fbfe4c2405cdad9d5605d104db19b4bd699dec2c972ef5332e91e48a4552819f92b0d0d3dea78b45cdbeaccb6d53d270e8c337f9ef7b65a62eca01410068de1b6e53c4eb1349a1de86fb866eaf6021aac2c4c50a62b0690a77f2707f26f6b60cf22faaca198dedc6afcd809b98c71cf5e1a99b1c3ec9153535a0e80adbbeddf9e5629f70dd1d7b7c1204c6d56d6636ac9e8f91ce7fa16defdda061d4dd8e1f58f25a114b6c229356320d87f43cdb5fdfcb7cf4faaf81aebae1ee223a4434e3d1325b75577debaf1281fa951132bea0f82cc567bcd44bfb90eb5673c326b7c3dda63c6d09897e55ff38fe280f8cf7cce6f73f47f5deb9d908c987c09cfb69bb76ed8a47df5e1690748c069eafd26a7561ef28aaa0daa0e729652f93bcba34857cf9165359e59c068dd54d5f69ca8b8ee31d8dacb8762f555680db9de00a022fe4f428ff08eb53469f266daca08f28c9a9634edc99239dfea50c2b29a05d1807bfe1387cfc31bc078d4f4fbc6e1eed6a1da55fc20a2413fb1ac07dbcc4ad156857ddd6463ffccdac813cd885ef2479dae8223948b7a68a8752d94f8809ec20c9dc6c47d851622af2636ed60a214597a0adc3047a69ad51c21c823ddda614ae522972dbebd2b475b5c8ae129618735a1b595744787054d11366f8ac01366462f645be2b6fc118870598b8d87dea7752672d1b86ff23a4f3afbf7f5cf81d273afe302db6c0bb9cba50e0810eca0a0868def771ce0b89524d45aa9992706184d6bd14c4a89ca5b403087d8cf03b511b9baf7454b5454196d289feb95d16c4875cdf36591ec2ef776ada7d6e159b15588bf4de2ec3d9c85e079ccf2bf25d998103a0c5a7af62e266d13b54aaed3004ca11d5615ddd55141b36ef262f33ca01b0a07cfcde762390b1bf59c8d96d391a288f96512b05c035ab5263db4b4e2996580285394be7146c0158690e5e6fae376a0ddb9ca121523b01cb257a65ef453127fba4a2dd7dce83e78b1861da02c9666d21a433d31df82aabc9aafb79961d61d7415400bbe6c5459dc05d357bcf817e9cab1f94d54ff9df627666d3491abd5b6896ab59773cd25b563859e1bcf75124e8870ab9ad22a1603d4b6532deb3391e4eec4a0142e7257964f15fd7953ea3b32025ded9ea3c6570f1afa3e3c3f0c36208ef7955b0c1becebfecc1b2fcd15ca3bc5443c675a104a1a9506393f53eb2967f13f2e268669327eefe7c18d5ca922003f6758ffe42503d834e0a90744e99fa394f8ece87a1273aa021b4c4637e9d948d4f838a8a8b3e99c00715daa4675d432c58648a8a2a0ebb88e1e19a48f7eea8bf11abf878188047fa0ffd6539780ffb4f71bdccc52e2d83e7195874ba124d641e821949f29f77f2a7e2a5e8df96d7668bd589721a294de4f8585ad7d40f7541dba239763a04ae7bd015232674f3d96daf66777becad915c0a54e9d5a9534c02f319446e6de1967fad1854ec1f8aad65c33aa08d9598f555d5f304134564cbbc785a35a155cb677a5a88685873a6651816167b8d0559fd7df807485ccc41eb4ab4600c84ecafe563c25fac411fe4ee83deba84618d366c915bfa30f492cf48bb0f4e0b74b063efe565249905bb462c2706b11b3a389af804409bcb8790af9fb595e8c3d383dce2ce1d3a106e218a4324f16c75eca95d6aa6049a8483f03f8ca5cf2126834e53f26cb315a11d9c96917fbc6fd753a7eb0ae7293554a842697cca0d14e30b9a1a3248cad64f77a88423fe049b8ef7c0163029a201bb7f5618a0fff61226a477da5ee9375c239615fd95cd4460eb756d5e60afc439237196232b336b8af328ad3ee8a3173fcf4fb4fe8463fe97bc11dc2c758e0ac57a3efed8f10a97677e839b8db3a12f80fe8da962c692fdcc6af1981b01053aa7bdd427f52501b325bb40dcff296fe46eda8167799d53d16fc983b1befb3bac2c3159386109d70ae96421942e96a9dcb12d1fa7dbdd87a7595f5e6bd5ed54e6c50c3e446f094c4ce59b05769e0bf9a3e47f9f885401a8950f3e849532aba2baeefd0d4f8e2e0f793532eb8dadff13f6682e89b2a2d5fbc9c2039ef9e17bd15b2f3e86e83ec6957621efd595f8289e3523c5c8e6dc53b6199be36aacc154e26a7faab2e63618b13d88261972febff030b7ec5fe6a35bcd485aaca0ce8695d7db28f66c9e04a654eef059539deda66aafb19e5ce9961e7ab52957b846cac2dfcc6fa489620252a2f617e1aeb1541f2d60a0ae59c5d64f8ce020e988acd962abf98a58c29d2ea4a245374295063696d12a6dde32d7f162c4783aa1a7fe6e4b33c4de3483d4a37c806d25ce2775582ea853f10850e3e5d6dd01bb66f9ca99847cace0d47274738855e1ecfab519c34037dd4f1d8fe4a9771f62c872905f740c03f0ec414bd163aec608a1941b248aa66df257200cf23e020cba0da6b011fa4f4b1e376cc158fb6de549d536b3f2d9d6d105f434e9dd1455dd56816c28609dfc6929f0bb56788691e99eed6f67379f8f621c7aedcc3d296b1a2db364cf66eda4b48ac53bdc9f63592aee7eedfb04b0e348fd8c4682f32f7452b4c643f14ea8c4df900459d0b666602b9f9834f1d279038db60bd74d0d85f0574e850fa1c4e18dc12f2c20047276c635af16c55162fbc2aa081d207ec022fbf91320bcaff376e65b1a4ddf6455f334de5f6b534ee6d7116263941df97269177b282937aa53fae6396dde2ff729e4f06e34803f02777e3ab3fd9b7e7dd54b1686224cee82d02ad88aef9b23358509bb2a452e094f9f88d3f062db7da8b57ec78025c22555da2fc6429a33a0686dfc051ce61e2f3aeeb8942c0c3b47049d3673053ea9239289d03ebd9602227948d660a2c2f196e2b67c87a05da98033ba8a2f36f8cd61f4a9e3323a4109883d4a5b28d44f50aef27d65f1ab2cb95efe8f656f12ecf20dd7dc70924e782c032eb1c9c4ea84a49be9e96736f9f365cd40bd1a1c79b772f2d1b3376b6e0d50cecd8326473def749e72a074d1ce890b7c06a7ce341e804bc793d7f8d3adc2fe79be836687daf97c745a9da9e1961ca89ac90a647de9f7a723aa19b9b6ddc2081d7ffbd51c0d8309d7e90e731846da1c27e5cd6961d09f1e18dbdbea2a243e466e0b9c89fd5bcd64d1e4c9670bf2e8cdcdfb36e7ce2364e6d607bddabc98cea75f525c320f34a5f3f9aaae08c81a339284944e34c916d85d17f9c47325410cd0adcb88258c54e2395e4d65da180c0cb3920722cfe5d36b3581e656b270889c9ef551a7594027d88ce8867f4041349161067a6b5c67d2d1f610b0fcccb10fd2897aa7e9ed5ab8e813a600b1a3519832bd15d03317a71b7bf0dcfc87e5d060fabebc35c75f03ab5726da3a71329977e8fb2cfbe6ee3064f15444055045296c83c4e80b79f0f9229d6e36cc54cb41c12a09817cddf7c94ca14d6db2f36279819a7689512f6a900d722c98f6232d476ce9a9452b05fc3c5a8282ab9cca8c3437730a109a5c939f00f7547f7bd7ae8432415ec53e3e9883007c7a14d55bafb21630c82213fe6bb62d9eb835bceedf3d202cec90d1bb63bd275dddae5d95843235e85389be793ea30d97075f9f680f2712ec8b5e83069eabaea1c0cc2e783e6507a72ff91710edfa3af17485117f2ab2e3540a47bad06ed975fa0dd2b2a64582eb6841d9747670694df101310f7980e8bd4b299e17de6cf289521bb63fe0e060f7aa65366eb6a3ba6a0d02d383691f963e1a7ae266cff685fc78c91b741da37cea81612867571fc28fc59046b17b51f04615d2b36760d913d624ab36133ce709c9fd2d38334692e25df13d37572a3a6c7ce757b7467b4be44770750e4c3d8e9b44cda876c8515d2a1bcf21055c11ac4abd42ef10b86890b22f5cbef85774ab4c5730cb0d48a4b6637c8cf0c4a27f4d45cecedb813c786c55bdc4b2624f6695ad0f384a5c8ca6c771303125c6acc0addb1c4210495717eb1f322bbfe33b89923365694a86fb0d03ea790383b5859574215dc5651b200eef115f11c78c42fc3bc3718ab35ca3ecdf937f69f3a880bb7e5fc67dfcd617a94f8731ab18fb05729ed1f59df8e5164d5ac1e4c2b0591c0a08fc6dab3c7c692e9c7725af9ef93a45e99822dd0fdc89c0102e6e89614f9ab46ed80e5b87eb83b3bef2a485e651437e2c51c2df907aad54cb81fbf9cabbf7c69e8f4c77030d7b5aedbe6e5ece39bf4cfaab572b939d8e957ee74b7e5abf7f8ed6f6743feaa45db691c22b60032655a14b08de722aea8ab951c35f8d937b5d22c67c7650b247eb407e0304c9eab3c814e8ced035583cb0971879d7ea5db8856cae0296b87d756288d32203c2ecc2912904e54e1662ba95eab6ec06969b2bbaea0dc474c42e88c583801466e328591135479a6215e779099bc50ca01747846b12395bf06e1b8518179a06e15d08413e04eda4481a07ab4f464c4d2e48fab86304a9a1be70fc7bfba4f90963b58edec14a7f00938da4538d4718c768aa24b06854f8ccfc3d14baacf8a986186c6c13f5e0474a404024fc52042d0cf3b5b6e5cad466e99cfc6db8590a5754e417a00a9cd8278629a1bd61b41f0547bb712241a2ded328c5d21e0a6d752b7b600489cedd230bb187e56841fb7d792197bbb6c4a1a791912eb135925b63cd37e7fac3a6b8442c8079a398f58e7e32dbf441f141ddf27165a637fc9ea7fc8b6fea4ce8a9e603f7f2c03f2f45c6cfa2fee124c838d43d73b2382d272b2336acd648b58ef2a0663655054fc1773d8bf70c9157b7dad85e8b16593da723f165e182c1527996fb00bf48843abaa83bdf88da381713b501ebeff9f668636ec32a558e78de2c363205380f0b0907f788ff9f621ce76b1474457bccc5f898c4626c5877e9302677bca4287a47af99b8a77c8c28f01c14ecdf64300dc84d264ca5a18b6ea80cb0bc6859a65c8795d173f5a3dc3c179470bc1495c48531661e169050863ae75a6a6c978c6705f5c5ae97da7d938a04c14424734c0b1a1d0fd0ec05ba601da77e0cfa42ce096460bf2bd2f716e5c921b2b6bb7d46c379077cb114406c2c912ac28bb09ec8add88149d58b3426d3c6de450c6838bd0a7", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x7}, @generic="1e474f9fc63ec20ec1566e2acb5b787acc7ab8f0bc67c0b7fefc11d5b5bb16a57bb09efb96d2f0afef3a90355f101b02d211ef19c9d14e9a4ee16d13e105922f9497a166c151409e7103fd9bcd33981dd7b1903f64535407c59cbdfddd2bd61a2603768f89f20c48189e5f018d86334a1d041837d76085d52f1bd1", @generic="ff87582f1eeb9a7a2b523c1020b54dd7411cd28eebd3fe1a673420683a65812d5c99b6db927fed51c0ad2b1905963331a804b9073f3bbf660e54a04ca965b6a420c32e032b763d35e63d7cea9a7a650ce7774ed4e6bd9e0c1bd439394cced1ab4ee652355b3e8025d142e8f61f163aa9f5433005f9243cb6803d99b347"]}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xd, 0x5, 0x0, 0x0, @str='/dev/kvm\x00'}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3f, 0x18}, &(0x7f0000000200)=0xc) (async) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) dup(0xffffffffffffffff) (async) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x11e8, 0x33, 0x400, 0x70bd28, 0x25dfdbfe, {0xd}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="5bab798422d6b14834a46d7525a6a3c59c1a835335dc2374c509d642ad5bd634b910a41466fab22f4438d096512a", @nested={0x115f, 0x7f, 0x0, 0x1, [@generic="6eef7cde9c76dafb28b64f1d91f4938763c48214b5071a2fd7e0fc0e43788501532d695174b5e09ae3b61b46d42399c973d316c112d1419312c3d1ae76f2f055109e0c55f26ece176cd274542df9130b809258be10044449fc8a8f", @generic="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", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x7}, @generic="1e474f9fc63ec20ec1566e2acb5b787acc7ab8f0bc67c0b7fefc11d5b5bb16a57bb09efb96d2f0afef3a90355f101b02d211ef19c9d14e9a4ee16d13e105922f9497a166c151409e7103fd9bcd33981dd7b1903f64535407c59cbdfddd2bd61a2603768f89f20c48189e5f018d86334a1d041837d76085d52f1bd1", @generic="ff87582f1eeb9a7a2b523c1020b54dd7411cd28eebd3fe1a673420683a65812d5c99b6db927fed51c0ad2b1905963331a804b9073f3bbf660e54a04ca965b6a420c32e032b763d35e63d7cea9a7a650ce7774ed4e6bd9e0c1bd439394cced1ab4ee652355b3e8025d142e8f61f163aa9f5433005f9243cb6803d99b347"]}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xd, 0x5, 0x0, 0x0, @str='/dev/kvm\x00'}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c001) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x8}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 15:08:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000) [ 460.659324][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880207e4000: rx timeout, send abort [ 460.672880][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880207e4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 461.356579][ T27] audit: type=1804 audit(1658848130.783:185): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/492/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 15:08:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 64) 15:08:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x7a, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 461.492941][ T143] Bluetooth: hci7: command 0x1003 tx timeout [ 461.493029][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 461.505426][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 461.506087][ T143] Bluetooth: hci6: command 0x1003 tx timeout 15:08:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x40186366, &(0x7f0000000040)=0x1d) 15:08:50 executing program 1: getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3f, 0x18}, &(0x7f0000000200)=0xc) syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) r6 = dup(0xffffffffffffffff) bind$bt_hci(r6, &(0x7f0000000080), 0x6) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x11e8, 0x33, 0x400, 0x70bd28, 0x25dfdbfe, {0xd}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="5bab798422d6b14834a46d7525a6a3c59c1a835335dc2374c509d642ad5bd634b910a41466fab22f4438d096512a", @nested={0x115f, 0x7f, 0x0, 0x1, [@generic="6eef7cde9c76dafb28b64f1d91f4938763c48214b5071a2fd7e0fc0e43788501532d695174b5e09ae3b61b46d42399c973d316c112d1419312c3d1ae76f2f055109e0c55f26ece176cd274542df9130b809258be10044449fc8a8f", @generic="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", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x7}, @generic="1e474f9fc63ec20ec1566e2acb5b787acc7ab8f0bc67c0b7fefc11d5b5bb16a57bb09efb96d2f0afef3a90355f101b02d211ef19c9d14e9a4ee16d13e105922f9497a166c151409e7103fd9bcd33981dd7b1903f64535407c59cbdfddd2bd61a2603768f89f20c48189e5f018d86334a1d041837d76085d52f1bd1", @generic="ff87582f1eeb9a7a2b523c1020b54dd7411cd28eebd3fe1a673420683a65812d5c99b6db927fed51c0ad2b1905963331a804b9073f3bbf660e54a04ca965b6a420c32e032b763d35e63d7cea9a7a650ce7774ed4e6bd9e0c1bd439394cced1ab4ee652355b3e8025d142e8f61f163aa9f5433005f9243cb6803d99b347"]}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xd, 0x5, 0x0, 0x0, @str='/dev/kvm\x00'}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3f, 0x18}, &(0x7f0000000200)=0xc) (async) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) dup(0xffffffffffffffff) (async) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x11e8, 0x33, 0x400, 0x70bd28, 0x25dfdbfe, {0xd}, [@typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="5bab798422d6b14834a46d7525a6a3c59c1a835335dc2374c509d642ad5bd634b910a41466fab22f4438d096512a", @nested={0x115f, 0x7f, 0x0, 0x1, [@generic="6eef7cde9c76dafb28b64f1d91f4938763c48214b5071a2fd7e0fc0e43788501532d695174b5e09ae3b61b46d42399c973d316c112d1419312c3d1ae76f2f055109e0c55f26ece176cd274542df9130b809258be10044449fc8a8f", @generic="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", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x7}, @generic="1e474f9fc63ec20ec1566e2acb5b787acc7ab8f0bc67c0b7fefc11d5b5bb16a57bb09efb96d2f0afef3a90355f101b02d211ef19c9d14e9a4ee16d13e105922f9497a166c151409e7103fd9bcd33981dd7b1903f64535407c59cbdfddd2bd61a2603768f89f20c48189e5f018d86334a1d041837d76085d52f1bd1", @generic="ff87582f1eeb9a7a2b523c1020b54dd7411cd28eebd3fe1a673420683a65812d5c99b6db927fed51c0ad2b1905963331a804b9073f3bbf660e54a04ca965b6a420c32e032b763d35e63d7cea9a7a650ce7774ed4e6bd9e0c1bd439394cced1ab4ee652355b3e8025d142e8f61f163aa9f5433005f9243cb6803d99b347"]}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xd, 0x5, 0x0, 0x0, @str='/dev/kvm\x00'}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c001) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x8}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 15:08:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 461.645389][ T27] audit: type=1804 audit(1658848131.073:186): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/387/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 15:08:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x7b, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x400000) [ 461.976997][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807a6dd800: rx timeout, send abort [ 461.985705][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807a6dd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 462.117792][ T27] audit: type=1804 audit(1658848131.543:187): pid=11427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/388/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:08:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x7c, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:52 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) syz_clone3(&(0x7f0000000340)={0x2a1082000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x38}, &(0x7f00000001c0)=""/3, 0x3, &(0x7f0000000200)=""/228, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r0}}, 0x58) close_range(r0, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = dup(0xffffffffffffffff) bind$bt_hci(r4, &(0x7f0000000080), 0x6) r5 = io_uring_setup(0xd74, &(0x7f0000000140)) r6 = io_uring_setup(0xd74, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x9, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd=r4, 0xb642, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000440)=""/236, 0xec}], 0x2, 0x6, 0x1, {0x0, r7}}, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 462.701457][ T27] audit: type=1804 audit(1658848132.123:188): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/389/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 15:08:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x0, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 463.096511][ T27] audit: type=1804 audit(1658848132.523:189): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/496/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 463.341244][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888076444000: rx timeout, send abort [ 463.349865][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888076444000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 65) 15:08:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 463.652855][ T7308] Bluetooth: hci6: command 0x1003 tx timeout [ 463.652998][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:08:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x401c5820, &(0x7f0000000040)=0x1d) 15:08:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x80ffff) 15:08:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x0, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:53 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) syz_clone3(&(0x7f0000000340)={0x2a1082000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x38}, &(0x7f00000001c0)=""/3, 0x3, &(0x7f0000000200)=""/228, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r0}}, 0x58) close_range(r0, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = dup(0xffffffffffffffff) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) r5 = io_uring_setup(0xd74, &(0x7f0000000140)) (async) r6 = io_uring_setup(0xd74, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x9, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd=r4, 0xb642, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000440)=""/236, 0xec}], 0x2, 0x6, 0x1, {0x0, r7}}, 0x8) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 463.735514][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 463.806197][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 463.813591][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 463.830667][ T27] audit: type=1804 audit(1658848133.253:190): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/390/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 15:08:53 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) syz_clone3(&(0x7f0000000340)={0x2a1082000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x38}, &(0x7f00000001c0)=""/3, 0x3, &(0x7f0000000200)=""/228, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r0}}, 0x58) close_range(r0, r1, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = dup(0xffffffffffffffff) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) r5 = io_uring_setup(0xd74, &(0x7f0000000140)) (async) r6 = io_uring_setup(0xd74, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x9, 0x0, r7) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd=r4, 0xb642, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000440)=""/236, 0xec}], 0x2, 0x6, 0x1, {0x0, r7}}, 0x8) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 15:08:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x1d) [ 463.886389][ T27] audit: type=1804 audit(1658848133.313:191): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/497/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 15:08:53 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x341580, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x5, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x20, 0x9, 0x1}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:53 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x341580, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x5, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x20, 0x9, 0x1}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 464.075557][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 464.082858][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000040)=0x1d) 15:08:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x0, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 464.266280][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 464.273613][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 464.321085][ T27] audit: type=1804 audit(1658848133.743:192): pid=11486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/498/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 465.068571][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807f1cc000: rx timeout, send abort [ 465.077454][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807f1cc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 66) 15:08:55 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x341580, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x5, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x20, 0x9, 0x1}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:08:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1000000) 15:08:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000040)=0x1d) [ 465.812941][ T7307] Bluetooth: hci6: command 0x1003 tx timeout [ 465.826050][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 465.945759][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 465.953097][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 465.995764][ T27] audit: type=1804 audit(1658848135.423:193): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/391/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 15:08:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f0000000040)=0x1d) [ 466.029800][ T27] audit: type=1804 audit(1658848135.453:194): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/499/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 466.045691][T11500] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:08:55 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x9) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 466.174138][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 466.181415][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000040)=0x1d) 15:08:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 466.305642][ T3655] Bluetooth: hci7: sending frame failed (-49) [ 466.312926][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x801c581f, &(0x7f0000000040)=0x1d) [ 466.491401][ T27] audit: type=1804 audit(1658848135.913:195): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/392/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 466.491774][ T3655] Bluetooth: hci7: sending frame failed (-49) [ 466.526534][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:08:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000040)=0x1d) 15:08:56 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x9) (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) (async) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f0000000080)) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 467.156573][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807933b800: rx timeout, send abort [ 467.165088][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807933b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 67) 15:08:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x9) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpid() (async) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x9) (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) getpid() (async) sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r6) (async) bind$bt_hci(r7, &(0x7f0000000080), 0x6) (async) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f0000000080)) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 15:08:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2000000) [ 467.972884][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 467.974306][ T7308] Bluetooth: hci6: command 0x1003 tx timeout [ 468.067256][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 468.074957][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:08:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 68) [ 468.123689][ T27] audit: type=1804 audit(1658848137.553:196): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/500/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 468.185898][ T27] audit: type=1804 audit(1658848137.603:197): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/393/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:08:57 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x611db2368b70120e, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa00000f32e1f20f11baa0820f07276e05050f0966b8030000000f23c00f21f86635000008000f23f80f06", 0xfffffffffffffe79}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 468.281104][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 468.289883][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:08:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 69) 15:08:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 468.443708][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 468.450974][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:08:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 70) [ 468.571582][ T27] audit: type=1804 audit(1658848137.993:198): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/501/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 468.664401][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 468.672019][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 468.692938][ T14] Bluetooth: hci7: command 0x1003 tx timeout [ 468.705861][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:08:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000040)=0x1d) 15:08:58 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x611db2368b70120e, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa00000f32e1f20f11baa0820f07276e05050f0966b8030000000f23c00f21f86635000008000f23f80f06", 0xfffffffffffffe79}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:08:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 71) [ 468.836766][ T4698] Bluetooth: hci6: Frame reassembly failed (-84) 15:08:58 executing program 1: syz_open_procfs(0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x611db2368b70120e, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa00000f32e1f20f11baa0820f07276e05050f0966b8030000000f23c00f21f86635000008000f23f80f06", 0xfffffffffffffe79}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) [ 468.916966][ T27] audit: type=1804 audit(1658848138.343:199): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/394/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 15:08:58 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080), 0x6) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:08:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x6000000) 15:08:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:08:58 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080), 0x6) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r2) (async) bind$bt_hci(r3, &(0x7f0000000080), 0x6) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 15:08:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '|%.\\.!%:!%'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "17acfa6d797acb09e074b2a59c33dee0bff08bbe94e972b9351b4e23d09c2d5cd7d94f3c1104c0d83f2c2490ccbe21f83b203b18ce3cca4c3e17f4b0e0aea0a5a68893afb61868090c1b53ca8438fa17aedd4458611c6764b9bdcbd03a61653a790e800dfe0644f573f640b88c8b23f8f78f4ff1ea6032c0aacb8534c3ba710f094177bd11b18b821be94195ecd16d766139030db141e45eb18a6973f3dfb84bb2"}, 0xf5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 469.293913][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801e9a6400: rx timeout, send abort [ 469.302525][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801e9a6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:08:58 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080), 0x6) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:08:58 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x2, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, r2, 0x4, 0x49, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @NDA_PROBES={0x8, 0x4, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc008}, 0xc001) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 469.423956][ T27] audit: type=1804 audit(1658848138.853:200): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/502/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 469.489278][ T27] audit: type=1804 audit(1658848138.883:201): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/395/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 470.641347][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880725b9000: rx timeout, send abort [ 470.649943][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880725b9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000040)=0x1d) 15:09:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '|%.\\.!%:!%'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "17acfa6d797acb09e074b2a59c33dee0bff08bbe94e972b9351b4e23d09c2d5cd7d94f3c1104c0d83f2c2490ccbe21f83b203b18ce3cca4c3e17f4b0e0aea0a5a68893afb61868090c1b53ca8438fa17aedd4458611c6764b9bdcbd03a61653a790e800dfe0644f573f640b88c8b23f8f78f4ff1ea6032c0aacb8534c3ba710f094177bd11b18b821be94195ecd16d766139030db141e45eb18a6973f3dfb84bb2"}, 0xf5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '|%.\\.!%:!%'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "17acfa6d797acb09e074b2a59c33dee0bff08bbe94e972b9351b4e23d09c2d5cd7d94f3c1104c0d83f2c2490ccbe21f83b203b18ce3cca4c3e17f4b0e0aea0a5a68893afb61868090c1b53ca8438fa17aedd4458611c6764b9bdcbd03a61653a790e800dfe0644f573f640b88c8b23f8f78f4ff1ea6032c0aacb8534c3ba710f094177bd11b18b821be94195ecd16d766139030db141e45eb18a6973f3dfb84bb2"}, 0xf5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, r2, 0x0, 0x100000002) (async) [ 470.852948][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 470.932967][ T7289] Bluetooth: hci7: command 0x1003 tx timeout [ 470.933032][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 470.943968][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 470.957804][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:09:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 72) 15:09:00 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x2, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, r2, 0x4, 0x49, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @NDA_PROBES={0x8, 0x4, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc008}, 0xc001) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x2, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, r2, 0x4, 0x49, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @NDA_PROBES={0x8, 0x4, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc008}, 0xc001) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 15:09:00 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x7000000) 15:09:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000040)=0x1d) [ 470.972878][ T27] audit: type=1804 audit(1658848140.403:202): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/503/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 [ 471.106162][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 471.115877][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:09:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$KDADDIO(r0, 0x4b34, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) [ 471.147096][ T27] audit: type=1804 audit(1658848140.403:203): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/396/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 15:09:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '|%.\\.!%:!%'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "17acfa6d797acb09e074b2a59c33dee0bff08bbe94e972b9351b4e23d09c2d5cd7d94f3c1104c0d83f2c2490ccbe21f83b203b18ce3cca4c3e17f4b0e0aea0a5a68893afb61868090c1b53ca8438fa17aedd4458611c6764b9bdcbd03a61653a790e800dfe0644f573f640b88c8b23f8f78f4ff1ea6032c0aacb8534c3ba710f094177bd11b18b821be94195ecd16d766139030db141e45eb18a6973f3dfb84bb2"}, 0xf5) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:00 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x2, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, r2, 0x4, 0x49, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @NDA_PROBES={0x8, 0x4, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc008}, 0xc001) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:09:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:00 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080), 0x6) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 471.525955][ T27] audit: type=1804 audit(1658848140.953:204): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/504/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 471.565707][ T27] audit: type=1804 audit(1658848140.953:205): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/398/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 15:09:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, r2, 0x0, 0x100000002) (async) [ 471.998175][ T27] audit: type=1804 audit(1658848141.423:206): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/399/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 472.071396][ T27] audit: type=1804 audit(1658848141.493:207): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/505/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 472.230467][ T27] audit: type=1804 audit(1658848141.653:208): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/399/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 472.351808][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801fbe4400: rx timeout, send abort [ 472.362484][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801fbe4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 73) 15:09:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xc000000) [ 473.252855][ T143] Bluetooth: hci7: command 0x1003 tx timeout [ 473.262923][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 473.271526][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 473.285401][ T7289] Bluetooth: hci6: command tx timeout 15:09:02 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080), 0x6) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:09:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$KDADDIO(r0, 0x4b34, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r1) (async) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) ioctl$KDADDIO(r0, 0x4b34, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (async) 15:09:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0xb321d438) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r2, &(0x7f0000000000)="76509d57ff1ed0", 0x7, 0xd0, &(0x7f0000000100)={0xa, 0x4e20, 0x51, @dev={0xfe, 0x80, '\x00', 0x12}, 0xea2}, 0x1c) sendfile(r5, r2, 0x0, 0x100000002) 15:09:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:03 executing program 1: syz_open_procfs(0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080), 0x6) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:09:03 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="0f01370f01c266bad104ed670f01c3650fdeb10040000066ba410066edb866ed06960f23c00f21f835020000000f23f80fc7ad03000000f32ef20f300f01b83d380000", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0xb321d438) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r2, &(0x7f0000000000)="76509d57ff1ed0", 0x7, 0xd0, &(0x7f0000000100)={0xa, 0x4e20, 0x51, @dev={0xfe, 0x80, '\x00', 0x12}, 0xea2}, 0x1c) sendfile(r5, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0xb321d438) (async) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendto$inet6(r2, &(0x7f0000000000)="76509d57ff1ed0", 0x7, 0xd0, &(0x7f0000000100)={0xa, 0x4e20, 0x51, @dev={0xfe, 0x80, '\x00', 0x12}, 0xea2}, 0x1c) (async) sendfile(r5, r2, 0x0, 0x100000002) (async) 15:09:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180), 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 474.022738][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 474.022753][ T27] audit: type=1804 audit(1658848143.443:216): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/508/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 474.575182][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807a10e800: rx timeout, send abort [ 474.583664][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807a10e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 475.415751][ T14] Bluetooth: hci7: command 0x1003 tx timeout [ 475.416475][ T7308] Bluetooth: hci6: command 0x1003 tx timeout [ 475.427989][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 475.433908][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:09:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 74) 15:09:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0xb321d438) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r2, &(0x7f0000000000)="76509d57ff1ed0", 0x7, 0xd0, &(0x7f0000000100)={0xa, 0x4e20, 0x51, @dev={0xfe, 0x80, '\x00', 0x12}, 0xea2}, 0x1c) sendfile(r5, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0xb321d438) (async) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendto$inet6(r2, &(0x7f0000000000)="76509d57ff1ed0", 0x7, 0xd0, &(0x7f0000000100)={0xa, 0x4e20, 0x51, @dev={0xfe, 0x80, '\x00', 0x12}, 0xea2}, 0x1c) (async) sendfile(r5, r2, 0x0, 0x100000002) (async) 15:09:04 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="0f01370f01c266bad104ed670f01c3650fdeb10040000066ba410066edb866ed06960f23c00f21f835020000000f23f80fc7ad03000000f32ef20f300f01b83d380000", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180), 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x12000000) 15:09:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) ioctl$KDADDIO(r0, 0x4b34, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) [ 475.544763][ T9055] Bluetooth: hci6: Frame reassembly failed (-84) [ 475.560118][ T27] audit: type=1804 audit(1658848144.983:217): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/403/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 475.634859][ T27] audit: type=1804 audit(1658848145.063:218): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/403/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 15:09:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r3) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000000)) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) [ 475.674826][ T27] audit: type=1804 audit(1658848145.103:219): pid=11751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/509/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 475.702794][ T27] audit: type=1804 audit(1658848145.113:220): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/403/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 15:09:05 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="0f01370f01c266bad104ed670f01c3650fdeb10040000066ba410066edb866ed06960f23c00f21f835020000000f23f80fc7ad03000000f32ef20f300f01b83d380000", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:05 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x6f, 0x20, {{0x12, 0x4, 0x0, 0x34, 0x48, 0x66, 0x0, 0x40, 0x29, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x8, 0xe0, 0x0, 0x9, [0x0]}, @noop, @lsrr={0x83, 0x2b, 0x61, [@local, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @remote, @rand_addr=0x64010101, @broadcast, @remote, @loopback]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x5c, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {0x9, 0xc}, {0xfff9, 0x9}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x2e, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfq={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:09:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180), 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) dup(r3) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000000)) (async, rerun: 64) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) 15:09:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r3) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000000)) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r3) (async) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000000)) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) (async) [ 476.225140][ T27] audit: type=1804 audit(1658848145.653:221): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/510/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 476.777184][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e8fe000: rx timeout, send abort [ 476.785771][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e8fe000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 477.572845][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:09:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 75) 15:09:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) 15:09:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x6f, 0x20, {{0x12, 0x4, 0x0, 0x34, 0x48, 0x66, 0x0, 0x40, 0x29, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x8, 0xe0, 0x0, 0x9, [0x0]}, @noop, @lsrr={0x83, 0x2b, 0x61, [@local, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @remote, @rand_addr=0x64010101, @broadcast, @remote, @loopback]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x5c, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {0x9, 0xc}, {0xfff9, 0x9}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x2e, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfq={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r1) (async) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x6f, 0x20, {{0x12, 0x4, 0x0, 0x34, 0x48, 0x66, 0x0, 0x40, 0x29, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x8, 0xe0, 0x0, 0x9, [0x0]}, @noop, @lsrr={0x83, 0x2b, 0x61, [@local, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @remote, @rand_addr=0x64010101, @broadcast, @remote, @loopback]}]}}}}}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x5c, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {0x9, 0xc}, {0xfff9, 0x9}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x2e, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfq={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 15:09:07 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x18000000) 15:09:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$TIOCSETD(r5, 0x5437, &(0x7f0000000000)=0x1d) [ 477.653013][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 477.653141][ T14] Bluetooth: hci7: command 0x1003 tx timeout [ 477.792084][ T27] audit: type=1804 audit(1658848147.213:222): pid=11819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/511/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 477.846582][ T27] audit: type=1804 audit(1658848147.253:223): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/407/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:09:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x6f, 0x20, {{0x12, 0x4, 0x0, 0x34, 0x48, 0x66, 0x0, 0x40, 0x29, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x8, 0xe0, 0x0, 0x9, [0x0]}, @noop, @lsrr={0x83, 0x2b, 0x61, [@local, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @remote, @rand_addr=0x64010101, @broadcast, @remote, @loopback]}]}}}}}) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x5c, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {0x9, 0xc}, {0xfff9, 0x9}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x2e, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfq={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:09:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000100)) (async, rerun: 32) r4 = socket$inet6(0xa, 0x1, 0x84) (rerun: 32) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) 15:09:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) [ 478.163886][ T27] audit: type=1804 audit(1658848147.593:224): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/512/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 478.200150][ T27] audit: type=1804 audit(1658848147.593:225): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/408/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:09:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x5, 0x90, &(0x7f0000000100)="56959473bccd89810bb33cdbdd78ea95ed2092b7cbd0c4a2833603fe0ab6031b875df48f58e55d38b622113f77fb10a979838738da770b67dd643eef68544a356c1ab4684357c0d2056a1109c8f32dbc677645478bc4c1347fd7b33d3429b60a6b9fddee6db10c22a07a2a909cc741b4bfab69c4bb6682c80608f6d16dc900e81df32c8439c4508e8aac8593c49d479a", 0x0, 0x1}]}) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 478.996211][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888026315400: rx timeout, send abort [ 479.004728][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888026315400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 479.732980][ T14] Bluetooth: hci6: command 0x1003 tx timeout [ 479.732995][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:09:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (fail_nth: 76) 15:09:09 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0xc, 0x34, &(0x7f0000000140)="b1ae7e200e37437e60177534380e93c80ab25632e9180f11bbbcf045e87b7d386c7e1f58bfa4bc6e29decebb2afe82912b3ff0f22dc19f1020fd2e4d00b0e816f5e349024069ad2d72e0908dad9cbdda9dd20340b236d0228068de27db0005e462e6911b55c642514c6c0f019429d341bf72b70056ed97941278f8e7057a9476c6bf5259490c4104b1c594a13d0dc79aa2719f0399fb1bfcedaf8f27076c33bc39818adcc096a96e4cf99310ce0fdf940a4fc36bebe81c1e28dcd24d0c33e1d65507dfd36e4d44ac052ed4060e819572df", {0xfffff058, 0x7ff, 0x3247504d, 0x8, 0x7b, 0xf28, 0x3, 0x6}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f000001b000/0x9000)=nil, 0x9000}, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:09:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x5, 0x90, &(0x7f0000000100)="56959473bccd89810bb33cdbdd78ea95ed2092b7cbd0c4a2833603fe0ab6031b875df48f58e55d38b622113f77fb10a979838738da770b67dd643eef68544a356c1ab4684357c0d2056a1109c8f32dbc677645478bc4c1347fd7b33d3429b60a6b9fddee6db10c22a07a2a909cc741b4bfab69c4bb6682c80608f6d16dc900e81df32c8439c4508e8aac8593c49d479a", 0x0, 0x1}]}) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x5, 0x90, &(0x7f0000000100)="56959473bccd89810bb33cdbdd78ea95ed2092b7cbd0c4a2833603fe0ab6031b875df48f58e55d38b622113f77fb10a979838738da770b67dd643eef68544a356c1ab4684357c0d2056a1109c8f32dbc677645478bc4c1347fd7b33d3429b60a6b9fddee6db10c22a07a2a909cc741b4bfab69c4bb6682c80608f6d16dc900e81df32c8439c4508e8aac8593c49d479a", 0x0, 0x1}]}) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, r2, 0x0, 0x100000002) (async) 15:09:09 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1e000000) 15:09:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$TIOCSETD(r5, 0x5437, &(0x7f0000000000)=0x1d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r1) (async) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r3) (async) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) ioctl$TIOCSETD(r5, 0x5437, &(0x7f0000000000)=0x1d) (async) [ 479.812984][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 479.898495][ T8970] Bluetooth: hci6: Frame reassembly failed (-84) [ 479.939518][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 479.939533][ T27] audit: type=1804 audit(1658848149.363:229): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/514/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 479.943755][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 479.963533][T11870] FAULT_INJECTION: forcing a failure. [ 479.963533][T11870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.974175][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 479.998225][ T27] audit: type=1804 audit(1658848149.423:230): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/411/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 480.029010][T11870] CPU: 1 PID: 11870 Comm: syz-executor.2 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 480.039041][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 480.049123][T11870] Call Trace: [ 480.052430][T11870] [ 480.055378][T11870] dump_stack_lvl+0xcd/0x134 [ 480.060009][T11870] should_fail.cold+0x5/0xa [ 480.064542][T11870] _copy_to_user+0x2a/0x140 [ 480.069082][T11870] simple_read_from_buffer+0xcc/0x160 [ 480.074464][T11870] proc_fail_nth_read+0x187/0x220 [ 480.079506][T11870] ? proc_exe_link+0x1d0/0x1d0 [ 480.084274][T11870] ? security_file_permission+0xab/0xd0 [ 480.089828][T11870] ? proc_exe_link+0x1d0/0x1d0 [ 480.094597][T11870] vfs_read+0x1ef/0x5d0 [ 480.098757][T11870] ksys_read+0x127/0x250 [ 480.103006][T11870] ? vfs_write+0xac0/0xac0 [ 480.107449][T11870] ? syscall_enter_from_user_mode+0x22/0xb0 [ 480.113360][T11870] do_syscall_64+0x35/0xb0 [ 480.117796][T11870] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 480.123693][T11870] RIP: 0033:0x7f8384a3bdbc [ 480.128111][T11870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 480.147721][T11870] RSP: 002b:00007f8385b06160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.156143][T11870] RAX: ffffffffffffffda RBX: 00007f8384b9bf60 RCX: 00007f8384a3bdbc [ 480.164121][T11870] RDX: 000000000000000f RSI: 00007f8385b061e0 RDI: 0000000000000004 [ 480.172089][T11870] RBP: 00007f8385b061d0 R08: 0000000000000000 R09: 0000000000000000 [ 480.180060][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.188031][T11870] R13: 00007ffea9b8535f R14: 00007f8385b06300 R15: 0000000000022000 [ 480.196018][T11870] 15:09:09 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0xc, 0x34, &(0x7f0000000140)="b1ae7e200e37437e60177534380e93c80ab25632e9180f11bbbcf045e87b7d386c7e1f58bfa4bc6e29decebb2afe82912b3ff0f22dc19f1020fd2e4d00b0e816f5e349024069ad2d72e0908dad9cbdda9dd20340b236d0228068de27db0005e462e6911b55c642514c6c0f019429d341bf72b70056ed97941278f8e7057a9476c6bf5259490c4104b1c594a13d0dc79aa2719f0399fb1bfcedaf8f27076c33bc39818adcc096a96e4cf99310ce0fdf940a4fc36bebe81c1e28dcd24d0c33e1d65507dfd36e4d44ac052ed4060e819572df", {0xfffff058, 0x7ff, 0x3247504d, 0x8, 0x7b, 0xf28, 0x3, 0x6}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f000001b000/0x9000)=nil, 0x9000}, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0xc, 0x34, &(0x7f0000000140)="b1ae7e200e37437e60177534380e93c80ab25632e9180f11bbbcf045e87b7d386c7e1f58bfa4bc6e29decebb2afe82912b3ff0f22dc19f1020fd2e4d00b0e816f5e349024069ad2d72e0908dad9cbdda9dd20340b236d0228068de27db0005e462e6911b55c642514c6c0f019429d341bf72b70056ed97941278f8e7057a9476c6bf5259490c4104b1c594a13d0dc79aa2719f0399fb1bfcedaf8f27076c33bc39818adcc096a96e4cf99310ce0fdf940a4fc36bebe81c1e28dcd24d0c33e1d65507dfd36e4d44ac052ed4060e819572df", {0xfffff058, 0x7ff, 0x3247504d, 0x8, 0x7b, 0xf28, 0x3, 0x6}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) (async) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f000001b000/0x9000)=nil, 0x9000}, 0x1}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 15:09:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 480.384520][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 480.392080][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:09:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x5, 0x90, &(0x7f0000000100)="56959473bccd89810bb33cdbdd78ea95ed2092b7cbd0c4a2833603fe0ab6031b875df48f58e55d38b622113f77fb10a979838738da770b67dd643eef68544a356c1ab4684357c0d2056a1109c8f32dbc677645478bc4c1347fd7b33d3429b60a6b9fddee6db10c22a07a2a909cc741b4bfab69c4bb6682c80608f6d16dc900e81df32c8439c4508e8aac8593c49d479a", 0x0, 0x1}]}) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x5, 0x90, &(0x7f0000000100)="56959473bccd89810bb33cdbdd78ea95ed2092b7cbd0c4a2833603fe0ab6031b875df48f58e55d38b622113f77fb10a979838738da770b67dd643eef68544a356c1ab4684357c0d2056a1109c8f32dbc677645478bc4c1347fd7b33d3429b60a6b9fddee6db10c22a07a2a909cc741b4bfab69c4bb6682c80608f6d16dc900e81df32c8439c4508e8aac8593c49d479a", 0x0, 0x1}]}) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, r2, 0x0, 0x100000002) (async) 15:09:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x2, 0x0) [ 480.515410][ T27] audit: type=1804 audit(1658848149.943:231): pid=11899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/515/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:09:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x10, 0x0) 15:09:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x0) [ 480.647205][ T27] audit: type=1804 audit(1658848150.073:232): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/412/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 15:09:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x0) 15:09:10 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0xc, 0x34, &(0x7f0000000140)="b1ae7e200e37437e60177534380e93c80ab25632e9180f11bbbcf045e87b7d386c7e1f58bfa4bc6e29decebb2afe82912b3ff0f22dc19f1020fd2e4d00b0e816f5e349024069ad2d72e0908dad9cbdda9dd20340b236d0228068de27db0005e462e6911b55c642514c6c0f019429d341bf72b70056ed97941278f8e7057a9476c6bf5259490c4104b1c594a13d0dc79aa2719f0399fb1bfcedaf8f27076c33bc39818adcc096a96e4cf99310ce0fdf940a4fc36bebe81c1e28dcd24d0c33e1d65507dfd36e4d44ac052ed4060e819572df", {0xfffff058, 0x7ff, 0x3247504d, 0x8, 0x7b, 0xf28, 0x3, 0x6}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f000001b000/0x9000)=nil, 0x9000}, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0xc, 0x34, &(0x7f0000000140)="b1ae7e200e37437e60177534380e93c80ab25632e9180f11bbbcf045e87b7d386c7e1f58bfa4bc6e29decebb2afe82912b3ff0f22dc19f1020fd2e4d00b0e816f5e349024069ad2d72e0908dad9cbdda9dd20340b236d0228068de27db0005e462e6911b55c642514c6c0f019429d341bf72b70056ed97941278f8e7057a9476c6bf5259490c4104b1c594a13d0dc79aa2719f0399fb1bfcedaf8f27076c33bc39818adcc096a96e4cf99310ce0fdf940a4fc36bebe81c1e28dcd24d0c33e1d65507dfd36e4d44ac052ed4060e819572df", {0xfffff058, 0x7ff, 0x3247504d, 0x8, 0x7b, 0xf28, 0x3, 0x6}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) (async) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f000001b000/0x9000)=nil, 0x9000}, 0x1}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) [ 480.828922][ T27] audit: type=1804 audit(1658848150.253:233): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/412/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 15:09:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 481.071185][ T27] audit: type=1804 audit(1658848150.493:234): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/413/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 481.108037][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888022358000: rx timeout, send abort 15:09:10 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1f000000) [ 481.117354][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888022358000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x0) 15:09:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$TIOCSETD(r5, 0x5437, &(0x7f0000000000)=0x1d) 15:09:11 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000002500000329bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008080) syz_io_uring_setup(0xa9, &(0x7f0000000140)={0x0, 0xee6b, 0x8, 0x3, 0x27d, 0x0, r0}, &(0x7f000001e000/0x3000)=nil, &(0x7f000001a000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r6 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x181201, 0x40) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:09:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x1}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 481.972865][ T7289] Bluetooth: hci6: command 0x1003 tx timeout [ 481.983016][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 15:09:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x0) 15:09:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 482.155772][ T27] audit: type=1804 audit(1658848151.583:235): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/516/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 15:09:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x0) [ 482.233826][ T27] audit: type=1804 audit(1658848151.603:236): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/415/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 15:09:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x0) 15:09:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 15:09:11 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x24000000) 15:09:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x0) [ 482.487736][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888078a20000: rx timeout, send abort [ 482.496405][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888078a20000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x0) [ 482.613601][ T27] audit: type=1804 audit(1658848152.043:237): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/517/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 15:09:12 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000002500000329bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008080) syz_io_uring_setup(0xa9, &(0x7f0000000140)={0x0, 0xee6b, 0x8, 0x3, 0x27d, 0x0, r0}, &(0x7f000001e000/0x3000)=nil, &(0x7f000001a000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r6 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x181201, 0x40) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r1) (async) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000002500000329bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008080) (async) syz_io_uring_setup(0xa9, &(0x7f0000000140)={0x0, 0xee6b, 0x8, 0x3, 0x27d, 0x0, r0}, &(0x7f000001e000/0x3000)=nil, &(0x7f000001a000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x181201, 0x40) (async) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x9) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 15:09:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 15:09:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) ioctl$sock_proto_private(r3, 0x89ea, &(0x7f0000000000)="8a594d4c761f4a569237f60d67e2e553be3e7e0d2503cb22efff866ebc74") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r7) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000000000)) close_range(r2, r7, 0x2) sendfile(r4, r2, 0x0, 0x100000002) 15:09:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x0) 15:09:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x0) [ 483.159488][ T27] audit: type=1804 audit(1658848152.583:238): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/518/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 15:09:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) ioctl$sock_proto_private(r3, 0x89ea, &(0x7f0000000000)="8a594d4c761f4a569237f60d67e2e553be3e7e0d2503cb22efff866ebc74") (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r7) (async) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000000000)) (async) close_range(r2, r7, 0x2) (async) sendfile(r4, r2, 0x0, 0x100000002) 15:09:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:09:13 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2a000000) 15:09:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x0) 15:09:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:09:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 64) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (rerun: 64) ioctl$sock_proto_private(r3, 0x89ea, &(0x7f0000000000)="8a594d4c761f4a569237f60d67e2e553be3e7e0d2503cb22efff866ebc74") (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080), 0x6) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r7) (async) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000000000)) (async) close_range(r2, r7, 0x2) (async) sendfile(r4, r2, 0x0, 0x100000002) 15:09:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:13 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000002500000329bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008080) syz_io_uring_setup(0xa9, &(0x7f0000000140)={0x0, 0xee6b, 0x8, 0x3, 0x27d, 0x0, r0}, &(0x7f000001e000/0x3000)=nil, &(0x7f000001a000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) r6 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x181201, 0x40) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 483.857151][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807bea4000: rx timeout, send abort [ 483.866023][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807bea4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x0) 15:09:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x7ff, @private0, 0x2}, 0xffffffa9) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:09:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1b) r2 = dup(r1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0xffff, 0x10000000, 0x0, 0xffffffff, 0xc, "5ad4115e09cc1fb75b227091ee60fd301b4c91"}) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x8001, 0x7bbf, 0x10000, 0x101, 0xb, "c86d317ce5f480c1718d1ba99de036c5c45e43"}) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:09:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x0) 15:09:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 484.237996][ T8951] Bluetooth: hci6: Frame reassembly failed (-84) 15:09:14 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x30000000) 15:09:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541b, 0x0) 15:09:14 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:09:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x7ff, @private0, 0x2}, 0xffffffa9) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 485.243844][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079380000: rx timeout, send abort [ 485.252265][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079380000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x7ff, @private0, 0x2}, 0xffffffa9) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x7ff, @private0, 0x2}, 0xffffffa9) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, r2, 0x0, 0x100000002) (async) 15:09:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x0) [ 485.376029][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 485.376045][ T27] audit: type=1804 audit(1658848154.803:243): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/521/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 15:09:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x0) 15:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x0) [ 485.536688][ T27] audit: type=1804 audit(1658848154.963:244): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/421/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 485.598119][ T27] audit: type=1804 audit(1658848155.023:245): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/421/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 15:09:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1b) r2 = dup(r1) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0xffff, 0x10000000, 0x0, 0xffffffff, 0xc, "5ad4115e09cc1fb75b227091ee60fd301b4c91"}) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async, rerun: 32) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x8001, 0x7bbf, 0x10000, 0x101, 0xb, "c86d317ce5f480c1718d1ba99de036c5c45e43"}) (rerun: 32) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:09:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f00002b9000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r2, 0x1a402000) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x0) [ 486.293110][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 486.301071][ T7289] Bluetooth: hci6: command tx timeout [ 486.408953][ T8951] Bluetooth: hci6: Frame reassembly failed (-84) [ 486.433256][ T27] audit: type=1804 audit(1658848155.863:246): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/422/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 15:09:16 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x36000000) 15:09:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:16 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:09:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x0) 15:09:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) mmap(&(0x7f00002b9000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r2, 0x1a402000) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 486.672243][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807d619c00: rx timeout, send abort [ 486.680741][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807d619c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x0) 15:09:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x0) 15:09:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x0) 15:09:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f00002b9000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r2, 0x1a402000) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) mmap(&(0x7f00002b9000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r2, 0x1a402000) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, r2, 0x0, 0x100000002) (async) [ 486.839482][ T27] audit: type=1804 audit(1658848156.263:247): pid=12109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/522/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 [ 487.068011][ T27] audit: type=1804 audit(1658848156.493:248): pid=12121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/424/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 487.228114][ T27] audit: type=1804 audit(1658848156.653:249): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/424/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 488.085616][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880769d6000: rx timeout, send abort [ 488.094115][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880769d6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1b) (async) r2 = dup(r1) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0xffff, 0x10000000, 0x0, 0xffffffff, 0xc, "5ad4115e09cc1fb75b227091ee60fd301b4c91"}) (async) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x8001, 0x7bbf, 0x10000, 0x101, 0xb, "c86d317ce5f480c1718d1ba99de036c5c45e43"}) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:09:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x0) 15:09:17 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) 15:09:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/227) bind$bt_hci(r3, &(0x7f0000000080), 0x6) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) splice(0xffffffffffffffff, &(0x7f0000000000)=0xbb, r4, &(0x7f0000000200)=0x8001, 0x1d41, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20, 0x1}, 0x1c) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r5, 0x0, 0x100000002) 15:09:17 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3c000000) [ 488.453032][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 488.460965][ T7310] Bluetooth: hci6: command tx timeout 15:09:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x9, 0xe1df, 0x5, 0x404c, 0xc, "5bc58036830c65e0afcc5b5f9caf6d8268a90c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x6, 0xb5}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000140)=0x10) 15:09:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x0) [ 488.665805][ T27] audit: type=1804 audit(1658848158.093:250): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/523/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 488.682555][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 488.700261][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:09:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x0) [ 488.710832][ T27] audit: type=1804 audit(1658848158.093:251): pid=12146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/425/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 15:09:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x9, 0xe1df, 0x5, 0x404c, 0xc, "5bc58036830c65e0afcc5b5f9caf6d8268a90c"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x6, 0xb5}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000140)=0x10) 15:09:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x0) [ 488.909077][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 488.922558][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 15:09:18 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0xd000, 0x2000, &(0x7f000001b000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) fallocate(r5, 0x2, 0x6, 0x100000000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r6) ioctl$sock_bt_hci(r6, 0x800448d5, &(0x7f0000000000)) dup(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:09:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x0) 15:09:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x9, 0xe1df, 0x5, 0x404c, 0xc, "5bc58036830c65e0afcc5b5f9caf6d8268a90c"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x6, 0xb5}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000140)=0x10) 15:09:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x0) 15:09:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x0) [ 489.594199][ T27] audit: type=1804 audit(1658848159.023:252): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/524/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 15:09:19 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f000000) 15:09:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/227) bind$bt_hci(r3, &(0x7f0000000080), 0x6) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) splice(0xffffffffffffffff, &(0x7f0000000000)=0xbb, r4, &(0x7f0000000200)=0x8001, 0x1d41, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20, 0x1}, 0x1c) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r2) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/227) (async) bind$bt_hci(r3, &(0x7f0000000080), 0x6) (async) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) (async) splice(0xffffffffffffffff, &(0x7f0000000000)=0xbb, r4, &(0x7f0000000200)=0x8001, 0x1d41, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20, 0x1}, 0x1c) (async) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r7, r5, 0x0, 0x100000002) (async) 15:09:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x0) 15:09:19 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0xd000, 0x2000, &(0x7f000001b000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) fallocate(r5, 0x2, 0x6, 0x100000000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r6) (async) ioctl$sock_bt_hci(r6, 0x800448d5, &(0x7f0000000000)) dup(r6) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 489.788985][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801cc13000: rx timeout, send abort [ 489.797552][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801cc13000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:09:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x0) 15:09:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:09:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x0) 15:09:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x0) [ 491.166512][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880790ab800: rx timeout, send abort [ 491.175044][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880790ab800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 501.014628][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.020968][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 15:10:13 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x59000000) 15:10:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/227) bind$bt_hci(r3, &(0x7f0000000080), 0x6) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) splice(0xffffffffffffffff, &(0x7f0000000000)=0xbb, r4, &(0x7f0000000200)=0x8001, 0x1d41, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20, 0x1}, 0x1c) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r2) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/227) (async) bind$bt_hci(r3, &(0x7f0000000080), 0x6) (async) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) (async) splice(0xffffffffffffffff, &(0x7f0000000000)=0xbb, r4, &(0x7f0000000200)=0x8001, 0x1d41, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20, 0x1}, 0x1c) (async) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r7, r5, 0x0, 0x100000002) (async) 15:10:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8933, 0x0) 15:10:13 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0xd000, 0x2000, &(0x7f000001b000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) fallocate(r5, 0x2, 0x6, 0x100000000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r6) ioctl$sock_bt_hci(r6, 0x800448d5, &(0x7f0000000000)) dup(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0xd000, 0x2000, &(0x7f000001b000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) fallocate(r5, 0x2, 0x6, 0x100000000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r6) (async) ioctl$sock_bt_hci(r6, 0x800448d5, &(0x7f0000000000)) (async) dup(r6) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 15:10:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:10:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)) fcntl$setstatus(r1, 0x4, 0x42400) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:10:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400448c9, 0x0) [ 544.211368][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 544.211384][ T27] audit: type=1804 audit(1658848213.633:256): pid=12219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/427/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 15:10:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400448dd, 0x0) [ 544.341944][ T27] audit: type=1804 audit(1658848213.693:257): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/526/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 15:10:13 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x608a00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x4, 0x6, 0x7, 0x27, 0x23, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x20, 0x7800, 0x200000}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f090f23c00f21f86635000008000f23f80f06", 0x34}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x0) 15:10:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:10:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x0) [ 545.373142][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888016601c00: rx timeout, send abort [ 545.381859][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888016601c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:10:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xfdffffff) 15:10:15 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x608a00, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x4, 0x6, 0x7, 0x27, 0x23, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x20, 0x7800, 0x200000}}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f090f23c00f21f86635000008000f23f80f06", 0x34}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400454ca, 0x0) 15:10:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:10:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x0) [ 545.749590][ T27] audit: type=1804 audit(1658848215.173:258): pid=12265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/527/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 545.976611][ T27] audit: type=1800 audit(1658848215.403:259): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1165 res=0 errno=0 [ 546.935459][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888018249400: rx timeout, send abort [ 546.944026][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888018249400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 547.905315][ T3646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 547.915055][ T3646] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 547.922899][ T3646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 547.930567][ T3646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 547.938224][ T3646] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 547.945595][ T3646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 548.041154][T12272] chnl_net:caif_netlink_parms(): no params data found [ 548.087503][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.096659][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.105206][T12272] device bridge_slave_0 entered promiscuous mode [ 548.113957][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.121075][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.129134][T12272] device bridge_slave_1 entered promiscuous mode [ 548.151110][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.161949][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.188848][T12272] team0: Port device team_slave_0 added [ 548.198514][T12272] team0: Port device team_slave_1 added [ 548.222227][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.229488][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.255573][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.267386][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.275010][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.302233][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.331820][T12272] device hsr_slave_0 entered promiscuous mode [ 548.338699][T12272] device hsr_slave_1 entered promiscuous mode [ 548.345368][T12272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.353007][T12272] Cannot create hsr debugfs directory [ 548.423966][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.431205][T12272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.439505][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.446673][T12272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.496467][T12272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.508558][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 548.520461][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.529167][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.537388][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 548.551872][T12272] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.563275][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 548.571736][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.578839][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.593715][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 548.602033][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.609193][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.632796][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.653690][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 548.661604][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 548.670472][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.681553][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 548.690997][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 548.711564][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 548.719065][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 548.732381][T12272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.043461][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.061129][T12272] device veth0_vlan entered promiscuous mode [ 549.069681][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.078244][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.090175][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.099138][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.111583][T12272] device veth1_vlan entered promiscuous mode [ 549.135367][T12272] device veth0_macvtap entered promiscuous mode [ 549.143238][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 549.151547][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 549.159965][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.168990][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.178899][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 549.190031][T12272] device veth1_macvtap entered promiscuous mode [ 549.208270][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.218926][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.230464][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.241553][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.251790][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.262512][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.272580][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.283074][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.293468][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.304097][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.313987][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.324450][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.339246][T12272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.347448][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 549.356397][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 549.365209][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.376564][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 549.387512][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.398217][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 549.409301][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.419814][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 549.430454][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.440470][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 549.452589][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.463004][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 549.473966][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.483873][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 549.494804][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.506407][T12272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.515875][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 549.524670][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.596811][ T9057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.610724][ T9057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.627314][ T9055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.636277][ T9055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.637532][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.657504][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:10:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) (async) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)) (async) fcntl$setstatus(r1, 0x4, 0x42400) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x0) 15:10:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:10:19 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x608a00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x4, 0x6, 0x7, 0x27, 0x23, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x20, 0x7800, 0x200000}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f090f23c00f21f86635000008000f23f80f06", 0x34}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x608a00, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x4, 0x6, 0x7, 0x27, 0x23, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x20, 0x7800, 0x200000}}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f090f23c00f21f86635000008000f23f80f06", 0x34}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 15:10:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:10:19 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xffff8000) 15:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40086602, 0x0) [ 549.782726][ T27] audit: type=1804 audit(1658848219.203:260): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/429/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 15:10:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)) fcntl$setstatus(r1, 0x4, 0x42400) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r1) (async) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)) (async) fcntl$setstatus(r1, 0x4, 0x42400) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (async) [ 549.926919][ T27] audit: type=1804 audit(1658848219.283:261): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/528/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 15:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40186366, 0x0) [ 549.973460][ T7307] Bluetooth: hci7: command 0x0409 tx timeout 15:10:19 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) lseek(r1, 0x7, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x401c5820, 0x0) [ 550.163512][T12334] ptm ptm2: ldisc open failed (-12), clearing slot 2 15:10:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 15:10:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x8) 15:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x0) 15:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x0) 15:10:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 550.428538][ T27] audit: type=1804 audit(1658848219.853:262): pid=12354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/430/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 15:10:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x0) [ 550.657363][ T27] audit: type=1804 audit(1658848220.083:263): pid=12368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/529/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 15:10:20 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xfffffffd) 15:10:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\xa2'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '\x00'}, {0x20, './)(#/'}, {0x20, '&&\xd5+]$/^'}, {}, {0x20, '&$+.)\'&{('}, {}], 0xa, "caa81e9e6d46ac51cd2f68f1a8a26f60d534e0eef456e3177e5dfd8bf49a2c2ae38c4f276fb8ab"}, 0x66) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) mmap(&(0x7f00000b2000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0xf4531000) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1, 0x7, 0xff}) 15:10:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x0) 15:10:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 551.025107][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807358d800: rx timeout, send abort [ 551.033730][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807358d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:10:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) lseek(r1, 0x7, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x0) 15:10:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) lseek(r1, 0x7, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) lseek(r1, 0x7, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 551.196553][ T27] audit: type=1804 audit(1658848220.623:264): pid=12372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/431/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 551.292874][ T27] audit: type=1804 audit(1658848220.623:265): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/530/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 552.052891][ T7307] Bluetooth: hci7: command 0x041b tx timeout 15:10:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r1) (async) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x8) (async) 15:10:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x0) 15:10:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:10:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\xa2'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '\x00'}, {0x20, './)(#/'}, {0x20, '&&\xd5+]$/^'}, {}, {0x20, '&$+.)\'&{('}, {}], 0xa, "caa81e9e6d46ac51cd2f68f1a8a26f60d534e0eef456e3177e5dfd8bf49a2c2ae38c4f276fb8ab"}, 0x66) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) mmap(&(0x7f00000b2000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0xf4531000) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1, 0x7, 0xff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) (async) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\xa2'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '\x00'}, {0x20, './)(#/'}, {0x20, '&&\xd5+]$/^'}, {}, {0x20, '&$+.)\'&{('}, {}], 0xa, "caa81e9e6d46ac51cd2f68f1a8a26f60d534e0eef456e3177e5dfd8bf49a2c2ae38c4f276fb8ab"}, 0x66) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r5, r2, 0x0, 0x100000002) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r6) (async) bind$bt_hci(r7, &(0x7f0000000080), 0x6) (async) mmap(&(0x7f00000b2000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0xf4531000) (async) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1, 0x7, 0xff}) (async) 15:10:21 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) r6 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000600)={[0x6]}, 0x8) r9 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="979ab4a1d00eb773ddf108edfc2935650f62faa696642f68e231191173e14928aac7a5dc4ff31e56497965a5c935ec1cc4154d77c9177ac46fd3060b38c5f6a0c582f4623d8a086b3b066244c15cfd14aa5a3f5a37490e383f72c022cbce1609ba6d01338115ab3ef920c626627ef0ae616a0f86eb0edcf382340a9490606d8fe877cc1008c936cf206dfa65235be0ea5523b1f699b4dff8a93ec459f80562", 0x9f}, {&(0x7f0000000840)="b609c96f8c502fa7ed9d4df90770a8b166f8938ef53594d2c2c7c6be6da531b701186cb20cd8b4bed729ec52812a62127a9db760cffb1e3f64d63fb5d98f71fa6b554d5b80b3fd1872b0305a39ab7dce3804386c88e525cbb9095b5a4be157b117de16a31f4ecbe5a0aadaa8573efbff680d50b0272a8dd3fc7a442c607645758f9a7c47273d06f6ac088387029a615f6ef1fba59e2219e9c9", 0x99}, {&(0x7f0000000900)="53fea1ea06f6bccf54186bfa9516fa92d7373b380bd5cdb1930e149e586d166d8d5011b2f6829cb12d7acf8aca20d7d3f1f384cc1d613b4b006bb5b6606a2fe11e2627fe9f196910b9208f89eb89ad50636c821c4075c8d6ec2141c456bc6bba178ec25362b9fc75ccf8968875f27134eb69db5397a62b0b3cc2ec39d3ac540fb0480aec837f21d05ad91d454f28f209ff6d174de368b32ab17055fe5631fb52b6", 0xa1}, {&(0x7f00000004c0)="737f48d547a626566875af596d3925326da036e7cd983bf3d982b3c5bb6c677099a58c2ec452bd42f0408ebd59f762b13bbff9c85d29ce3475c75af8ab05374bd23d6e4af359941d7ab3ad98ce0792db01ec1803100cf14ac049bcaf67b8b378bfe75585a4", 0x65}, {&(0x7f0000000ac0)="44f7c895546908b93c094d8ad783df243762413adc138db4ab0287d5f89fa66284933faa4678d2561f7ee976204d56984d01097eff614de27fcddb2e9eb4243260c395b92f92ad82cc14f4f4e957c5b144793e8a72302b7c780d65f5ab2cd8b08d2178c2b6e3ce2b189d20306b54b2903dd287548c754c49d747afa0d643bbdc9b4cf10f094727e9250f86f81377f9d23aa8c353094e6267efb33629a5917b493d28ddb1fd3b54992ee20b9804ef94c4a3627d20011e9f1ec6fb966c7b9f5b03ba98ef59f7726e7fdc4bb165e3832ae72e43c1b8206b71ff689c8e", 0xdb}, {&(0x7f0000000580)="a5718d982dbe21480ccb444dd5ed58159c4096136e74fe28dbc5fba61a959d0719cf928f6207a450895382bced4e069053d1160aed317817ab805a6964c3b87f51a32831f329c5dbef4cafe50b95d90ca6e7c451c41c0c8f09165e02d413ac32afc3b24f5cfe83829d", 0x69}], 0x6, &(0x7f0000000000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0x40, 0xe001804}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001980)="9dee4daef8a1897deb1b9f8d1b8f5ab2b49ffcdc401787707a03e1c96b10afd30bb56d02f3a4372747e1e56a07daf4ef18a4821f24cfbb2b576dfa6191a4e225e5d84f60d98e916324e42a02d8388b45fdb8427d7d34b0393259fd30defde03154cda14c4f00", 0x66}, {&(0x7f0000001a80)="3052759a2646b7bd7bb6338417a91c1fd16277024db3ad42df855d4953dc185ca0aec7b6d9d7676fb7fac77789812f3511b7c1874f6ec7a5966e34f29c9811", 0x3f}, {&(0x7f0000001b40)="8249aee0ea4d5664091607386e3f5327db82ef5f136305abdc179af5c0e07cb5c1900f86e6fec4504057569f05a98f2aca980ee2f26a7b41d6c51852590d62cc0d7c76014117cadec4f335806092866caa48d5a460015a9f56214b5b59c0fcad59b3aca8d2ff659c523cd3842b210a493d42ede7673eaf4d3e54c4c6349c4c0e93631b327d97a767de4f9aa666d25cd13a227ab93642d3909de0c163afd9cb9bcf453d", 0xa3}, {&(0x7f0000001c00)="0791d4f64da395fb4dce5975a77ee3cb5d80a812a889e6045179b73e73613e3f946ff266755227abec123a49f51565c7db20328f30dbce23737c248aa92a18b05f60e1eee8cae98d7f46800a4c531e20466c218e75c8034aed92088bb5dac5dcd17ba85dbe5598c19e635636e8abbd2b64ded5831ae801d94f03fae7385d6106083dd224f8805fc7bb71a5d93491a50ace7f7b98c55001964e7150af715e43cbf80da5fba943543246ee120a34b87fbf4b7b17f74c33b13f90669efe1677f0af01130fa9bacfd62ba315c8e6573e1f3ef071d0944bba40f682eddc470059aa9c5ec7cf1886e9f708ee947bd89c07955b30cd6cacc6030a0c", 0xf8}, {&(0x7f0000001d00)="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", 0xc00}], 0x5, &(0x7f0000002e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}], 0x70, 0x20008000}}, {{&(0x7f0000002ec0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0}}, {{&(0x7f0000003200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000f0ffffff0000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x60090}}], 0x4, 0xc0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) sendmmsg$unix(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="de59d2532392da9108e992b6538c48d3a4b2c7b130f0976c7636aa91cddfc0cd5fdd218f55f882102df6c3c4b511d08b58ae04bfbcb6ce54bf782ca797faa307932b1eebf54deafbb7f69fbc9e326a7e4b2d1aafd7e89220ce34c54f60f6fab0deef750ff2954792728d3d574d236d5e9cea47cc543e035b2301514b6873d62e6ddc66561ca0a7c493361d1f7b9f52ca01d828482914", 0x96}, {&(0x7f0000000200)="9ded628be222a864550bb49f61698c53502ea67da1a6b872ecd4af6a9629bfc88a831cdf2d6b37c1ca6743003d0677056656a007627e48f311ede46c1cd48d6991ece099559509078b04fe149ebbd3d175f883accb", 0x55}, {&(0x7f0000000280)="13779edc8ac94efa4fb01bc5392035b49a1d13cc5203646309e527964de803a239b47404767fe65389c3903604b38db6a8ce43d7bc1daf93b278975dd20bc9c02f02ab28a7a9205353230d2da3cbc562748b9b39ebdd8fedadf4847362f3155dbfda6ccc41f385c06482657920", 0x6d}, {&(0x7f0000000440)="680c330bd3c6c09fbdef4f7886fc8aed27a785e9399c03c00ad6db26bc4a49f0aeb63c4dcd77483eccdf707d47c5ca9d26a5f9811df6a5ffd1943b75a06c8618f9d71b3e5b387f3e47101d687e313ba41789e217104c3b089a6ac28154820fb8b57568c06419561cd7a2e63f3a8b170a2bc61a6123c05dfcf5ea4dc6361e9a3d7648eea64122c3ccbcb63814c169d8953b87dadfc3436232cda5d99ff5a09a73b08ea7620925681bf1f48b39f6227f01026a1a54b6a8c59e5dfc93ab27d6dc48e1d486c63a3906564ef54b8d088ae4d2fb36210916345ef395cf89d600abf88015e9fca89e13559ca46ed2463df17a68b6bdfa5533c3ca34a1c549b57cf8d16f3012feffa6d2fb6e521bd6f1c1f371e5711a3c23a23f3cf7494ebc2f39535b670eb6fd7e6c49cafa83cf8cecf648a3f8f56d72f31c2137c16a74766b204e59f5bc129a466c18ae9b9e8d326edf1eb8b333a8ae03d07c07b304967013622f0f2b19277c785fa3bec846f1b8e5efb31efaff82caa6c3bf3d576e230a591569f9f47182e3ba09e75394191465ed1900207266bf7102a5e47861b91f421b3669cd2da0ef273b494f97b36173237a45ae12864860f93d8cc9edf39f0ed3b9a42ee34969456b585b2dae2cf4fd03f52970c9ed36c640a39bc8a398432e8ea023119170d7f94bbfc5e906d4eb187c54fc7c180bf8b3c58771ed0ea44cc0340c6773a51586ca8a4c589727d319c85c979d7f9a0b23a516757f8c268531e251daa54fa91ab4b5f2f94152d3ee6fe0ac8e3a02148b6ab9dfa4288c9d1e1e91fc30b7bcaa178490a65dd0ab0ee4b6efe7d95e36ac18d029dedb3af1d8121e0406533b12c920bf66b382c9911bc4a3530ff60fed1c36d29f11b6146363c99f2118743039a3cdb03ccf971e0cfd0a37dfa0511fdf0720996a0300b1aee724295589065a9f19194981fdcd3b2423bf71d687c14c710ee4b7830738888558311d23f577fc5566c8fcb1205e57e2e6c495864d0e44bc380f1083a78e18b92aa31642c33a14c3ae3f35246c82c55e94604f7b424f0afca7cdf7b1d90e03271cd37ac5b772f596f0c99aa016cfacd909ff98d8f92a2ee674a780a01e40f51d3684d0ad74836d7ac87cdfaa6b51ae86e3747a7d705a658a21a551d5bf082e9f4669bef8b7ac3a32832a7466627db87d28428df0d83a21322561d57fe6d9219adfb0aa00a463d130a5dc2bce2984ae36602b2df5f6c846adf83a3bfc8a56c2058864125f83484a6b542becd01e7dffde5ee7982b0d0fbcd331983a232fecb856ce687eae4ac1a078d5c33234b170195f4a85b25bc4692412534cc2f884cd4942d82755e1eaeaf05b9d280b34fb67db474d9e23d509e42a1b4f664bc657e31d943a54e7a0e063773db0a992f43eb0766c4d44b87c2fdd3a343614fea72611663dbf4e7f919779b9d72948bc1fed225e9ada7d479d40fd20071d382994dda29999cda90e6c919d591230deececf97a6da3492a82d3a39ef33667fe42204d0719511e26a3091e946cf7faf89e9d9584f1347431813a4db328533e7bdd3aedd36bc6217502c1fc3faec747ab2b5fcc3e71496ef979069742e36b3cc8814243a811d4bb920d7fcf9b17f0c8acf02df6cba996f4f744beeebd4b5ff6bfe5cb7446099dfd7c79955cc5cb66ebb629e0800097c73a85576687a9f74c91a5ed100feb62f271698ab9aeff7cee3312b2767b4e5e64067b7b65d8fad70d9270c81cea10cb3e10edc03b4a391dcee8ffa21b5d76f01b9f723388f100437e5e4a1395f4ef5f5d9176994182897c534e8095fb7562368afc31240753e3eac8bce1cbc45776a7b6cbf8a13c153c5287d01ae949f235857f5e622f5b7ad65a91224062937b12339847606d450db762a1769d22aea21266adb16da2e659289014c4f2aa77ac98ab0e08eef739ac424a191cd81cf30a9aad75c6b94dfbec2b25236ec84b4a9fc15ca8cd3ea6ee8a04bcabe71b73ed93f12ef549350f7ed9352639951a82af36246befffb2f0fc6b28f0ce896b2647492dc332df8a6d51d07df7f0c7c1350fbaa29a7778e485fbca58da9d29bc741694be21c21d9f5e8082f5ad75286e0f3dcd3d53e7c919dbfead23652c387e40e699eaef2926a918ce4a060d4f662322d10716ccbf831d207d4a92781942907ec4060d4faae344d25eaba79bcf9f10791ac9bea40fb152130ff1433f88f0c715c72c33bdf555eeceaa204058a1ed1ce0412d0fcac0d3450210bff1140b3ab434a044f17e81dcffdc9c2348ec98b6754549c0095025fb31ff3a5f12ffba5c8112979a0a32858c4f8b3737cc4a6851456dfa96a4347a1fd426df99453e55015bb445c40d65a6d24f12498c7e3b24a92a3cc0f4ac434d1bed3e2e12452c203234b718332859df2181ec3eaf947c2e4a66a6141bb5f3e5a8e14c6a917e453f9bf320014e2ceb0871f1eb1d3eadc41666aaffb7bea693dd542a1e2e1c9ae67521199c050876d448df0ed8c9bcf8825ceb1e4ab52da387eca69f3f7594156df9059004a3d19fde0744da83a82742de0abe2fa18eb068ffc0136dfd815e2895cee25287f4682823ab8a2db7eb09c850d1f8b8e4ffd8f772cee2162a18e43e0e41a190373eb81e2a693207cef410027072554e4a2990a34f10f876415f259f9c3a194c70baabf6934d572039521d4adbbb9b2846690e41c0fe7e2d8ba07489531b823a8f5f2f1c2392dc4f30a0b5f4d7609663ef3057f8a6ac063f952001ef20b1c1cbd8ded35a59f5babed49856a259f113dcab63b0df3661ce18bb9981faad9807665ab1aec82ab99ff5dd3895b7a1b307e73dc0c3abd4b94717df7522fa58ac32d99892a9ed9bdd1364a9f86442d37c8fa4c8d2297465d4fad00a43f2acc70cc8116594e2f1d6667713f00ff28b0635bb3b9fbe466c1656eccad64e0101df08c63345354dd22a1d6072ee80770b9dbe3df28f5432bc0fedc4662b650e6ff48950399f7ee9c7209878fbe4741ff28d7565c4613e5584ddae8752851886891bb202d4135137df4d3254cbd4ec07c16f3b4b92663a794f05449f6a2f2b965dd3cb83b0f0729dcb3715ed4cd7ace1cd2b4137637cbc6ffadcf7d8df5fef92c9ff1115cb043421d67982abe3dcb868ed88d627061598e724805527baf834ab565cb6732574466de365c2b05950f365cb62fede7460f155e242498ec5d5777ed40da20fbc2d02ce2851a70959616cf35d1e02d66e9a8c3fed3ab7ca5192bb3e916306b047bcfcfa83548656e70ebad76fda12736e258049d5d67e48c37d828d37cba228db3deeea32758748d7e714fbc51845b3c6eb04dce0af7f487ea00a1a5d81bfd8d9f798ca0604effb9d30e85e91cce0a79beecc2271b4c637b770788a8dec9305696833dd348c21880bfbac5a6593dae1a363c4b937a061a0524c32149d8f528ed286cf629dfb9072575539f4e72fcc8468b0c86a0f9a192b1864bceaef0fccd16ea234db99630effa6d36ff2023c556060f594d771e672f9ec4302580428a12297c1c08f7a71d775610c167e8612f8deb98f82872ee2e3f03cfac47cb9e7e5396dd3900d79751f98bf668b6b5535a406ffec84fa74d458e79e79635b130fe0ceae4c6ee798e3f5769feae95e978276e25caa6ddb31e4229f11808fb48407e178ce20d449748f757426fb13392febd38a669c0099bfebbc9f274c090f54714a1e4b5895f177bdc2e3f176044ceed91163a0ac210d30dbffbf06e02394259d94f10d2fd0bdf8d72bda28c6630491c2a7cfa527aea0f48a78ec5e59fcae396d5a0d27d9b096e45400d38ed2c43eb15bcd441e26b98b728abff69dbd64a8e870800523e799908aa71315108d84ae7865749133adf7b9b847eb6184be5af80db53f2a74b12c7425a33b3dcdd84ac3c840733488d23a1094bf1142a58ca374525196a9cf2c2c4ebe44d02fc7e9dc91a8fa1e48b52a428ae9714dfef8aef9546b674a700a330e5b74f77f3cc357e151e3e936e7e347349268ee0baf6fd3953fbb4ef59c57a2185140f4947cef05e65b1783e655d9bf76b78bbd1e3b499e7ae746d1fb8fb7686b28ea66f415019440672e5647b9b8d897822c2e881475acb595aff48a58209da6a461b731e6cdc1b8926e371103178e79a6947720ee57aa549bcf33eb830c9312e0167bd34fd37254c1c67e2020f82cb59146639c7f7498ec21bf7034a63cb7f1bf8f61865c26861bf675c9181bf3f00a0a4451dfca858918119b0c6addf9678a2c45dad0f65c3018bf8ce897e38d386b641586448d8a00ede8531bcf45bb5735d70b25316898de808aa41ed5ff5997963be9d870e89484d4cba075cb8debea05dceef770f4d267a0fb91c0c8ab659f0b7f42e6f06b7fc5b0e679840ccea8a4d6af0340636cbc86511b52b32daf2bd929473323e4d177b3819f42fcbd542869ccf02cab56dda1d409cf1cead7fb7c3c63dffc434d938f64ef53770e24f60627c0306621a427fe5f0b4d1826d7e6028d78d888845643675d763d9950b0df23ebd7ed3609eb46ea6be48387a3be521f0c2dd2ccd21afb9cdd82a933119d6b788e1e2d4f09468ef678e5dbfbd1d4d4525ec5229a8e218d3d491a409409ba264bc3ae03e2702c0790e88da9d442db1005a7077eb7bdc62e4f58df522ce6f5bebc3ecf4fb8155ad25f4f3f9f432060ed6c74e3a762cb1ccf26fc8769fb2423f9e7f32721e3fced807518334c301506fe3ae2a3be24d958f5b22c60aeb1d0ea3c5c921330237d24be44ca897927ecb895a0e2b46b6e148208f85ffaa46ce95cfcdb5828e88b0353acba53452a996145727f6bf4b6627aaa4f8c9a297537675ae22e8b97d7d77b7f11ea71b5d23daef6073e3ab9281e71d013fa949ec69b0ec22e881bdeb8cc1d0045484db98ec080a68a9e9aa363ab544535e464522a55823375ba8b351838c0e81b8fdc45b0ff7bca564410104a5cd71ebc3bab0e94cf8529f471f90226d9cc75ef4ef5dc8978a50cd2b4c46a427a035e83b2e5845dddbfc5e7a417881dfa8a0c9aa1a41aa6d04c06eeeb72cf15b25594ce6b4c71ff1077c79ca55e347209e827425541f2fc32144016eaf1fe6c72c2c6720a8d2ace599bf2ff65c50fe898f4cfb526cbebec9648b37874c8f628b7670bafbe31b2dc94f63273edd6bac091a07d1ae778ea9ec242e8b594719411c0fbece7308e1fe69f65ef305c8547e2aed36e7db72d96ba36ff12c081390ad9bec7e7fed79b572e57497c9eab15e9bc6882dd8c9a4caff17ac8bdee08b26212dcb1ee78f9c9ecfc8b7dd4cff36b8acf0e0231e60aee346f152d7dafb11d6b315b865477807e30bcbf2372d07d0441776b01ff1d1b46f827baa66c2c81ead28bab2f0fdc4dc53276da288430be8cb2a04c654948ef96680b009b11e5f4d1ea54f01485a977234d4db76db87f7c09a01e1ff9e38a4651276cd0e44c1afa6a80cf012b76658c70828705ec3a8cda98f4e0dc9eca575b9736fe1034abf7a76d44c6a55e231f0d051e18d38c0770b64417af3e113a6afefdd1f6fdf4e49ee8d07d1c8bad70a3176ee2e6c3e53ccfa9bb92770eae7c610063db4ffba5642a13ff436bbc07c821a917db478b213b6f52946a2d57e2852bc860147e1a10de1d81608158d1ea8bd6ec94f01bdad6c59846309bee152f5da9cb3ef4865dd0f0533ae821ec4ab951be8133636bd6700fac3a49f542adda973fe935516d6ab52bb00b362c60e83c15fab1ba0c93357dd5f54760a39ea9ab7557290653f3f680b222ca61ef5df4919b2ead41c1be8d3310cc70", 0x1000}], 0x4, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, r10, r11, r4, r3]}}], 0x110, 0x4000004}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001600)="84f8c1588237e6159bb030b3ea00b4e811087251f254684405bf40d11aee74d0c1c54280a7a2e347e905b17bf7c168b8ccb0cba1ad268d2e2f985d485fb55159cb210e66a43c8e39fd026d907815990f433ab82fea150606ebfe5e0791fb5d8f5e0025b834146fe61cf2be495ca2f083a11e5807b8393d470c3c55924995c15ca701ce3b24f10297fbe03ed6ce487a47fa6cbaa992b7843d32ed7bdf8618f6eab0b763247b36e574491e661634963b4c7dc395600ed49c1956213bf648384b195f34e8db320c9af371b3b6424550a4720e80ae5b4a335cbd72476b30c19eb15725b15f1a", 0xe4}, {&(0x7f0000001700)="52ab92fc1135e6fc3f6e8332669ff171ffbfd89ac5b271f7b8a05529386db4e403d3a02d77bb7518682a74290926f47ed72bfbdb75db993ea62a9f032250cdfa48f11c243d48b92767ceabe59cb08ad0507e479a3e1d213a417a2d12acd11a3270853a18c61db847b703eeddbefdf75141a086edf09d3defdbfe601e04adcab4240dadeab841fa434ea386a26aacdb96d4ebf933f4916896cc153ad8d8fdb1c733c3d1082c9d6dc969276da4be1a4641faa8704687576dac0526f818e7e59d94e4f6645badea72770f3c0ff6cebc2d6596b45187eb06d68774", 0xd9}, {&(0x7f0000001800)}, {&(0x7f0000001840)="83b4549ffeac966a6b200b91aa9c833c4fc02cfc7c01ffcb15556d3b51820d752418a112e67ba18f347db53454a1006ccc772c3ff6ec842b4c8a59dec4d58ebe4c8ff5d124ea70ea4aec05a76294c62df4517bd07903e51cdfa70c0e9609d214e697c05046b52156e4273ab4e5d9169b37c77414d656a554ab4c31b794c33323a2c380df2c207f0d0ed83e1c5bc324b8512f3b2f41f81cce9dcbafc44660f5e30decf1d13ad7f1512501e471b11158150fbae34e7e", 0xb5}, {&(0x7f0000001900)="ca0413e6074a0c8f237fda9d742bb5fa20637ce0db86fe8bdff6cb211967e1efc6948a36d349fba8803efc1601be9df17cf03fdf2702fceca47fe3546ceda84801d50f62c82ae32b138188739be38ef759299350ef462c9cfd90f1aa31474158c71221d9ccce8e86d44ba16bd24a497a1210c127e4e43991b256051df26c949779e4351858d0d8e6e0169693552a82bf78c94def3ed3a92ad7a3b031c76d22bc03aa21ee8395a0602165053212bf54898fee27ba69", 0xb5}, {&(0x7f00000019c0)="d258df2b800854d2ad0ad99acea20af0eee25a71250b3ca2941ad0641d34b5a522629c1aa5df9176c6af2d6854c978", 0x2f}, {&(0x7f0000001a00)="cf69a7fc6e3536c73fd9ce6d5474ba38e7cc4716702ff850a1e79402de535e00d6088bc6be", 0x25}], 0x7, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000001b40)="8dada030fb6431e4e7362029a6ca8268f4d1404ce920c5ea079efc8dcd7b505ee3d4cdb110b12cce0dade8eb96a55cb2cc74067900fe7bbc672c4b24c36f636b29edf7f3cfc161f9d6cfb40bc1ee7fc697e615cf807dbbe7f22ab7f67f3908d90fc981ce76a9bb61cadcde0ba6b6f32be614fe3d7c95671d7f5c010a3370b1dbe29d892ddf2b42aedd5ed88ddc0f3b", 0x8f}, {&(0x7f0000001c00)="d2ef204e628133", 0x7}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="b669b7c709399a18c6afef515a276c900d25fb3c3bbd32fe0818f9d8595e1262d454cf90fe6af6d4b41a3112061410ff86d0f5f057911ce1ef5679ab68d5bdf3a718913e0ee9d918fda2ef341440ab07426b74d20dc752252cc30bc273a799b5422e8b0de3fd16243b00cbbb5d8008d9a6bb11d5daab7e3ea21acd1830b845e1a23c113f144bf4cd18c62cddc5a3e09f36ffdc2378dc76cd31e412e8bae66d3c0d75774d5e41a23f1fbdb9f01beca61d0a2b82ad8c0d9224ddc5195fb60e03fbb2408d2588d187fcb396e3b128015e9498e82a0d88515d832a2f36770c25bebbaa3b189b83c528db5ae7", 0xea}, {&(0x7f0000002d40)="a6fc14546a5cc0652cd371b1805bcb378909e2414eadd00722740cbedd502fea19442e1d375a597647f18533f29032d2d6c815f068f18d1b510b42e023dec84238a732abc9915a761c8e9c2fcde4baec3ca0c2abd7dc4fbe6a0ab82c66cbc0c03a130bbb25d3f2c78d37", 0x6a}, {&(0x7f0000002dc0)="6c9cccf74d581823232194db79d9c7b2f078f633b291d40a015776229883c9b3ce842a135382cc79c1e9fba5d8f55fa85f877e279750b467d50b5dfd0719b76fcbdf35fa46c51e1e814ea7274ab48ba769959639232b5494edecf4eaaf56159f6a86dcca155f4444b4822975f03a31cf6d9d6ab2acbe1eaa4cceeea59512db3816cf0f65a0a675b1eed567785e2bb0181e803d7f14fca9c266c5d6c9796121be8efb5d8f1a6750f910e295fba5643d397a0e51d589d801a1cd106ff40be0fb443112927b29f890ca635ead26958f633764adf296f48616e931da205d2bb9d0af2b675878cac8dfcdc8da4157170bdfe70d", 0xf1}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="223cd20ae5c8a9a755fb1bbcb719196061b03a8a817c350eeeafe0414879ce71b2dca58e84f304c1be25db9778e6aabb9aac2262b28fa5450d9dd59b8b86471e2a4949af402bd36859af7452d75fdec35307b6310ef2747202b585c7a9e0d15a07a815783ee1d757dcbd296b461d7dec9717fc3874b48e973333d6532a5cfbf310e410", 0x83}, {&(0x7f0000003f80)="9bef0951ae48dbe6ffbfdba17a1d2dd87b04f655d0dce8a121d08bb1c28242459c42e46cb4e8c1be14884647f1c93f7b772a20d0c231efe47ec3a6882f99186dd64cf047cf8565bd7be1c476b4d3a4e2feef1c37f84d8eb217542aea7f4878324a1234ccb253b602a1b6e757f38173fbe9bead0f71263faeacd5d2f43b0f793f5313f3d1d7", 0x85}], 0x9, 0x0, 0x0, 0x20000010}}, {{&(0x7f0000004100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004180)="e42091b3e3ec0cc640d48ad1c69f9c4bcbfb7396f23448182c74942386368924d8b00548589c8d38e59ae4bd4e5845ac540938bfedf56f0c30127e21c08751db264eee358ca096617b91d38b993ca99a0b62c58ae10e9673361623a6b2687f3625d07115091457de02af", 0x6a}, {&(0x7f0000004200)="e2465eac2134fe3acba063f75dbee57d88dffccee9f620519fe5943f5453a7065cd0a1d8a5aca4a1", 0x28}, {&(0x7f0000004240)="1ae8e8de8412cbad76bc5bdc4ee6623e8ee85f834f", 0x15}, {&(0x7f0000004280)="42e6d82788ef0a18fdebd84a4ea46d632cb006d759ab066d5e5755721a12962435120a62ce7a84ba2b2d81fda93ac88094d1f0a4873d8d916f837045e1aa13005bbde0e46a867c2d72bf3bf68d114ae19ba4474c704fd8e8e0205082b42180562ca3bcb17a084a29523ff6ca34ba8eed8d6a56776f87f3d261b8ffba6059f943a5d1c3f6c0167c330acfc311f9d17b827f5eef0068944a6a28edc9973a20e90215b1d06a6b9b8f4542bdd94c590aef853f99e7b98fa3ccbb4fcd8f09516e032c58878301bb4e22f4b3", 0xc9}, {&(0x7f0000004380)="ee", 0x1}, {&(0x7f00000043c0)="a85c6160d2a22550d84a341ec440dbe7b200f8e994c4a19a1a06fd3379606479b750e38e7cf94a0d3e852f065c71a9e2a9ae300f6ae5199615e112bc7f4390b1da95625dc377f95bc646c7be4a0e800ede49dddf525da25b3d3b40f694eb9d47e6b85450ff115ef16f14ef401132800f725e106b1bb15e5d53a07354c4a5509b2ff4d54dbab777c4fdf825f8716ed5c0", 0x90}], 0x6, &(0x7f0000004500), 0x0, 0x14}}], 0x4, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 552.372822][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 552.372880][ T3683] Bluetooth: hci8: command 0x1003 tx timeout [ 552.392808][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b2a6000: rx timeout, send abort [ 552.401246][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b2a6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 15:10:21 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1000000000000) 15:10:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x0) 15:10:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x0) [ 552.550801][ T27] audit: type=1804 audit(1658848221.973:266): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/432/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 15:10:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x4000000000000) [ 552.649895][ T27] audit: type=1804 audit(1658848222.043:267): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/531/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 15:10:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 15:10:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x20000000000000) 15:10:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80086301, 0x0) [ 554.132766][ T3683] Bluetooth: hci7: command 0x040f tx timeout 15:10:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x8) 15:10:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80086601, 0x0) 15:10:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) (async) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000000)) (async) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\xa2'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '\x00'}, {0x20, './)(#/'}, {0x20, '&&\xd5+]$/^'}, {}, {0x20, '&$+.)\'&{('}, {}], 0xa, "caa81e9e6d46ac51cd2f68f1a8a26f60d534e0eef456e3177e5dfd8bf49a2c2ae38c4f276fb8ab"}, 0x66) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) (async, rerun: 64) mmap(&(0x7f00000b2000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0xf4531000) (async, rerun: 64) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1, 0x7, 0xff}) 15:10:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x40000000000000) 15:10:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 15:10:24 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) r6 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000600)={[0x6]}, 0x8) r9 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="979ab4a1d00eb773ddf108edfc2935650f62faa696642f68e231191173e14928aac7a5dc4ff31e56497965a5c935ec1cc4154d77c9177ac46fd3060b38c5f6a0c582f4623d8a086b3b066244c15cfd14aa5a3f5a37490e383f72c022cbce1609ba6d01338115ab3ef920c626627ef0ae616a0f86eb0edcf382340a9490606d8fe877cc1008c936cf206dfa65235be0ea5523b1f699b4dff8a93ec459f80562", 0x9f}, {&(0x7f0000000840)="b609c96f8c502fa7ed9d4df90770a8b166f8938ef53594d2c2c7c6be6da531b701186cb20cd8b4bed729ec52812a62127a9db760cffb1e3f64d63fb5d98f71fa6b554d5b80b3fd1872b0305a39ab7dce3804386c88e525cbb9095b5a4be157b117de16a31f4ecbe5a0aadaa8573efbff680d50b0272a8dd3fc7a442c607645758f9a7c47273d06f6ac088387029a615f6ef1fba59e2219e9c9", 0x99}, {&(0x7f0000000900)="53fea1ea06f6bccf54186bfa9516fa92d7373b380bd5cdb1930e149e586d166d8d5011b2f6829cb12d7acf8aca20d7d3f1f384cc1d613b4b006bb5b6606a2fe11e2627fe9f196910b9208f89eb89ad50636c821c4075c8d6ec2141c456bc6bba178ec25362b9fc75ccf8968875f27134eb69db5397a62b0b3cc2ec39d3ac540fb0480aec837f21d05ad91d454f28f209ff6d174de368b32ab17055fe5631fb52b6", 0xa1}, {&(0x7f00000004c0)="737f48d547a626566875af596d3925326da036e7cd983bf3d982b3c5bb6c677099a58c2ec452bd42f0408ebd59f762b13bbff9c85d29ce3475c75af8ab05374bd23d6e4af359941d7ab3ad98ce0792db01ec1803100cf14ac049bcaf67b8b378bfe75585a4", 0x65}, {&(0x7f0000000ac0)="44f7c895546908b93c094d8ad783df243762413adc138db4ab0287d5f89fa66284933faa4678d2561f7ee976204d56984d01097eff614de27fcddb2e9eb4243260c395b92f92ad82cc14f4f4e957c5b144793e8a72302b7c780d65f5ab2cd8b08d2178c2b6e3ce2b189d20306b54b2903dd287548c754c49d747afa0d643bbdc9b4cf10f094727e9250f86f81377f9d23aa8c353094e6267efb33629a5917b493d28ddb1fd3b54992ee20b9804ef94c4a3627d20011e9f1ec6fb966c7b9f5b03ba98ef59f7726e7fdc4bb165e3832ae72e43c1b8206b71ff689c8e", 0xdb}, {&(0x7f0000000580)="a5718d982dbe21480ccb444dd5ed58159c4096136e74fe28dbc5fba61a959d0719cf928f6207a450895382bced4e069053d1160aed317817ab805a6964c3b87f51a32831f329c5dbef4cafe50b95d90ca6e7c451c41c0c8f09165e02d413ac32afc3b24f5cfe83829d", 0x69}], 0x6, &(0x7f0000000000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0x40, 0xe001804}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001980)="9dee4daef8a1897deb1b9f8d1b8f5ab2b49ffcdc401787707a03e1c96b10afd30bb56d02f3a4372747e1e56a07daf4ef18a4821f24cfbb2b576dfa6191a4e225e5d84f60d98e916324e42a02d8388b45fdb8427d7d34b0393259fd30defde03154cda14c4f00", 0x66}, {&(0x7f0000001a80)="3052759a2646b7bd7bb6338417a91c1fd16277024db3ad42df855d4953dc185ca0aec7b6d9d7676fb7fac77789812f3511b7c1874f6ec7a5966e34f29c9811", 0x3f}, {&(0x7f0000001b40)="8249aee0ea4d5664091607386e3f5327db82ef5f136305abdc179af5c0e07cb5c1900f86e6fec4504057569f05a98f2aca980ee2f26a7b41d6c51852590d62cc0d7c76014117cadec4f335806092866caa48d5a460015a9f56214b5b59c0fcad59b3aca8d2ff659c523cd3842b210a493d42ede7673eaf4d3e54c4c6349c4c0e93631b327d97a767de4f9aa666d25cd13a227ab93642d3909de0c163afd9cb9bcf453d", 0xa3}, {&(0x7f0000001c00)="0791d4f64da395fb4dce5975a77ee3cb5d80a812a889e6045179b73e73613e3f946ff266755227abec123a49f51565c7db20328f30dbce23737c248aa92a18b05f60e1eee8cae98d7f46800a4c531e20466c218e75c8034aed92088bb5dac5dcd17ba85dbe5598c19e635636e8abbd2b64ded5831ae801d94f03fae7385d6106083dd224f8805fc7bb71a5d93491a50ace7f7b98c55001964e7150af715e43cbf80da5fba943543246ee120a34b87fbf4b7b17f74c33b13f90669efe1677f0af01130fa9bacfd62ba315c8e6573e1f3ef071d0944bba40f682eddc470059aa9c5ec7cf1886e9f708ee947bd89c07955b30cd6cacc6030a0c", 0xf8}, {&(0x7f0000001d00)="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", 0xc00}], 0x5, &(0x7f0000002e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}], 0x70, 0x20008000}}, {{&(0x7f0000002ec0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0}}, {{&(0x7f0000003200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000f0ffffff0000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x60090}}], 0x4, 0xc0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) sendmmsg$unix(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="de59d2532392da9108e992b6538c48d3a4b2c7b130f0976c7636aa91cddfc0cd5fdd218f55f882102df6c3c4b511d08b58ae04bfbcb6ce54bf782ca797faa307932b1eebf54deafbb7f69fbc9e326a7e4b2d1aafd7e89220ce34c54f60f6fab0deef750ff2954792728d3d574d236d5e9cea47cc543e035b2301514b6873d62e6ddc66561ca0a7c493361d1f7b9f52ca01d828482914", 0x96}, {&(0x7f0000000200)="9ded628be222a864550bb49f61698c53502ea67da1a6b872ecd4af6a9629bfc88a831cdf2d6b37c1ca6743003d0677056656a007627e48f311ede46c1cd48d6991ece099559509078b04fe149ebbd3d175f883accb", 0x55}, {&(0x7f0000000280)="13779edc8ac94efa4fb01bc5392035b49a1d13cc5203646309e527964de803a239b47404767fe65389c3903604b38db6a8ce43d7bc1daf93b278975dd20bc9c02f02ab28a7a9205353230d2da3cbc562748b9b39ebdd8fedadf4847362f3155dbfda6ccc41f385c06482657920", 0x6d}, {&(0x7f0000000440)="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", 0x1000}], 0x4, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, r10, r11, r4, r3]}}], 0x110, 0x4000004}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001600)="84f8c1588237e6159bb030b3ea00b4e811087251f254684405bf40d11aee74d0c1c54280a7a2e347e905b17bf7c168b8ccb0cba1ad268d2e2f985d485fb55159cb210e66a43c8e39fd026d907815990f433ab82fea150606ebfe5e0791fb5d8f5e0025b834146fe61cf2be495ca2f083a11e5807b8393d470c3c55924995c15ca701ce3b24f10297fbe03ed6ce487a47fa6cbaa992b7843d32ed7bdf8618f6eab0b763247b36e574491e661634963b4c7dc395600ed49c1956213bf648384b195f34e8db320c9af371b3b6424550a4720e80ae5b4a335cbd72476b30c19eb15725b15f1a", 0xe4}, {&(0x7f0000001700)="52ab92fc1135e6fc3f6e8332669ff171ffbfd89ac5b271f7b8a05529386db4e403d3a02d77bb7518682a74290926f47ed72bfbdb75db993ea62a9f032250cdfa48f11c243d48b92767ceabe59cb08ad0507e479a3e1d213a417a2d12acd11a3270853a18c61db847b703eeddbefdf75141a086edf09d3defdbfe601e04adcab4240dadeab841fa434ea386a26aacdb96d4ebf933f4916896cc153ad8d8fdb1c733c3d1082c9d6dc969276da4be1a4641faa8704687576dac0526f818e7e59d94e4f6645badea72770f3c0ff6cebc2d6596b45187eb06d68774", 0xd9}, {&(0x7f0000001800)}, {&(0x7f0000001840)="83b4549ffeac966a6b200b91aa9c833c4fc02cfc7c01ffcb15556d3b51820d752418a112e67ba18f347db53454a1006ccc772c3ff6ec842b4c8a59dec4d58ebe4c8ff5d124ea70ea4aec05a76294c62df4517bd07903e51cdfa70c0e9609d214e697c05046b52156e4273ab4e5d9169b37c77414d656a554ab4c31b794c33323a2c380df2c207f0d0ed83e1c5bc324b8512f3b2f41f81cce9dcbafc44660f5e30decf1d13ad7f1512501e471b11158150fbae34e7e", 0xb5}, {&(0x7f0000001900)="ca0413e6074a0c8f237fda9d742bb5fa20637ce0db86fe8bdff6cb211967e1efc6948a36d349fba8803efc1601be9df17cf03fdf2702fceca47fe3546ceda84801d50f62c82ae32b138188739be38ef759299350ef462c9cfd90f1aa31474158c71221d9ccce8e86d44ba16bd24a497a1210c127e4e43991b256051df26c949779e4351858d0d8e6e0169693552a82bf78c94def3ed3a92ad7a3b031c76d22bc03aa21ee8395a0602165053212bf54898fee27ba69", 0xb5}, {&(0x7f00000019c0)="d258df2b800854d2ad0ad99acea20af0eee25a71250b3ca2941ad0641d34b5a522629c1aa5df9176c6af2d6854c978", 0x2f}, {&(0x7f0000001a00)="cf69a7fc6e3536c73fd9ce6d5474ba38e7cc4716702ff850a1e79402de535e00d6088bc6be", 0x25}], 0x7, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000001b40)="8dada030fb6431e4e7362029a6ca8268f4d1404ce920c5ea079efc8dcd7b505ee3d4cdb110b12cce0dade8eb96a55cb2cc74067900fe7bbc672c4b24c36f636b29edf7f3cfc161f9d6cfb40bc1ee7fc697e615cf807dbbe7f22ab7f67f3908d90fc981ce76a9bb61cadcde0ba6b6f32be614fe3d7c95671d7f5c010a3370b1dbe29d892ddf2b42aedd5ed88ddc0f3b", 0x8f}, {&(0x7f0000001c00)="d2ef204e628133", 0x7}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="b669b7c709399a18c6afef515a276c900d25fb3c3bbd32fe0818f9d8595e1262d454cf90fe6af6d4b41a3112061410ff86d0f5f057911ce1ef5679ab68d5bdf3a718913e0ee9d918fda2ef341440ab07426b74d20dc752252cc30bc273a799b5422e8b0de3fd16243b00cbbb5d8008d9a6bb11d5daab7e3ea21acd1830b845e1a23c113f144bf4cd18c62cddc5a3e09f36ffdc2378dc76cd31e412e8bae66d3c0d75774d5e41a23f1fbdb9f01beca61d0a2b82ad8c0d9224ddc5195fb60e03fbb2408d2588d187fcb396e3b128015e9498e82a0d88515d832a2f36770c25bebbaa3b189b83c528db5ae7", 0xea}, {&(0x7f0000002d40)="a6fc14546a5cc0652cd371b1805bcb378909e2414eadd00722740cbedd502fea19442e1d375a597647f18533f29032d2d6c815f068f18d1b510b42e023dec84238a732abc9915a761c8e9c2fcde4baec3ca0c2abd7dc4fbe6a0ab82c66cbc0c03a130bbb25d3f2c78d37", 0x6a}, {&(0x7f0000002dc0)="6c9cccf74d581823232194db79d9c7b2f078f633b291d40a015776229883c9b3ce842a135382cc79c1e9fba5d8f55fa85f877e279750b467d50b5dfd0719b76fcbdf35fa46c51e1e814ea7274ab48ba769959639232b5494edecf4eaaf56159f6a86dcca155f4444b4822975f03a31cf6d9d6ab2acbe1eaa4cceeea59512db3816cf0f65a0a675b1eed567785e2bb0181e803d7f14fca9c266c5d6c9796121be8efb5d8f1a6750f910e295fba5643d397a0e51d589d801a1cd106ff40be0fb443112927b29f890ca635ead26958f633764adf296f48616e931da205d2bb9d0af2b675878cac8dfcdc8da4157170bdfe70d", 0xf1}, {&(0x7f0000002ec0)="0f44211f2a3cfe614e825fe31914fa9d24ca7473eddd2c61a6fd895a42c7c338885b7e135f5edec6d981f2c18a49d7089687e5a49bffc16df64c9efac6d5983a13da52c169197b1887c74cd954c75c3c1b3f6946a6e4f4361504bca7a3e020e102883193f08f16fa4c7678976add3c30ee665adfa1d1ea0a0eeb56e05ac807e5a4bb1b55198e2ea7b39355ffe89e55af944efb2fe9611ae373aed90715db73f004d6a551d467b2de458f10c201d967aabc2172200fc4077809981edaaea9e703ac2493d2a79def272082295698301d54d03c198ec655e1f7f0be77def55a14f010c2e1bad8ecb00ba9bfbf9aae70d3b1529ec12e85b59f483986a05588960d548c1f323b8e2d0715c8c98c3ab345a99bde5092cef0325f736e0c60af12032d3ecb4102cecc63251de6d9f0198d159e8c4e78c46fa17ab0ea09baa4d089cd827e3a415176fe111b4f09261a82b5b21139fcbeb12e10278485d0b32d189914016f47d7643d386d712b1080f5294470d76e391aac55b4856b90d3142869106010efc1c3705b3718f3828ed89e256584db5a677034dd3f1534069d133cb48766c6ed0048b6d03b465e22fd2a1da4e64bd6b9b523f527a07b8ffc92d136795898128ad610b65f0d04afb7ce1e3788608b74fc62f0694755d012e062525297f402e2ca13eee6655db5fb7709cbf78eae05bfb4968573d0903f650e365ad8de1becf0e7adfc6028f45b7f19aa5a452f50e52528bcdc19421d2329ac7905030649041a3374e0f15fde5f266b53695091c2a57f57375c0c662d7a8abaad4a1054c77fab92126462f649c1d8dba4da69d037e1454d46190f19514068335be90e27a148af207d1ededc6b0f89d2083097472c94b2263abb4a521a65cf17299ada38f107a95fcab82e0bb3934c4511c5d5b3b3e769a776a7670c5af885eacf2dd365fafebfef35ba319ef6ba2ebbceeaec907ce3a3e12c6a8f5cb42f7d7427b9d2c185072cd842e7b6e5b6b775dc720b68a05794c801f131f05731f70fbea224ff9250687018b87d4683d68378c574b7523a354ab276180e1ed0c678996e25e2d30d6a21f5c48a3cd74738421eab9d461dd9b78297ad091f1d70edfbd388b2c834f3d838e9d24c4fafc0e00d4a492fa35b9b366758ea6f8e6fb8b5c0561729cb4846ecd6958f191916e552dd85337a6ce5bfc59a31fe30d493e7ace9091162442ff2664536d16d79559d47585630fde724c16d4be48e7110ecce0ecb82f7df68dfaa4b5ad37d683c8a16b63f83b6f019b3674d8f94f7d88e27d086637d55ffb6955e803566a3e9c81e651d76488f11eaaf89170b37bcaee7e842c67b40fe6ffc0286a47e53eab891a7c8ca255b8ef41de316315d7666f3ee3c6b6b214749f09b75780168838ac4628c276f24799e97414a64172cc2d788ed5a85990a8915d9b06bd9a1fb37b3bfcfde5917259b96984287b95840dbabe7806477c3c73eb07cd3c07571ca0d6dbdbf7f2a759cb2a2a7ea51957e4d354bc3b6970491f2eead9b813a509e19316bd956f3cc6db03760e32159f64bac8a2c158de9a725b7ebbb8e524a00abb682dffb91fd88432b03b46ca77480d88b6df3ae86bb73c07004cf3500ed6dc5877e586e6370cb2e3536d6612ff9a24fcab10bd975a2b79140fa3001016d7be7f921a75c3b8471915e3f212f6886cd40c682adbdf8e16fa686aaa3781f1251d1c72cb5da8cc354514f4d482e06432f1b56a48da602e3c22d9a3d8428cf55d41ddabd401e22faf0feb766580ec64f28606a0ffa312b6ee720f50f49cb6aa64462d61cf891ba8c5140c7c65800c540e8bc44dc631d4f2b93899599c2506a040cc185191e929e661a2e39a3b1bce574180939cbfe9fad17b021855b55c7a67ca2fdee66edc90a396e8709b86264edbc6f9a51904a79f726ba45061e5c42b62ec41840701569ecd521e943628902ab2b028243638cfe1802ea8416b4b57ca09b4db8c15eba425e479c800bb93373919c23d51d72eee7dd1b258b844c60a1a976e678e45aca24f05af5941674749ce6c0331619f8527bef23305a9b6fa2665f5aec127798f026139528c8fcb6a78a9de07f9cb5559dc5c65bd21fd4472cb00eb08f8aeed40cca30199a02b0502d9edc36a363b2d195ce45f280537c0c650ea424d05dc60ef8c24f918c5e688420347af4be509992cadf7afd52cc80c53554034ce5660f2f95f4c517f6b9e5238ddf3381356937eb0d0cce09d13c7582944d325e75808cc48f612cd587d59b23f297110a93cfc0c6efdb2390d279111f9212d0c65e6bd1044f1958513ee0e09db79fca708704f3eb5895cd6398e828f4df5dc3209ccc8fb0204c7d43778736b95b9fce361a9aed0c2170da62d88f6eb854b5ade23a3c06894b44dbaa89d5c2e53081fb9fc19203116f580d977fac80d202c6e7e66ce999f8f3e47977665c5d4fdb49dadf3278806a4676e2865699cccbeca8780ba6061b0ec3003592890755aaa85caab0ff5a3bfaae816de8aadafce1512f0c571e9d85592ed153b683de939e3cce95726596e073cbf1a4be3712080cfd4046ccc6857c4e6c57a2cf4fa11ac9f43b9832673c0a9dd597d8884590f66a4b5c35079f0f2678093006be0788a2ce915a9d5abedf8f86f5bbd013f57ce4e5ef5d3e566d69ebb858aa6775d09a3f691f5753b883a24735229f44ecdbd379a3ed22a3d7320c1e117ef6fbe892d28cdab1c4d1db29d6978e50ce632e64fce28c80021c71340900dbd52caa49eae248d11d42721d7c8bcd5002436b95ef90f41f28e6b0bfb80202197b5c2d2f81c20f09d4adf1e969af4c25f70ce663fb7c1113cc7ce52798f3d73aada4be7e066152003f7e449ce0c37809f5a11c5a1d0e54b64c51d29029e4b4061e9fdc627cc04f707d37ef3f6d3895d8d51df484111e4e35059c288185dc2ed099df86cd8633c9af979a20c5687cdb1a1433b275ee23e8477902ec27bc5611176806b1728af6e124082793d96b51e1bc464f228712849408dc367f6db885ed8849444c5c715e0005196a51fca707fcb697d3a7b942515f74be22a4391e92d1dd2ae7b63ba5c0f6078320a3d84069f72c1e4cffcd2408552128e323465cb69a27ef7ca4ea030020d423920caf41f5cff0b7f9bc7dc2fc01dae4ee08d0884e901d695b94aa76d02dabbef25737c4abed5bae48c0c518a9b6ee6698cd8eb6f8606d71754f5eea32366cb29ab3ffc28600f9ab8707970d751aa7b6ec607fd9e64dc44ed04ba530e0f3853747f194222df6245e2c375b0efd935137651e5c28063089bc4e955ae06f6e2a7fdf7b5bfa054675477b65dd6653ffb5580fa5c6cc838b9e1a49c53b7d44ce90a423b3eb81f850bf99d5ee5c4d87d73253157eb276f1aa0f8d9a05a665a622d1d772a8e40498f8b979ed03836f7a6bfe455f3617822356690d3aa2f75b5c1a53b056550b752930a775036ffccc9c2a4264b82742e867e2015c250b0755c7d6e67bc53de226eb3c8fe2bf8f9966e8e50f3262e97a192cae289a1e6e8c170165203237a78b73d083b2bcae476f7def741ace61c98944e3bd6c51aa315298a58467b33774f7644d87b03bd5a3b45bcdbfb76ecf0ce808c361d62555d0f279554738e92809dd0ba6375007ba663b3524ff1b6ce807a996254671818b5cb81e1e0668ff294f880b742c2795a3b291d7f1823aa76507144fd240f31a06f96b3fb8543e349cac868a458d804036a4e349d1fa1ae277b4ddd036fe6f5f75376b1d9cf8556a4354ecea0cc9802d811e17c5b4dc286dfff42ec13369929800ba8ab73829029966259e945d3e6a9cbfaf911a44a493569c7d1262864098ad2675faf2adc13369f8929394ca2429507fac1e8cead0b31dfb33f567147485d42e1c01f867edff79835f908115e345fb42d8b0de76762343d670c61e44adad9972eaed2f74f7f73b723a0af33c0fdbb95077565bedc6ac4bd67ed0adff74762cdfbfa6b47ba2e3497b7e4dddd8b319d0e1d293ee7a302b26f2f8922b9bc3a1ab9b65dc0c63d0be0ec320cc558480f5ba41517462d40d6d00cdb705816ce19e9ce5019dc40d5e35d55a64ca9a50cbeb7b229d07e15a600a2b941c856dd809dc518bdcd4c43c573261d30bd70ac65b5d9c96d04668b0ee2fba89a07df31a9686cec3dbff8633de5c07e95bee3307a8b10efddd20deb7ed82123f2df2221ffc59b362fa2dd6e8d448b70987ff0ab346d96d9b82c382c9e01548e8aa08843fdab1c3562611c5afbba725c6e0378e60cded73d7b28b7b6366325eaf9be1b4d77ff0809e39330df8ca267a98e2e6ef4fec22b0096eb68a5ab65caf63b42372d53d6c01c458cd1d31d3417188b8a5bce98e5736bc79268e9a8bd44532f5987a8b004e373e6eea94549b6263cd7e6b62ae4d7f4ff30be3cc807e9e20d84d64af12f0d2a0eb94e919e63cc0a475c41b52081c1d733f995c6a84c4cd04e1426c8dfc26f0414c14165d289249323571272ba4281097b8c712f9c458c31b697da2fd5137dce8f84fee646f18ee580911acf11f422c298055b3f1096e85c10ffdaac073fbc3b808691dd932f6221ebec5b837b09f3c90574644fed103b7bf6ce758350923a64ea5069f607a1e4a599dd495154ebf0833e26decc6a2d729a719f4a16af8f366ed2d6269c3a566ff99844e2f3ff2411bb030305377b18c21c2f7aa446d30e79948260461634b8e205441f649ed96fe8eecade3e4b7eee4f13da47e20b9306f638552be728e7c990458a4c377ae5dd1fc9010ef4c610b78de38d4939cb00f5ce7f239e13b57c477b9105ae240a1bfeea9231841efd6df9287962345711bc77f49fd32e64ed80c670e48832f20444115f6d114df03918d54b83b2bc79dc2ee45d3acfc95d375c98267863b35d2277e46f11e3a6db1c371dc19bb100e9218d3bdde112b1d1ac04f3f43e025d998fa8c5f77e5550f4b77393d22b73a443290418df1c86c2c0a815504658acb43f21f9166bf3c1feb6f504faad9d4f91ac8b0acd48ecb0fe1f420a4fedf12020828a913aa0164cb4e4021b127793ec676714e3c4bf57eab5d063c4cfa442b4af7b5f8b40a5534cbea872a4360d708ff4a7b88c748c2e512bfa99373960ab71ddc0c80871ee23b37de3ad6f4aff8b4f486774e2d4e529ac943fc442b31f2771aba83eb9c320cf161ef6b960e20271cc57d5515df2bef6e7be55f21aa2104104fc8025ba91eb506775975e863e1ad403e1ba9ac458f4d3540fe74572cefb786b9972a4b0f6e95c7b7e06253f368a23fd3a0e5e41850e7ddb22486970032818e7f2c619b35f1311eaa87889e841c432523926795217ca0c3fa6b6d740983705729626fd6b85225aa8f7e25ceda181fce076d4043566d4fb88b0e50de683d03e2e5a50ce7f2d8fd0e21c2d2fd8e29c0ee10adc99ba4d66209cee8287317d34638037ead21ee79db4dc4ef5cd74003b9b012a22cbe1b5a59fa3b6b4a01498eb975dd9460c947cf7ba453fe854b6a9c3d23abbe460573ee0b109da1a1e03cf3487c0324c66a9048fe82cb1dbbaed14df4ea215f28b3d3367b33f6c253b6242f7469130e6beb146d179d52609c4e069b5ea98e6f8233cb0da408c5e9e7f18268395203b5c9077d411f5d248c5f7fcf0b278b1956473aa8f760cfa9f23826caac79fd221441a4d2c273ff1fa2fb662a88c9a4d4f147291a7fee6405f86095069265c65443d7a8aa174eb4a2fdfdfac8c2be9b1fc6245e1c8cfe213f62f3ef50419f5b04d994be8a488c8a253dd2c2ba81f913f178bee0a5d1e928", 0x1000}, {&(0x7f0000003ec0)="223cd20ae5c8a9a755fb1bbcb719196061b03a8a817c350eeeafe0414879ce71b2dca58e84f304c1be25db9778e6aabb9aac2262b28fa5450d9dd59b8b86471e2a4949af402bd36859af7452d75fdec35307b6310ef2747202b585c7a9e0d15a07a815783ee1d757dcbd296b461d7dec9717fc3874b48e973333d6532a5cfbf310e410", 0x83}, {&(0x7f0000003f80)="9bef0951ae48dbe6ffbfdba17a1d2dd87b04f655d0dce8a121d08bb1c28242459c42e46cb4e8c1be14884647f1c93f7b772a20d0c231efe47ec3a6882f99186dd64cf047cf8565bd7be1c476b4d3a4e2feef1c37f84d8eb217542aea7f4878324a1234ccb253b602a1b6e757f38173fbe9bead0f71263faeacd5d2f43b0f793f5313f3d1d7", 0x85}], 0x9, 0x0, 0x0, 0x20000010}}, {{&(0x7f0000004100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004180)="e42091b3e3ec0cc640d48ad1c69f9c4bcbfb7396f23448182c74942386368924d8b00548589c8d38e59ae4bd4e5845ac540938bfedf56f0c30127e21c08751db264eee358ca096617b91d38b993ca99a0b62c58ae10e9673361623a6b2687f3625d07115091457de02af", 0x6a}, {&(0x7f0000004200)="e2465eac2134fe3acba063f75dbee57d88dffccee9f620519fe5943f5453a7065cd0a1d8a5aca4a1", 0x28}, {&(0x7f0000004240)="1ae8e8de8412cbad76bc5bdc4ee6623e8ee85f834f", 0x15}, {&(0x7f0000004280)="42e6d82788ef0a18fdebd84a4ea46d632cb006d759ab066d5e5755721a12962435120a62ce7a84ba2b2d81fda93ac88094d1f0a4873d8d916f837045e1aa13005bbde0e46a867c2d72bf3bf68d114ae19ba4474c704fd8e8e0205082b42180562ca3bcb17a084a29523ff6ca34ba8eed8d6a56776f87f3d261b8ffba6059f943a5d1c3f6c0167c330acfc311f9d17b827f5eef0068944a6a28edc9973a20e90215b1d06a6b9b8f4542bdd94c590aef853f99e7b98fa3ccbb4fcd8f09516e032c58878301bb4e22f4b3", 0xc9}, {&(0x7f0000004380)="ee", 0x1}, {&(0x7f00000043c0)="a85c6160d2a22550d84a341ec440dbe7b200f8e994c4a19a1a06fd3379606479b750e38e7cf94a0d3e852f065c71a9e2a9ae300f6ae5199615e112bc7f4390b1da95625dc377f95bc646c7be4a0e800ede49dddf525da25b3d3b40f694eb9d47e6b85450ff115ef16f14ef401132800f725e106b1bb15e5d53a07354c4a5509b2ff4d54dbab777c4fdf825f8716ed5c0", 0x90}], 0x6, &(0x7f0000004500), 0x0, 0x14}}], 0x4, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) (async) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000600)={[0x6]}, 0x8) (async) getgid() (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="979ab4a1d00eb773ddf108edfc2935650f62faa696642f68e231191173e14928aac7a5dc4ff31e56497965a5c935ec1cc4154d77c9177ac46fd3060b38c5f6a0c582f4623d8a086b3b066244c15cfd14aa5a3f5a37490e383f72c022cbce1609ba6d01338115ab3ef920c626627ef0ae616a0f86eb0edcf382340a9490606d8fe877cc1008c936cf206dfa65235be0ea5523b1f699b4dff8a93ec459f80562", 0x9f}, {&(0x7f0000000840)="b609c96f8c502fa7ed9d4df90770a8b166f8938ef53594d2c2c7c6be6da531b701186cb20cd8b4bed729ec52812a62127a9db760cffb1e3f64d63fb5d98f71fa6b554d5b80b3fd1872b0305a39ab7dce3804386c88e525cbb9095b5a4be157b117de16a31f4ecbe5a0aadaa8573efbff680d50b0272a8dd3fc7a442c607645758f9a7c47273d06f6ac088387029a615f6ef1fba59e2219e9c9", 0x99}, {&(0x7f0000000900)="53fea1ea06f6bccf54186bfa9516fa92d7373b380bd5cdb1930e149e586d166d8d5011b2f6829cb12d7acf8aca20d7d3f1f384cc1d613b4b006bb5b6606a2fe11e2627fe9f196910b9208f89eb89ad50636c821c4075c8d6ec2141c456bc6bba178ec25362b9fc75ccf8968875f27134eb69db5397a62b0b3cc2ec39d3ac540fb0480aec837f21d05ad91d454f28f209ff6d174de368b32ab17055fe5631fb52b6", 0xa1}, {&(0x7f00000004c0)="737f48d547a626566875af596d3925326da036e7cd983bf3d982b3c5bb6c677099a58c2ec452bd42f0408ebd59f762b13bbff9c85d29ce3475c75af8ab05374bd23d6e4af359941d7ab3ad98ce0792db01ec1803100cf14ac049bcaf67b8b378bfe75585a4", 0x65}, {&(0x7f0000000ac0)="44f7c895546908b93c094d8ad783df243762413adc138db4ab0287d5f89fa66284933faa4678d2561f7ee976204d56984d01097eff614de27fcddb2e9eb4243260c395b92f92ad82cc14f4f4e957c5b144793e8a72302b7c780d65f5ab2cd8b08d2178c2b6e3ce2b189d20306b54b2903dd287548c754c49d747afa0d643bbdc9b4cf10f094727e9250f86f81377f9d23aa8c353094e6267efb33629a5917b493d28ddb1fd3b54992ee20b9804ef94c4a3627d20011e9f1ec6fb966c7b9f5b03ba98ef59f7726e7fdc4bb165e3832ae72e43c1b8206b71ff689c8e", 0xdb}, {&(0x7f0000000580)="a5718d982dbe21480ccb444dd5ed58159c4096136e74fe28dbc5fba61a959d0719cf928f6207a450895382bced4e069053d1160aed317817ab805a6964c3b87f51a32831f329c5dbef4cafe50b95d90ca6e7c451c41c0c8f09165e02d413ac32afc3b24f5cfe83829d", 0x69}], 0x6, &(0x7f0000000000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0x40, 0xe001804}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001980)="9dee4daef8a1897deb1b9f8d1b8f5ab2b49ffcdc401787707a03e1c96b10afd30bb56d02f3a4372747e1e56a07daf4ef18a4821f24cfbb2b576dfa6191a4e225e5d84f60d98e916324e42a02d8388b45fdb8427d7d34b0393259fd30defde03154cda14c4f00", 0x66}, {&(0x7f0000001a80)="3052759a2646b7bd7bb6338417a91c1fd16277024db3ad42df855d4953dc185ca0aec7b6d9d7676fb7fac77789812f3511b7c1874f6ec7a5966e34f29c9811", 0x3f}, {&(0x7f0000001b40)="8249aee0ea4d5664091607386e3f5327db82ef5f136305abdc179af5c0e07cb5c1900f86e6fec4504057569f05a98f2aca980ee2f26a7b41d6c51852590d62cc0d7c76014117cadec4f335806092866caa48d5a460015a9f56214b5b59c0fcad59b3aca8d2ff659c523cd3842b210a493d42ede7673eaf4d3e54c4c6349c4c0e93631b327d97a767de4f9aa666d25cd13a227ab93642d3909de0c163afd9cb9bcf453d", 0xa3}, {&(0x7f0000001c00)="0791d4f64da395fb4dce5975a77ee3cb5d80a812a889e6045179b73e73613e3f946ff266755227abec123a49f51565c7db20328f30dbce23737c248aa92a18b05f60e1eee8cae98d7f46800a4c531e20466c218e75c8034aed92088bb5dac5dcd17ba85dbe5598c19e635636e8abbd2b64ded5831ae801d94f03fae7385d6106083dd224f8805fc7bb71a5d93491a50ace7f7b98c55001964e7150af715e43cbf80da5fba943543246ee120a34b87fbf4b7b17f74c33b13f90669efe1677f0af01130fa9bacfd62ba315c8e6573e1f3ef071d0944bba40f682eddc470059aa9c5ec7cf1886e9f708ee947bd89c07955b30cd6cacc6030a0c", 0xf8}, {&(0x7f0000001d00)="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", 0xc00}], 0x5, &(0x7f0000002e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}], 0x70, 0x20008000}}, {{&(0x7f0000002ec0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0}}, {{&(0x7f0000003200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000f0ffffff0000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x60090}}], 0x4, 0xc0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) (async) [ 554.613032][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 554.624088][ T3683] Bluetooth: hci8: command tx timeout sendmmsg$unix(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="de59d2532392da9108e992b6538c48d3a4b2c7b130f0976c7636aa91cddfc0cd5fdd218f55f882102df6c3c4b511d08b58ae04bfbcb6ce54bf782ca797faa307932b1eebf54deafbb7f69fbc9e326a7e4b2d1aafd7e89220ce34c54f60f6fab0deef750ff2954792728d3d574d236d5e9cea47cc543e035b2301514b6873d62e6ddc66561ca0a7c493361d1f7b9f52ca01d828482914", 0x96}, {&(0x7f0000000200)="9ded628be222a864550bb49f61698c53502ea67da1a6b872ecd4af6a9629bfc88a831cdf2d6b37c1ca6743003d0677056656a007627e48f311ede46c1cd48d6991ece099559509078b04fe149ebbd3d175f883accb", 0x55}, {&(0x7f0000000280)="13779edc8ac94efa4fb01bc5392035b49a1d13cc5203646309e527964de803a239b47404767fe65389c3903604b38db6a8ce43d7bc1daf93b278975dd20bc9c02f02ab28a7a9205353230d2da3cbc562748b9b39ebdd8fedadf4847362f3155dbfda6ccc41f385c06482657920", 0x6d}, {&(0x7f0000000440)="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", 0x1000}], 0x4, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, r10, r11, r4, r3]}}], 0x110, 0x4000004}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001600)="84f8c1588237e6159bb030b3ea00b4e811087251f254684405bf40d11aee74d0c1c54280a7a2e347e905b17bf7c168b8ccb0cba1ad268d2e2f985d485fb55159cb210e66a43c8e39fd026d907815990f433ab82fea150606ebfe5e0791fb5d8f5e0025b834146fe61cf2be495ca2f083a11e5807b8393d470c3c55924995c15ca701ce3b24f10297fbe03ed6ce487a47fa6cbaa992b7843d32ed7bdf8618f6eab0b763247b36e574491e661634963b4c7dc395600ed49c1956213bf648384b195f34e8db320c9af371b3b6424550a4720e80ae5b4a335cbd72476b30c19eb15725b15f1a", 0xe4}, {&(0x7f0000001700)="52ab92fc1135e6fc3f6e8332669ff171ffbfd89ac5b271f7b8a05529386db4e403d3a02d77bb7518682a74290926f47ed72bfbdb75db993ea62a9f032250cdfa48f11c243d48b92767ceabe59cb08ad0507e479a3e1d213a417a2d12acd11a3270853a18c61db847b703eeddbefdf75141a086edf09d3defdbfe601e04adcab4240dadeab841fa434ea386a26aacdb96d4ebf933f4916896cc153ad8d8fdb1c733c3d1082c9d6dc969276da4be1a4641faa8704687576dac0526f818e7e59d94e4f6645badea72770f3c0ff6cebc2d6596b45187eb06d68774", 0xd9}, {&(0x7f0000001800)}, {&(0x7f0000001840)="83b4549ffeac966a6b200b91aa9c833c4fc02cfc7c01ffcb15556d3b51820d752418a112e67ba18f347db53454a1006ccc772c3ff6ec842b4c8a59dec4d58ebe4c8ff5d124ea70ea4aec05a76294c62df4517bd07903e51cdfa70c0e9609d214e697c05046b52156e4273ab4e5d9169b37c77414d656a554ab4c31b794c33323a2c380df2c207f0d0ed83e1c5bc324b8512f3b2f41f81cce9dcbafc44660f5e30decf1d13ad7f1512501e471b11158150fbae34e7e", 0xb5}, {&(0x7f0000001900)="ca0413e6074a0c8f237fda9d742bb5fa20637ce0db86fe8bdff6cb211967e1efc6948a36d349fba8803efc1601be9df17cf03fdf2702fceca47fe3546ceda84801d50f62c82ae32b138188739be38ef759299350ef462c9cfd90f1aa31474158c71221d9ccce8e86d44ba16bd24a497a1210c127e4e43991b256051df26c949779e4351858d0d8e6e0169693552a82bf78c94def3ed3a92ad7a3b031c76d22bc03aa21ee8395a0602165053212bf54898fee27ba69", 0xb5}, {&(0x7f00000019c0)="d258df2b800854d2ad0ad99acea20af0eee25a71250b3ca2941ad0641d34b5a522629c1aa5df9176c6af2d6854c978", 0x2f}, {&(0x7f0000001a00)="cf69a7fc6e3536c73fd9ce6d5474ba38e7cc4716702ff850a1e79402de535e00d6088bc6be", 0x25}], 0x7, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000001b40)="8dada030fb6431e4e7362029a6ca8268f4d1404ce920c5ea079efc8dcd7b505ee3d4cdb110b12cce0dade8eb96a55cb2cc74067900fe7bbc672c4b24c36f636b29edf7f3cfc161f9d6cfb40bc1ee7fc697e615cf807dbbe7f22ab7f67f3908d90fc981ce76a9bb61cadcde0ba6b6f32be614fe3d7c95671d7f5c010a3370b1dbe29d892ddf2b42aedd5ed88ddc0f3b", 0x8f}, {&(0x7f0000001c00)="d2ef204e628133", 0x7}, {&(0x7f0000001c40)="defd2a793c76566247746bc5a722978850623e2e3bcf0ed6671b22505daa37882dedf89539acf201341833c10415c9dc62cb5790fc1af76c5a37f5496d8c194edc43d6d6e2a1813b0b7a882e82686c5557330486c1aa9d151ad214ad5e311b691b4f5045bcb6db78a06081f3955b9f5ac87ab7ec53b266f260379472dd0305bef4568fc9c8e9b44e38dbf200c1f9f0228eb1ec026f3ceadc6cf4ffabd2b462b2f0a98b64fdd90429f9db9bf0e71c266c88404f3ef12879d6ea9be27a61b8be7b9f4b24530f938f960e7d93bda68f1b34e7bf1830dc0cb5254d5afe284f7224e0e1b619bb56c94011be050803000d535a33c6c1a1210e3987bdd1d574f61fb69f9ffde8089a198ea63bc2b935cc7d8c9e7ba0240e5d760809b94d915d313bb9116c857b97ff14b6efedfdae787adf69af527adc3668e3d7c9a5e449fb2e27d1cd8683bada259d7b18d25f690809c116a83d03fe3fb61fd05494eba60936d73b1a5f31ced329cb9a8cf874433ab99ad3af83ebb36e79725cfeda3c7b26d327d1650af5e20cb5cbbb22172fa03b6f4b383c85342f5d361c5d6f8720a839163228e872309880044e8f48dd43fc8a7191827f4ca1a20e1cd2b6e4cbc0517781330c620718d0dcec9259753b1b7fcab182e1654521b3192450df79b7d4679b5ba21ce8af381efc05a9bdc6d77a280bd5375eba863d69e52f5c43401039c16f2f4c3217c99632eb8e190209481fcaac44aa2a778d1fc380efb0e90e23f7a9ab5f83740cd8847a34d7df457eb274af5b3a104760c760b162abfd513284551a2dd47ce99d200456bed4f211b6f4e793275906b4addcc24f45e2f78d9c6634e09d1b942bf4a5677d3bb60d8118c8ffb04e2bce5f8b7d9d6009a338a202a71bc5a0e5f023009d7b80ed1a6b7490160efe803b9c0434316185df27ac37155a0d790dc88899147f5c0a12feb85769e9104e2aa18387801c77b65a2ba263aa1bf2f05abb8dfa9ece9de65fc5f84a56444db4e7d2218dd4ddbe04238e5384b9accf8e5dcdb640d6bbd5eb7c02d99f1855a9d429944cc5ab9a9c3a8d38f0852abad625fbbf37ea4e6412a166bf34863c1cac29a98c56b8ba5819d5231308efeca52b992c640225c9c3b272d3147e46f88cb7b44f3b7bb85bccf0b456408d0492d8b09dfece5ef12816e01b072ceb0f10388d581b3b28d61d64e2a578cd0d79cf87ca5b894610a654abc5caea5f709ec85e2069ac1ba733a795ca75dab1be163a65595de289e5dfcc10f9355f1e59278fff559340804fa0767b7ab2e8d0f134197560092da70d698bb8eb3bab7ca2c50975c41682cfde31d7187d9bc132ce0ceb54901a8501dd9ee7b1ea4bdf25c52e5c1f5f2da9f58f3d7d89820b5fd221f62593bf73870fa48697cabfcabaee4a759ce94d0bfea806f2c60aeb32219860482639fde2eb5bbd3537db331d3fdbc838636db661978c42b736ef0620be39751852fd6d23abdc98b9bfd328f6c2b66c7d2b0825f54baf45686beb77cb9723f3f8fdccf35310f158646794eaedbafffe53dc0c01bc72362c19786680c64b64702c1f49fafd88676d3fa0b496cd3491cf17c2ee52779f34708834736e45b99b487fc2bf07ccc93090b30b2b0fff4db9f73dc9af14b597f3d045a62dc15be05d6f8cace51a8367bc6aecc17ad13986dae1a82900088763345bba454d08311da2093e2b3e56623117fbd3d73e95b852cfb3e7d4eb05de465361681b8511f4ee18c7c7d577e4ff129a1890daf9096f25cb46b10d33923faf2313d8b7f9509ef166265fd0aa625bd387421b722215fd31d9f0c932368827846ee33d51af928d48e13f7354555d111c2486e086d3d666e5b683cb5c9fb154f6cd6a6d967ed74b85153a2529fa9782c302ef1b2441d6f3ce70c20c4da7a11de75cb603fe04ce7826aa85280db232fc7baa207a7d8a07e6857feaac49cb73a389df1f2898ba89bae03c81bcbced887fdba25a3a4ce6e6425a38e1410b7a74560744e9ec7ffcdf653fdbbe89167a4c1383f5e4f95c8748c988cc6c7fc4393d36bf90938751a32049069454b02ff45c92ce74dab0650b17f3908e40d19c4ca7037ed84aa268a2b4706a10e6ee4c2d48e7682b322e7914ba7112483f57c72b0b2580613b8f0b55acf23f17ff60276d3dbfe6bc8d9e91a334fb1b942b30d594c0e52ab1b81933efbed72f00e6db1ec2500d28620ccaef3cfb72b20e109c92b3820706ac62046909df363807aca95f1c1339639b5302375648913acf8ad70e7706952bcaf5b6261074f88c2eb9e9454a8a8c79a491eedf31210e54eee3e896c413c988bd62576a84aac620fa983daab6ef1f802198dffbc0b14c704db9acc4e1e3d32e210bc625c4b27e664e31df0effcd84485fa951806ae99a653d2f9a961736bf49af0e5c5fdd4d942df8f98bc9bf37c69d2cd0343ce87154dbd6ac169e826bfbc63efd0e24d451d18ed90d0391a41870340e8c56cd77a1012a614eaf9e61e2dfda3971d95b3b709ace82d4ec3ce2af73e1ea4efc09dd8e32cd21bf296130f5a1f34277d3eb99d4529d24d2576e2bf6f1fd26859058c9a810a6e3e7bac723a196618aca284f0130ea8a7ad5e61477b394a11f3c3dfe737804017fb9baddf15cc25d77740bfb87f43af8612f5b8171d2d91c6de567d83c0da5d27cf8eb1fcd720ffb5ce2e39e71be6aef9461373df3d530ee0e9de92b41ea907ca3c6f5dc5c0be6ecea8e2f5dd30c3661ab73e3a75b63a7d61d3d2f07fcb880ee285a7e86af1cb4e1ff62a7554fe20f44ea663d4dc813b1696a298ce767c4d31418a542573d63c0a5bd5568eec5a252905d9268032701469e207849f50a16ab0a701a187d05fa1fb51dfb0c52addde0dde9eb642aeb7466d5bf32ce60a404f9673b0299267a186e0374729fa0292795c722d2ee1dbdc3c316cef3dcde038c65e1def66fa3152e74ca48c8ed320c3a13218cd234e80f0b09c294b8443d0a734332c9d19d121f9c33f6dcae4892aa66b81c01dfe0281bb0437eeb1505ae308210ce239104ef4257fd8bd587185796133da6b85816ae70db9b710727d21f99e371790030f4eac0fbdcdc501307f20a772297294d2611ef956f8140ecc685a6654706ec83815badf08f71cbd3643f7bf544afa812a0c9113c965973ee42d9775d36fe27d2fc0161929c6fcbc29410912de4cdac554ff9475de3e13e9c50299f12139f4a09564ae7fb2f68a9e69e0da8897cf93b4f28174a8a437f5e6e7b763b47421e0c84817c60aabe15e41c91abae3831f160c7cb595d40b59bd3a9ae87117d026c7338717089b9890213dd17b12fd51b3eeee18813bb866283569e9665d30e65746f3c7195cbefe642336d137faea541c506b50e7fc2927e1e44d9b82521dd34dadb2a40111dbca486f6be019f83832034a17bff30e53354231065e0e2ffa7b9218d721f3a4f063d253b2f77d350836deb4ee7446b9e559dfc198d117b6b0f78a251e42a176eb1f3e6f64be84d7ae15da8354705f32d870dfc5633aca04d21c7c1a793316e3b2037f33c568cb398e24dca605f10f0d79280aa0db4edd5fb22aa8894a131ab042d49cd706dfa2336d673bf122eb1b2ae8ed14da5d8ee9ac62978a553b9d6d834ff6b42e105c3ca594b8c2c8449d24a8f1214293f7003f86f814c4997a31e09bc1de673f13c97742a640e5ffedc3c9872cf57aa7b5dd222c7dadf8b58065e8e0ddb3b7f7e63f04343b3eb4e5fd4665c0a31c4a67502ceb883a70c7cc7a0dc88973195f391e379e14cb7a556acca48fed4e1d37279d29c052ce864ff2b101e155f5afe9cecfe98ec1c12c846f3c25b2e4659c9d1de7f6c814693b537bdecf96408d14b79ab6120bce2232b7a81320c45c8b130defcfbfa18d08aaf81393a36474a2b12e3846f8a43b38ac77f19be42a249d7913f1a0e762697095b4dfb544ad1ebb46fd1be14a7f74d1ebad4d5bab2214173af89ba36f3a0887ddc604294895fa33dff9d210918698f0ad820b7f483e714ca58df3024df3b288f4ab3ff814b33dd2c82dfebd3819526544ff99ee69c65669fff250f416637873d03596955262393a1380191196b7bab44d31adb811ea918515a99eefada2c8b85d2f7d3e150c707c946a9c207ad7df1b4996d4393f939c94dcd699c406b8b5f4f23188f1d3bd1b75ee3e64f9084ccda472652e1b423da9bc1dd543a83636bfb818738826558261e2c9cfc3ff2ff1a278858bcedcb6bbbf687f090526387419a16fe07a5c24329026d37269cfd9b7d9cf0bf51fc396b1c7b9f4f234965518aea6dac55f239f992a987fccd6e92e1c6a904f5aa3540c0e82688b0885fd0901207c5c00bb800d221d33559a5d5a2846d81e62511a74888b7e6b03a56d0cda9658a57cc80b4e962bf084cbd9435bcd7771d755aaa13107122c65dd68f94d8a97cb7d1dce39ad092a093b06c6f930a659c0dfafd16881a08d5b265eeddda7fb431a423ea27d4b15953a884933c9fb1c4337717b25641a52ce0da1bf2851ac6001dfe3dfe3010629cb556b0c0bea534b595ef6eae22f5cbb5ada10f085e4422b24ca6bad27f59404231b6d7415cb82bc6a61fe6d0e70ce9c26257e3d212fe0daa82c23305205dc95403ed8c7a8174cc45d3f83f6daad1edc0170bd5e0b1f93903c86600f0eb621b4fca77793c3b21e1516d9db3b3a0174d683fec7258db4ddb14285a5f3cb2962ea4c9ba72025bea7f8c72363240423dc4459bd2041356a1cfbb54f831675f4cde8fd3e2f993bfc55a105df051d7e53ff68cac96998bd8a2ace26e8078c356ff5de15dd6352f95a43bd0f69a72a5b29e4df2d414433927a686aaee19e95a40ab117aab12b2020fe7f2e9443c7d43a21b57996e1d0163c3607eedecc3c1cbb2d78cd9090c5cfbdd599b5b26714d379d17adc8035455d5d0ff0c6b3cd3f3c818781bef494fd9119a78af9d5d907ad4ae0178e95a82117030569257522cf1dea3c85cb0c92b9e8c9519ac8b9b375ba149b356021d51baf516c2df57a5221c58fcc80dbf7875efbc2f417d05dd0f8d53d19f86f6ea8c55ce76be854d4cef24eb36056f74866c886e97cd4cf63bb0b21c297e02ea9a50ab0355bf71c02689343ae50481ee47080a2bb0533c4d5745b7836398b7fb0b72311cdd2416e5fbcb9da7c91e388835339366f96b84738c737522f896c04508e587be8e65344dd8bc5b7d5eb2706ec5096ee80fca2af42cd43ffb028833c8605c4d08d2dd9158739b08fef78c7e17a1badb95998038f50a621d6cdec249af9f67e3ec90b6031813f74e31d16daa4e5cb3c1c568da65a87936d009503380f1a1ae3db7eb1a2ce042807ba1a95f5acb91df164d0fe11bc5ce6adf482048f53c8ae51e23a65b19c989d9358cb1ab500b59cd12789b4a77754714d13e4dc87eba60887e4d0052f3caac97e20cad11e1b8acc1ceb186a2852c6c33bf0bf71fc7d2cb693e9a6da577ceb86fb6d379f2d206d726cb2c77210545b965f6df0bd2c598fa1de8bb24ea5604b35835a2e57ee7817284ae6d3ebe768482ae7f3dbe17867775a78c6eb4d57faccdecaf28b9263a89007be8e3a80df1a7830bfc9dbb22f70c41c91dc48ade857fec5d3c9e48e11806aa59f00cce2dedef49c572ee3dee182aad3b45b4384563a7768325736b3ca4a686d4967890cb87f9b3859d00cf1f5f7e629fede96cef8554c2629110b462ad2c0454b04d9ede03711dc0c41dbd00f9c9e99242daae8ecf088890359120ac21fe49e7e0fb7d42b73f3bd710d3a35f745360afa3e378a7b6b348", 0x1000}, {&(0x7f0000002c40)="b669b7c709399a18c6afef515a276c900d25fb3c3bbd32fe0818f9d8595e1262d454cf90fe6af6d4b41a3112061410ff86d0f5f057911ce1ef5679ab68d5bdf3a718913e0ee9d918fda2ef341440ab07426b74d20dc752252cc30bc273a799b5422e8b0de3fd16243b00cbbb5d8008d9a6bb11d5daab7e3ea21acd1830b845e1a23c113f144bf4cd18c62cddc5a3e09f36ffdc2378dc76cd31e412e8bae66d3c0d75774d5e41a23f1fbdb9f01beca61d0a2b82ad8c0d9224ddc5195fb60e03fbb2408d2588d187fcb396e3b128015e9498e82a0d88515d832a2f36770c25bebbaa3b189b83c528db5ae7", 0xea}, {&(0x7f0000002d40)="a6fc14546a5cc0652cd371b1805bcb378909e2414eadd00722740cbedd502fea19442e1d375a597647f18533f29032d2d6c815f068f18d1b510b42e023dec84238a732abc9915a761c8e9c2fcde4baec3ca0c2abd7dc4fbe6a0ab82c66cbc0c03a130bbb25d3f2c78d37", 0x6a}, {&(0x7f0000002dc0)="6c9cccf74d581823232194db79d9c7b2f078f633b291d40a015776229883c9b3ce842a135382cc79c1e9fba5d8f55fa85f877e279750b467d50b5dfd0719b76fcbdf35fa46c51e1e814ea7274ab48ba769959639232b5494edecf4eaaf56159f6a86dcca155f4444b4822975f03a31cf6d9d6ab2acbe1eaa4cceeea59512db3816cf0f65a0a675b1eed567785e2bb0181e803d7f14fca9c266c5d6c9796121be8efb5d8f1a6750f910e295fba5643d397a0e51d589d801a1cd106ff40be0fb443112927b29f890ca635ead26958f633764adf296f48616e931da205d2bb9d0af2b675878cac8dfcdc8da4157170bdfe70d", 0xf1}, {&(0x7f0000002ec0)="0f44211f2a3cfe614e825fe31914fa9d24ca7473eddd2c61a6fd895a42c7c338885b7e135f5edec6d981f2c18a49d7089687e5a49bffc16df64c9efac6d5983a13da52c169197b1887c74cd954c75c3c1b3f6946a6e4f4361504bca7a3e020e102883193f08f16fa4c7678976add3c30ee665adfa1d1ea0a0eeb56e05ac807e5a4bb1b55198e2ea7b39355ffe89e55af944efb2fe9611ae373aed90715db73f004d6a551d467b2de458f10c201d967aabc2172200fc4077809981edaaea9e703ac2493d2a79def272082295698301d54d03c198ec655e1f7f0be77def55a14f010c2e1bad8ecb00ba9bfbf9aae70d3b1529ec12e85b59f483986a05588960d548c1f323b8e2d0715c8c98c3ab345a99bde5092cef0325f736e0c60af12032d3ecb4102cecc63251de6d9f0198d159e8c4e78c46fa17ab0ea09baa4d089cd827e3a415176fe111b4f09261a82b5b21139fcbeb12e10278485d0b32d189914016f47d7643d386d712b1080f5294470d76e391aac55b4856b90d3142869106010efc1c3705b3718f3828ed89e256584db5a677034dd3f1534069d133cb48766c6ed0048b6d03b465e22fd2a1da4e64bd6b9b523f527a07b8ffc92d136795898128ad610b65f0d04afb7ce1e3788608b74fc62f0694755d012e062525297f402e2ca13eee6655db5fb7709cbf78eae05bfb4968573d0903f650e365ad8de1becf0e7adfc6028f45b7f19aa5a452f50e52528bcdc19421d2329ac7905030649041a3374e0f15fde5f266b53695091c2a57f57375c0c662d7a8abaad4a1054c77fab92126462f649c1d8dba4da69d037e1454d46190f19514068335be90e27a148af207d1ededc6b0f89d2083097472c94b2263abb4a521a65cf17299ada38f107a95fcab82e0bb3934c4511c5d5b3b3e769a776a7670c5af885eacf2dd365fafebfef35ba319ef6ba2ebbceeaec907ce3a3e12c6a8f5cb42f7d7427b9d2c185072cd842e7b6e5b6b775dc720b68a05794c801f131f05731f70fbea224ff9250687018b87d4683d68378c574b7523a354ab276180e1ed0c678996e25e2d30d6a21f5c48a3cd74738421eab9d461dd9b78297ad091f1d70edfbd388b2c834f3d838e9d24c4fafc0e00d4a492fa35b9b366758ea6f8e6fb8b5c0561729cb4846ecd6958f191916e552dd85337a6ce5bfc59a31fe30d493e7ace9091162442ff2664536d16d79559d47585630fde724c16d4be48e7110ecce0ecb82f7df68dfaa4b5ad37d683c8a16b63f83b6f019b3674d8f94f7d88e27d086637d55ffb6955e803566a3e9c81e651d76488f11eaaf89170b37bcaee7e842c67b40fe6ffc0286a47e53eab891a7c8ca255b8ef41de316315d7666f3ee3c6b6b214749f09b75780168838ac4628c276f24799e97414a64172cc2d788ed5a85990a8915d9b06bd9a1fb37b3bfcfde5917259b96984287b95840dbabe7806477c3c73eb07cd3c07571ca0d6dbdbf7f2a759cb2a2a7ea51957e4d354bc3b6970491f2eead9b813a509e19316bd956f3cc6db03760e32159f64bac8a2c158de9a725b7ebbb8e524a00abb682dffb91fd88432b03b46ca77480d88b6df3ae86bb73c07004cf3500ed6dc5877e586e6370cb2e3536d6612ff9a24fcab10bd975a2b79140fa3001016d7be7f921a75c3b8471915e3f212f6886cd40c682adbdf8e16fa686aaa3781f1251d1c72cb5da8cc354514f4d482e06432f1b56a48da602e3c22d9a3d8428cf55d41ddabd401e22faf0feb766580ec64f28606a0ffa312b6ee720f50f49cb6aa64462d61cf891ba8c5140c7c65800c540e8bc44dc631d4f2b93899599c2506a040cc185191e929e661a2e39a3b1bce574180939cbfe9fad17b021855b55c7a67ca2fdee66edc90a396e8709b86264edbc6f9a51904a79f726ba45061e5c42b62ec41840701569ecd521e943628902ab2b028243638cfe1802ea8416b4b57ca09b4db8c15eba425e479c800bb93373919c23d51d72eee7dd1b258b844c60a1a976e678e45aca24f05af5941674749ce6c0331619f8527bef23305a9b6fa2665f5aec127798f026139528c8fcb6a78a9de07f9cb5559dc5c65bd21fd4472cb00eb08f8aeed40cca30199a02b0502d9edc36a363b2d195ce45f280537c0c650ea424d05dc60ef8c24f918c5e688420347af4be509992cadf7afd52cc80c53554034ce5660f2f95f4c517f6b9e5238ddf3381356937eb0d0cce09d13c7582944d325e75808cc48f612cd587d59b23f297110a93cfc0c6efdb2390d279111f9212d0c65e6bd1044f1958513ee0e09db79fca708704f3eb5895cd6398e828f4df5dc3209ccc8fb0204c7d43778736b95b9fce361a9aed0c2170da62d88f6eb854b5ade23a3c06894b44dbaa89d5c2e53081fb9fc19203116f580d977fac80d202c6e7e66ce999f8f3e47977665c5d4fdb49dadf3278806a4676e2865699cccbeca8780ba6061b0ec3003592890755aaa85caab0ff5a3bfaae816de8aadafce1512f0c571e9d85592ed153b683de939e3cce95726596e073cbf1a4be3712080cfd4046ccc6857c4e6c57a2cf4fa11ac9f43b9832673c0a9dd597d8884590f66a4b5c35079f0f2678093006be0788a2ce915a9d5abedf8f86f5bbd013f57ce4e5ef5d3e566d69ebb858aa6775d09a3f691f5753b883a24735229f44ecdbd379a3ed22a3d7320c1e117ef6fbe892d28cdab1c4d1db29d6978e50ce632e64fce28c80021c71340900dbd52caa49eae248d11d42721d7c8bcd5002436b95ef90f41f28e6b0bfb80202197b5c2d2f81c20f09d4adf1e969af4c25f70ce663fb7c1113cc7ce52798f3d73aada4be7e066152003f7e449ce0c37809f5a11c5a1d0e54b64c51d29029e4b4061e9fdc627cc04f707d37ef3f6d3895d8d51df484111e4e35059c288185dc2ed099df86cd8633c9af979a20c5687cdb1a1433b275ee23e8477902ec27bc5611176806b1728af6e124082793d96b51e1bc464f228712849408dc367f6db885ed8849444c5c715e0005196a51fca707fcb697d3a7b942515f74be22a4391e92d1dd2ae7b63ba5c0f6078320a3d84069f72c1e4cffcd2408552128e323465cb69a27ef7ca4ea030020d423920caf41f5cff0b7f9bc7dc2fc01dae4ee08d0884e901d695b94aa76d02dabbef25737c4abed5bae48c0c518a9b6ee6698cd8eb6f8606d71754f5eea32366cb29ab3ffc28600f9ab8707970d751aa7b6ec607fd9e64dc44ed04ba530e0f3853747f194222df6245e2c375b0efd935137651e5c28063089bc4e955ae06f6e2a7fdf7b5bfa054675477b65dd6653ffb5580fa5c6cc838b9e1a49c53b7d44ce90a423b3eb81f850bf99d5ee5c4d87d73253157eb276f1aa0f8d9a05a665a622d1d772a8e40498f8b979ed03836f7a6bfe455f3617822356690d3aa2f75b5c1a53b056550b752930a775036ffccc9c2a4264b82742e867e2015c250b0755c7d6e67bc53de226eb3c8fe2bf8f9966e8e50f3262e97a192cae289a1e6e8c170165203237a78b73d083b2bcae476f7def741ace61c98944e3bd6c51aa315298a58467b33774f7644d87b03bd5a3b45bcdbfb76ecf0ce808c361d62555d0f279554738e92809dd0ba6375007ba663b3524ff1b6ce807a996254671818b5cb81e1e0668ff294f880b742c2795a3b291d7f1823aa76507144fd240f31a06f96b3fb8543e349cac868a458d804036a4e349d1fa1ae277b4ddd036fe6f5f75376b1d9cf8556a4354ecea0cc9802d811e17c5b4dc286dfff42ec13369929800ba8ab73829029966259e945d3e6a9cbfaf911a44a493569c7d1262864098ad2675faf2adc13369f8929394ca2429507fac1e8cead0b31dfb33f567147485d42e1c01f867edff79835f908115e345fb42d8b0de76762343d670c61e44adad9972eaed2f74f7f73b723a0af33c0fdbb95077565bedc6ac4bd67ed0adff74762cdfbfa6b47ba2e3497b7e4dddd8b319d0e1d293ee7a302b26f2f8922b9bc3a1ab9b65dc0c63d0be0ec320cc558480f5ba41517462d40d6d00cdb705816ce19e9ce5019dc40d5e35d55a64ca9a50cbeb7b229d07e15a600a2b941c856dd809dc518bdcd4c43c573261d30bd70ac65b5d9c96d04668b0ee2fba89a07df31a9686cec3dbff8633de5c07e95bee3307a8b10efddd20deb7ed82123f2df2221ffc59b362fa2dd6e8d448b70987ff0ab346d96d9b82c382c9e01548e8aa08843fdab1c3562611c5afbba725c6e0378e60cded73d7b28b7b6366325eaf9be1b4d77ff0809e39330df8ca267a98e2e6ef4fec22b0096eb68a5ab65caf63b42372d53d6c01c458cd1d31d3417188b8a5bce98e5736bc79268e9a8bd44532f5987a8b004e373e6eea94549b6263cd7e6b62ae4d7f4ff30be3cc807e9e20d84d64af12f0d2a0eb94e919e63cc0a475c41b52081c1d733f995c6a84c4cd04e1426c8dfc26f0414c14165d289249323571272ba4281097b8c712f9c458c31b697da2fd5137dce8f84fee646f18ee580911acf11f422c298055b3f1096e85c10ffdaac073fbc3b808691dd932f6221ebec5b837b09f3c90574644fed103b7bf6ce758350923a64ea5069f607a1e4a599dd495154ebf0833e26decc6a2d729a719f4a16af8f366ed2d6269c3a566ff99844e2f3ff2411bb030305377b18c21c2f7aa446d30e79948260461634b8e205441f649ed96fe8eecade3e4b7eee4f13da47e20b9306f638552be728e7c990458a4c377ae5dd1fc9010ef4c610b78de38d4939cb00f5ce7f239e13b57c477b9105ae240a1bfeea9231841efd6df9287962345711bc77f49fd32e64ed80c670e48832f20444115f6d114df03918d54b83b2bc79dc2ee45d3acfc95d375c98267863b35d2277e46f11e3a6db1c371dc19bb100e9218d3bdde112b1d1ac04f3f43e025d998fa8c5f77e5550f4b77393d22b73a443290418df1c86c2c0a815504658acb43f21f9166bf3c1feb6f504faad9d4f91ac8b0acd48ecb0fe1f420a4fedf12020828a913aa0164cb4e4021b127793ec676714e3c4bf57eab5d063c4cfa442b4af7b5f8b40a5534cbea872a4360d708ff4a7b88c748c2e512bfa99373960ab71ddc0c80871ee23b37de3ad6f4aff8b4f486774e2d4e529ac943fc442b31f2771aba83eb9c320cf161ef6b960e20271cc57d5515df2bef6e7be55f21aa2104104fc8025ba91eb506775975e863e1ad403e1ba9ac458f4d3540fe74572cefb786b9972a4b0f6e95c7b7e06253f368a23fd3a0e5e41850e7ddb22486970032818e7f2c619b35f1311eaa87889e841c432523926795217ca0c3fa6b6d740983705729626fd6b85225aa8f7e25ceda181fce076d4043566d4fb88b0e50de683d03e2e5a50ce7f2d8fd0e21c2d2fd8e29c0ee10adc99ba4d66209cee8287317d34638037ead21ee79db4dc4ef5cd74003b9b012a22cbe1b5a59fa3b6b4a01498eb975dd9460c947cf7ba453fe854b6a9c3d23abbe460573ee0b109da1a1e03cf3487c0324c66a9048fe82cb1dbbaed14df4ea215f28b3d3367b33f6c253b6242f7469130e6beb146d179d52609c4e069b5ea98e6f8233cb0da408c5e9e7f18268395203b5c9077d411f5d248c5f7fcf0b278b1956473aa8f760cfa9f23826caac79fd221441a4d2c273ff1fa2fb662a88c9a4d4f147291a7fee6405f86095069265c65443d7a8aa174eb4a2fdfdfac8c2be9b1fc6245e1c8cfe213f62f3ef50419f5b04d994be8a488c8a253dd2c2ba81f913f178bee0a5d1e928", 0x1000}, {&(0x7f0000003ec0)="223cd20ae5c8a9a755fb1bbcb719196061b03a8a817c350eeeafe0414879ce71b2dca58e84f304c1be25db9778e6aabb9aac2262b28fa5450d9dd59b8b86471e2a4949af402bd36859af7452d75fdec35307b6310ef2747202b585c7a9e0d15a07a815783ee1d757dcbd296b461d7dec9717fc3874b48e973333d6532a5cfbf310e410", 0x83}, {&(0x7f0000003f80)="9bef0951ae48dbe6ffbfdba17a1d2dd87b04f655d0dce8a121d08bb1c28242459c42e46cb4e8c1be14884647f1c93f7b772a20d0c231efe47ec3a6882f99186dd64cf047cf8565bd7be1c476b4d3a4e2feef1c37f84d8eb217542aea7f4878324a1234ccb253b602a1b6e757f38173fbe9bead0f71263faeacd5d2f43b0f793f5313f3d1d7", 0x85}], 0x9, 0x0, 0x0, 0x20000010}}, {{&(0x7f0000004100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004180)="e42091b3e3ec0cc640d48ad1c69f9c4bcbfb7396f23448182c74942386368924d8b00548589c8d38e59ae4bd4e5845ac540938bfedf56f0c30127e21c08751db264eee358ca096617b91d38b993ca99a0b62c58ae10e9673361623a6b2687f3625d07115091457de02af", 0x6a}, {&(0x7f0000004200)="e2465eac2134fe3acba063f75dbee57d88dffccee9f620519fe5943f5453a7065cd0a1d8a5aca4a1", 0x28}, {&(0x7f0000004240)="1ae8e8de8412cbad76bc5bdc4ee6623e8ee85f834f", 0x15}, {&(0x7f0000004280)="42e6d82788ef0a18fdebd84a4ea46d632cb006d759ab066d5e5755721a12962435120a62ce7a84ba2b2d81fda93ac88094d1f0a4873d8d916f837045e1aa13005bbde0e46a867c2d72bf3bf68d114ae19ba4474c704fd8e8e0205082b42180562ca3bcb17a084a29523ff6ca34ba8eed8d6a56776f87f3d261b8ffba6059f943a5d1c3f6c0167c330acfc311f9d17b827f5eef0068944a6a28edc9973a20e90215b1d06a6b9b8f4542bdd94c590aef853f99e7b98fa3ccbb4fcd8f09516e032c58878301bb4e22f4b3", 0xc9}, {&(0x7f0000004380)="ee", 0x1}, {&(0x7f00000043c0)="a85c6160d2a22550d84a341ec440dbe7b200f8e994c4a19a1a06fd3379606479b750e38e7cf94a0d3e852f065c71a9e2a9ae300f6ae5199615e112bc7f4390b1da95625dc377f95bc646c7be4a0e800ede49dddf525da25b3d3b40f694eb9d47e6b85450ff115ef16f14ef401132800f725e106b1bb15e5d53a07354c4a5509b2ff4d54dbab777c4fdf825f8716ed5c0", 0x90}], 0x6, &(0x7f0000004500), 0x0, 0x14}}], 0x4, 0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 15:10:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x801c581f, 0x0) 15:10:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r5) sendfile(r4, r2, 0x0, 0x100000002) 15:10:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x18) 15:10:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x80ffff00000000) [ 554.834356][ T27] audit: type=1804 audit(1658848224.263:268): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/532/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 15:10:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x0) [ 554.945541][ T27] audit: type=1804 audit(1658848224.353:269): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/434/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 15:10:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x18) 15:10:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x0) 15:10:24 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) (async) r6 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000600)={[0x6]}, 0x8) (async) r9 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="979ab4a1d00eb773ddf108edfc2935650f62faa696642f68e231191173e14928aac7a5dc4ff31e56497965a5c935ec1cc4154d77c9177ac46fd3060b38c5f6a0c582f4623d8a086b3b066244c15cfd14aa5a3f5a37490e383f72c022cbce1609ba6d01338115ab3ef920c626627ef0ae616a0f86eb0edcf382340a9490606d8fe877cc1008c936cf206dfa65235be0ea5523b1f699b4dff8a93ec459f80562", 0x9f}, {&(0x7f0000000840)="b609c96f8c502fa7ed9d4df90770a8b166f8938ef53594d2c2c7c6be6da531b701186cb20cd8b4bed729ec52812a62127a9db760cffb1e3f64d63fb5d98f71fa6b554d5b80b3fd1872b0305a39ab7dce3804386c88e525cbb9095b5a4be157b117de16a31f4ecbe5a0aadaa8573efbff680d50b0272a8dd3fc7a442c607645758f9a7c47273d06f6ac088387029a615f6ef1fba59e2219e9c9", 0x99}, {&(0x7f0000000900)="53fea1ea06f6bccf54186bfa9516fa92d7373b380bd5cdb1930e149e586d166d8d5011b2f6829cb12d7acf8aca20d7d3f1f384cc1d613b4b006bb5b6606a2fe11e2627fe9f196910b9208f89eb89ad50636c821c4075c8d6ec2141c456bc6bba178ec25362b9fc75ccf8968875f27134eb69db5397a62b0b3cc2ec39d3ac540fb0480aec837f21d05ad91d454f28f209ff6d174de368b32ab17055fe5631fb52b6", 0xa1}, {&(0x7f00000004c0)="737f48d547a626566875af596d3925326da036e7cd983bf3d982b3c5bb6c677099a58c2ec452bd42f0408ebd59f762b13bbff9c85d29ce3475c75af8ab05374bd23d6e4af359941d7ab3ad98ce0792db01ec1803100cf14ac049bcaf67b8b378bfe75585a4", 0x65}, {&(0x7f0000000ac0)="44f7c895546908b93c094d8ad783df243762413adc138db4ab0287d5f89fa66284933faa4678d2561f7ee976204d56984d01097eff614de27fcddb2e9eb4243260c395b92f92ad82cc14f4f4e957c5b144793e8a72302b7c780d65f5ab2cd8b08d2178c2b6e3ce2b189d20306b54b2903dd287548c754c49d747afa0d643bbdc9b4cf10f094727e9250f86f81377f9d23aa8c353094e6267efb33629a5917b493d28ddb1fd3b54992ee20b9804ef94c4a3627d20011e9f1ec6fb966c7b9f5b03ba98ef59f7726e7fdc4bb165e3832ae72e43c1b8206b71ff689c8e", 0xdb}, {&(0x7f0000000580)="a5718d982dbe21480ccb444dd5ed58159c4096136e74fe28dbc5fba61a959d0719cf928f6207a450895382bced4e069053d1160aed317817ab805a6964c3b87f51a32831f329c5dbef4cafe50b95d90ca6e7c451c41c0c8f09165e02d413ac32afc3b24f5cfe83829d", 0x69}], 0x6, &(0x7f0000000000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0x40, 0xe001804}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001980)="9dee4daef8a1897deb1b9f8d1b8f5ab2b49ffcdc401787707a03e1c96b10afd30bb56d02f3a4372747e1e56a07daf4ef18a4821f24cfbb2b576dfa6191a4e225e5d84f60d98e916324e42a02d8388b45fdb8427d7d34b0393259fd30defde03154cda14c4f00", 0x66}, {&(0x7f0000001a80)="3052759a2646b7bd7bb6338417a91c1fd16277024db3ad42df855d4953dc185ca0aec7b6d9d7676fb7fac77789812f3511b7c1874f6ec7a5966e34f29c9811", 0x3f}, {&(0x7f0000001b40)="8249aee0ea4d5664091607386e3f5327db82ef5f136305abdc179af5c0e07cb5c1900f86e6fec4504057569f05a98f2aca980ee2f26a7b41d6c51852590d62cc0d7c76014117cadec4f335806092866caa48d5a460015a9f56214b5b59c0fcad59b3aca8d2ff659c523cd3842b210a493d42ede7673eaf4d3e54c4c6349c4c0e93631b327d97a767de4f9aa666d25cd13a227ab93642d3909de0c163afd9cb9bcf453d", 0xa3}, {&(0x7f0000001c00)="0791d4f64da395fb4dce5975a77ee3cb5d80a812a889e6045179b73e73613e3f946ff266755227abec123a49f51565c7db20328f30dbce23737c248aa92a18b05f60e1eee8cae98d7f46800a4c531e20466c218e75c8034aed92088bb5dac5dcd17ba85dbe5598c19e635636e8abbd2b64ded5831ae801d94f03fae7385d6106083dd224f8805fc7bb71a5d93491a50ace7f7b98c55001964e7150af715e43cbf80da5fba943543246ee120a34b87fbf4b7b17f74c33b13f90669efe1677f0af01130fa9bacfd62ba315c8e6573e1f3ef071d0944bba40f682eddc470059aa9c5ec7cf1886e9f708ee947bd89c07955b30cd6cacc6030a0c", 0xf8}, {&(0x7f0000001d00)="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", 0xc00}], 0x5, &(0x7f0000002e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee00}}}], 0x70, 0x20008000}}, {{&(0x7f0000002ec0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0}}, {{&(0x7f0000003200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000f0ffffff0000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x60090}}], 0x4, 0xc0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) sendmmsg$unix(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="de59d2532392da9108e992b6538c48d3a4b2c7b130f0976c7636aa91cddfc0cd5fdd218f55f882102df6c3c4b511d08b58ae04bfbcb6ce54bf782ca797faa307932b1eebf54deafbb7f69fbc9e326a7e4b2d1aafd7e89220ce34c54f60f6fab0deef750ff2954792728d3d574d236d5e9cea47cc543e035b2301514b6873d62e6ddc66561ca0a7c493361d1f7b9f52ca01d828482914", 0x96}, {&(0x7f0000000200)="9ded628be222a864550bb49f61698c53502ea67da1a6b872ecd4af6a9629bfc88a831cdf2d6b37c1ca6743003d0677056656a007627e48f311ede46c1cd48d6991ece099559509078b04fe149ebbd3d175f883accb", 0x55}, {&(0x7f0000000280)="13779edc8ac94efa4fb01bc5392035b49a1d13cc5203646309e527964de803a239b47404767fe65389c3903604b38db6a8ce43d7bc1daf93b278975dd20bc9c02f02ab28a7a9205353230d2da3cbc562748b9b39ebdd8fedadf4847362f3155dbfda6ccc41f385c06482657920", 0x6d}, {&(0x7f0000000440)="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", 0x1000}], 0x4, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, r10, r11, r4, r3]}}], 0x110, 0x4000004}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001600)="84f8c1588237e6159bb030b3ea00b4e811087251f254684405bf40d11aee74d0c1c54280a7a2e347e905b17bf7c168b8ccb0cba1ad268d2e2f985d485fb55159cb210e66a43c8e39fd026d907815990f433ab82fea150606ebfe5e0791fb5d8f5e0025b834146fe61cf2be495ca2f083a11e5807b8393d470c3c55924995c15ca701ce3b24f10297fbe03ed6ce487a47fa6cbaa992b7843d32ed7bdf8618f6eab0b763247b36e574491e661634963b4c7dc395600ed49c1956213bf648384b195f34e8db320c9af371b3b6424550a4720e80ae5b4a335cbd72476b30c19eb15725b15f1a", 0xe4}, {&(0x7f0000001700)="52ab92fc1135e6fc3f6e8332669ff171ffbfd89ac5b271f7b8a05529386db4e403d3a02d77bb7518682a74290926f47ed72bfbdb75db993ea62a9f032250cdfa48f11c243d48b92767ceabe59cb08ad0507e479a3e1d213a417a2d12acd11a3270853a18c61db847b703eeddbefdf75141a086edf09d3defdbfe601e04adcab4240dadeab841fa434ea386a26aacdb96d4ebf933f4916896cc153ad8d8fdb1c733c3d1082c9d6dc969276da4be1a4641faa8704687576dac0526f818e7e59d94e4f6645badea72770f3c0ff6cebc2d6596b45187eb06d68774", 0xd9}, {&(0x7f0000001800)}, {&(0x7f0000001840)="83b4549ffeac966a6b200b91aa9c833c4fc02cfc7c01ffcb15556d3b51820d752418a112e67ba18f347db53454a1006ccc772c3ff6ec842b4c8a59dec4d58ebe4c8ff5d124ea70ea4aec05a76294c62df4517bd07903e51cdfa70c0e9609d214e697c05046b52156e4273ab4e5d9169b37c77414d656a554ab4c31b794c33323a2c380df2c207f0d0ed83e1c5bc324b8512f3b2f41f81cce9dcbafc44660f5e30decf1d13ad7f1512501e471b11158150fbae34e7e", 0xb5}, {&(0x7f0000001900)="ca0413e6074a0c8f237fda9d742bb5fa20637ce0db86fe8bdff6cb211967e1efc6948a36d349fba8803efc1601be9df17cf03fdf2702fceca47fe3546ceda84801d50f62c82ae32b138188739be38ef759299350ef462c9cfd90f1aa31474158c71221d9ccce8e86d44ba16bd24a497a1210c127e4e43991b256051df26c949779e4351858d0d8e6e0169693552a82bf78c94def3ed3a92ad7a3b031c76d22bc03aa21ee8395a0602165053212bf54898fee27ba69", 0xb5}, {&(0x7f00000019c0)="d258df2b800854d2ad0ad99acea20af0eee25a71250b3ca2941ad0641d34b5a522629c1aa5df9176c6af2d6854c978", 0x2f}, {&(0x7f0000001a00)="cf69a7fc6e3536c73fd9ce6d5474ba38e7cc4716702ff850a1e79402de535e00d6088bc6be", 0x25}], 0x7, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000001b40)="8dada030fb6431e4e7362029a6ca8268f4d1404ce920c5ea079efc8dcd7b505ee3d4cdb110b12cce0dade8eb96a55cb2cc74067900fe7bbc672c4b24c36f636b29edf7f3cfc161f9d6cfb40bc1ee7fc697e615cf807dbbe7f22ab7f67f3908d90fc981ce76a9bb61cadcde0ba6b6f32be614fe3d7c95671d7f5c010a3370b1dbe29d892ddf2b42aedd5ed88ddc0f3b", 0x8f}, {&(0x7f0000001c00)="d2ef204e628133", 0x7}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="b669b7c709399a18c6afef515a276c900d25fb3c3bbd32fe0818f9d8595e1262d454cf90fe6af6d4b41a3112061410ff86d0f5f057911ce1ef5679ab68d5bdf3a718913e0ee9d918fda2ef341440ab07426b74d20dc752252cc30bc273a799b5422e8b0de3fd16243b00cbbb5d8008d9a6bb11d5daab7e3ea21acd1830b845e1a23c113f144bf4cd18c62cddc5a3e09f36ffdc2378dc76cd31e412e8bae66d3c0d75774d5e41a23f1fbdb9f01beca61d0a2b82ad8c0d9224ddc5195fb60e03fbb2408d2588d187fcb396e3b128015e9498e82a0d88515d832a2f36770c25bebbaa3b189b83c528db5ae7", 0xea}, {&(0x7f0000002d40)="a6fc14546a5cc0652cd371b1805bcb378909e2414eadd00722740cbedd502fea19442e1d375a597647f18533f29032d2d6c815f068f18d1b510b42e023dec84238a732abc9915a761c8e9c2fcde4baec3ca0c2abd7dc4fbe6a0ab82c66cbc0c03a130bbb25d3f2c78d37", 0x6a}, {&(0x7f0000002dc0)="6c9cccf74d581823232194db79d9c7b2f078f633b291d40a015776229883c9b3ce842a135382cc79c1e9fba5d8f55fa85f877e279750b467d50b5dfd0719b76fcbdf35fa46c51e1e814ea7274ab48ba769959639232b5494edecf4eaaf56159f6a86dcca155f4444b4822975f03a31cf6d9d6ab2acbe1eaa4cceeea59512db3816cf0f65a0a675b1eed567785e2bb0181e803d7f14fca9c266c5d6c9796121be8efb5d8f1a6750f910e295fba5643d397a0e51d589d801a1cd106ff40be0fb443112927b29f890ca635ead26958f633764adf296f48616e931da205d2bb9d0af2b675878cac8dfcdc8da4157170bdfe70d", 0xf1}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="223cd20ae5c8a9a755fb1bbcb719196061b03a8a817c350eeeafe0414879ce71b2dca58e84f304c1be25db9778e6aabb9aac2262b28fa5450d9dd59b8b86471e2a4949af402bd36859af7452d75fdec35307b6310ef2747202b585c7a9e0d15a07a815783ee1d757dcbd296b461d7dec9717fc3874b48e973333d6532a5cfbf310e410", 0x83}, {&(0x7f0000003f80)="9bef0951ae48dbe6ffbfdba17a1d2dd87b04f655d0dce8a121d08bb1c28242459c42e46cb4e8c1be14884647f1c93f7b772a20d0c231efe47ec3a6882f99186dd64cf047cf8565bd7be1c476b4d3a4e2feef1c37f84d8eb217542aea7f4878324a1234ccb253b602a1b6e757f38173fbe9bead0f71263faeacd5d2f43b0f793f5313f3d1d7", 0x85}], 0x9, 0x0, 0x0, 0x20000010}}, {{&(0x7f0000004100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004180)="e42091b3e3ec0cc640d48ad1c69f9c4bcbfb7396f23448182c74942386368924d8b00548589c8d38e59ae4bd4e5845ac540938bfedf56f0c30127e21c08751db264eee358ca096617b91d38b993ca99a0b62c58ae10e9673361623a6b2687f3625d07115091457de02af", 0x6a}, {&(0x7f0000004200)="e2465eac2134fe3acba063f75dbee57d88dffccee9f620519fe5943f5453a7065cd0a1d8a5aca4a1", 0x28}, {&(0x7f0000004240)="1ae8e8de8412cbad76bc5bdc4ee6623e8ee85f834f", 0x15}, {&(0x7f0000004280)="42e6d82788ef0a18fdebd84a4ea46d632cb006d759ab066d5e5755721a12962435120a62ce7a84ba2b2d81fda93ac88094d1f0a4873d8d916f837045e1aa13005bbde0e46a867c2d72bf3bf68d114ae19ba4474c704fd8e8e0205082b42180562ca3bcb17a084a29523ff6ca34ba8eed8d6a56776f87f3d261b8ffba6059f943a5d1c3f6c0167c330acfc311f9d17b827f5eef0068944a6a28edc9973a20e90215b1d06a6b9b8f4542bdd94c590aef853f99e7b98fa3ccbb4fcd8f09516e032c58878301bb4e22f4b3", 0xc9}, {&(0x7f0000004380)="ee", 0x1}, {&(0x7f00000043c0)="a85c6160d2a22550d84a341ec440dbe7b200f8e994c4a19a1a06fd3379606479b750e38e7cf94a0d3e852f065c71a9e2a9ae300f6ae5199615e112bc7f4390b1da95625dc377f95bc646c7be4a0e800ede49dddf525da25b3d3b40f694eb9d47e6b85450ff115ef16f14ef401132800f725e106b1bb15e5d53a07354c4a5509b2ff4d54dbab777c4fdf825f8716ed5c0", 0x90}], 0x6, &(0x7f0000004500), 0x0, 0x14}}], 0x4, 0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:10:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 15:10:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0189436, 0x0) 15:10:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 15:10:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc020660b, 0x0) 15:10:25 executing program 1: r0 = syz_open_procfs(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 555.567558][ T27] audit: type=1804 audit(1658848224.993:270): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/533/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 15:10:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r5) sendfile(r4, r2, 0x0, 0x100000002) 15:10:25 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 15:10:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 15:10:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) [ 555.826412][ T27] audit: type=1804 audit(1658848225.253:271): pid=12523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/435/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 [ 556.222899][ T143] Bluetooth: hci7: command 0x0419 tx timeout 15:10:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 32) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x18) 15:10:26 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x600000000000000) 15:10:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 15:10:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 15:10:26 executing program 1: r0 = syz_open_procfs(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) (async) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:10:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r5) sendfile(r4, r2, 0x0, 0x100000002) [ 557.252753][ T14] Bluetooth: hci8: command 0x1003 tx timeout [ 557.254307][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 15:10:26 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) (async) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 557.362124][ T9055] Bluetooth: hci9: Frame reassembly failed (-84) 15:10:26 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) syz_clone3(&(0x7f00000002c0)={0x44020000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)=0x0, {0x1f}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000000200)=""/112, &(0x7f0000000280)=[r0, 0x0, r1, r0, r0, r0, r0], 0x7}, 0x58) r3 = syz_open_procfs(r2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./fi\x00e0\x00']) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000380)={0x10000, 0x1, 0x5000, 0x2000, &(0x7f0000011000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:10:26 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x700000000000000) 15:10:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x100c0, 0x20) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000003280)=""/4102, &(0x7f0000000040)=0xfffffffffffffe67) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 557.511699][ T27] audit: type=1804 audit(1658848226.933:272): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/534/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 15:10:27 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xc00000000000000) [ 557.640534][ T27] audit: type=1804 audit(1658848227.063:273): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/437/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 15:10:27 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1200000000000000) [ 559.412839][ T7307] Bluetooth: hci9: command 0x1003 tx timeout [ 559.413709][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 559.425532][ T3646] Bluetooth: hci9: Opcode 0x1003 failed: -110 15:10:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz0', "55955d"}, 0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:10:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 15:10:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1800000000000000) 15:10:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x100c0, 0x20) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000003280)=""/4102, &(0x7f0000000040)=0xfffffffffffffe67) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:10:28 executing program 1: r0 = getpgrp(0xffffffffffffffff) (async) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) (async) sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) syz_clone3(&(0x7f00000002c0)={0x44020000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)=0x0, {0x1f}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000000200)=""/112, &(0x7f0000000280)=[r0, 0x0, r1, r0, r0, r0, r0], 0x7}, 0x58) r3 = syz_open_procfs(r2, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./fi\x00e0\x00']) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000380)={0x10000, 0x1, 0x5000, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:10:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) 15:10:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6) 15:10:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x100c0, 0x20) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000003280)=""/4102, &(0x7f0000000040)=0xfffffffffffffe67) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x100c0, 0x20) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000003280)=""/4102, &(0x7f0000000040)=0xfffffffffffffe67) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r4, r2, 0x0, 0x100000002) (async) 15:10:29 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1e00000000000000) [ 559.588410][ T27] audit: type=1804 audit(1658848229.013:274): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/535/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 15:10:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) 15:10:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) 15:10:29 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) syz_clone3(&(0x7f00000002c0)={0x44020000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)=0x0, {0x1f}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000000200)=""/112, &(0x7f0000000280)=[r0, 0x0, r1, r0, r0, r0, r0], 0x7}, 0x58) r3 = syz_open_procfs(r2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./fi\x00e0\x00']) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000380)={0x10000, 0x1, 0x5000, 0x2000, &(0x7f0000011000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) getpgrp(0xffffffffffffffff) (async) getpid() (async) sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x9) (async) sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) (async) syz_clone3(&(0x7f00000002c0)={0x44020000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0), {0x1f}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000000200)=""/112, &(0x7f0000000280)=[r0, 0x0, r1, r0, r0, r0, r0], 0x7}, 0x58) (async) syz_open_procfs(r2, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./fi\x00e0\x00']) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000380)={0x10000, 0x1, 0x5000, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) [ 559.804027][ T27] audit: type=1804 audit(1658848229.233:275): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/439/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 559.989820][ T27] audit: type=1804 audit(1658848229.413:276): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/439/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 15:10:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz0', "55955d"}, 0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:10:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x1f00000000000000) 15:10:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:10:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 15:10:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x50000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x7, 0xffffffffffff0000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r3, 0x0, 0x100000002) 15:10:31 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = dup(0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000080), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnexthop={0x40, 0x6a, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 561.652880][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 561.653001][ T7289] Bluetooth: hci8: command 0x1003 tx timeout [ 561.810501][ T27] audit: type=1804 audit(1658848231.233:277): pid=12647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/440/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 15:10:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2400000000000000) [ 561.874230][ T27] audit: type=1804 audit(1658848231.283:278): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/536/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 15:10:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 15:10:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2a00000000000000) 15:10:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x50000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x7, 0xffffffffffff0000}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async, rerun: 32) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) (rerun: 32) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r3, 0x0, 0x100000002) 15:10:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3000000000000000) [ 562.268277][ T27] audit: type=1804 audit(1658848231.693:279): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/537/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 15:10:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3600000000000000) [ 562.378250][ T27] audit: type=1804 audit(1658848231.783:280): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/441/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 [ 562.455113][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.461441][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.733474][ T7307] Bluetooth: hci8: command 0xfc11 tx timeout [ 563.745135][ T3646] Bluetooth: hci8: Entering manufacturer mode failed (-110) 15:11:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz0', "55955d"}, 0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) 15:11:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb) 15:11:26 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3c00000000000000) 15:11:26 executing program 1: syz_open_procfs(0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = dup(0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000080), 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0), 0xc) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnexthop={0x40, 0x6a, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 32) 15:11:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x0) 15:11:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x50000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x7, 0xffffffffffff0000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r3, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x50000) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x7, 0xffffffffffff0000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r6, r3, 0x0, 0x100000002) (async) 15:11:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x10) 15:11:26 executing program 1: syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = dup(0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000080), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0), 0xc) (async) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2000000000000189, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnexthop={0x40, 0x6a, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 616.847700][ T27] audit: type=1804 audit(1658848286.273:281): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/538/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 15:11:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3e) 15:11:26 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) [ 617.006135][ T27] audit: type=1804 audit(1658848286.283:282): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/442/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 15:11:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x48) 15:11:26 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x5900000000000000) [ 620.068599][T12721] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 620.077694][T12721] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 620.085711][T12721] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 620.094186][T12721] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 620.101673][T12721] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 620.109120][T12721] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 620.198187][T12719] chnl_net:caif_netlink_parms(): no params data found [ 620.241509][T12719] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.248751][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.257990][T12719] device bridge_slave_0 entered promiscuous mode [ 620.266811][T12719] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.274225][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.282462][T12719] device bridge_slave_1 entered promiscuous mode [ 620.303308][T12719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.315511][T12719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.341998][T12719] team0: Port device team_slave_0 added [ 620.349669][T12719] team0: Port device team_slave_1 added [ 620.372023][T12719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.380922][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.407493][T12719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.421331][T12719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.428602][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.454712][T12719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.486996][T12719] device hsr_slave_0 entered promiscuous mode [ 620.493991][T12719] device hsr_slave_1 entered promiscuous mode [ 620.500570][T12719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.511582][T12719] Cannot create hsr debugfs directory [ 620.592209][T12719] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.599306][T12719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.606711][T12719] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.614419][T12719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.668047][T12719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.682502][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.691089][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.699428][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.707520][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 620.721855][T12719] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.735536][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 620.744150][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.751388][ T7289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.766420][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 620.776780][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.783911][ T7310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.807352][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.815889][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.824848][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.833929][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.846872][T12719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.858114][T12719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 620.866663][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.889405][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.897275][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.910242][T12719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.225072][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 621.233807][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 621.242283][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 621.250773][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 621.260188][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 621.268742][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 621.277239][T12719] device veth0_vlan entered promiscuous mode [ 621.291706][T12719] device veth1_vlan entered promiscuous mode [ 621.310991][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 621.319177][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 621.328171][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 621.337248][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.349104][T12719] device veth0_macvtap entered promiscuous mode [ 621.360123][T12719] device veth1_macvtap entered promiscuous mode [ 621.376661][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 621.387725][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.398637][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 621.409209][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.419501][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 621.429992][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.439857][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 621.450590][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.461979][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 621.472913][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.483040][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 621.494968][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.505117][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 621.515857][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.527064][T12719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.537469][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 621.546068][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.554537][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.564035][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.575616][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 621.587354][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.597694][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 621.608506][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.618644][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 621.630027][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.640246][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 621.650998][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.662051][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 621.673111][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.683723][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 621.695465][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.705529][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 621.716989][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.728097][T12719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.739550][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.748352][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.820491][ T8951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.835549][ T8951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.853190][ T9055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.853267][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 621.861181][ T9055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.880332][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:11:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) fcntl$dupfd(r0, 0x0, r0) 15:11:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4c) 15:11:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xfdffffff00000000) 15:11:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x0) 15:11:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0d, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 621.934565][ T3646] Bluetooth: hci10: sending frame failed (-49) [ 621.942223][T12721] Bluetooth: hci10: Opcode 0x1003 failed: -49 15:11:31 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x81, 0x4, 0x4, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0xa, 0x0, 0x0, @empty}, r4}}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={r5, 0x51, 0x1, [0x20, 0xfffffffffffffffd, 0x9, 0x7, 0x7], [0x528, 0x100000001, 0xff, 0x3ff, 0x9778, 0x1, 0xfff, 0x6, 0x3, 0xe63, 0x9, 0x6, 0x0, 0x2e28, 0x5, 0x7, 0x4, 0x3, 0xaa3, 0xa9f1, 0x7, 0x3495d62d, 0x7ff, 0x4, 0x0, 0x3, 0x3, 0x3, 0xf3f2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x4, 0xfffffffffffffffd, 0x7f, 0xfc9, 0x5, 0x9, 0x3, 0x3, 0x3aaa, 0x80, 0xadd, 0x1, 0x5, 0x1, 0x8, 0x80000001, 0x5, 0x508, 0x5, 0x0, 0x3, 0x1, 0x4, 0x75f2, 0x7, 0xffff, 0x5, 0x6, 0xe6, 0x4, 0x0, 0x401, 0x32ac, 0x7fffffff, 0x8, 0xfffffffffffff000, 0xac, 0x3, 0x9, 0x7, 0x5b, 0x2, 0x8, 0x7, 0x100000000, 0x3, 0x7fffffff, 0x5, 0x40, 0x200, 0x400, 0x8000000000000000, 0x80000001, 0xee6, 0x6c, 0x8000000000000001, 0x6, 0x1, 0x1, 0xe3b1, 0xfffffffffffffff9, 0x0, 0x7, 0xbf, 0x5, 0x2, 0x4, 0x7, 0x7f, 0x345, 0x6fcc1d09, 0x957, 0xa5e2, 0x2, 0x101, 0x6, 0x100000001, 0x2, 0x8000000000000001, 0x40, 0x1, 0x6, 0x9, 0x9, 0x100000000, 0x0, 0x7]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={r5, 0x96e0, 0x0, [0x7, 0x8, 0x60, 0x101, 0x2], [0x3, 0x7, 0x0, 0x8, 0x2, 0xfffffffffffffc00, 0x1, 0x8, 0x5, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xb67, 0x3, 0x1, 0x6, 0x18f9, 0x9, 0x7f, 0x80000000, 0x7, 0x7, 0x1f, 0x5f9b, 0x100000001, 0x9, 0x8, 0x8, 0x1, 0x6, 0xb0e, 0x0, 0x81, 0x9, 0x4, 0x7, 0x4000000000000000, 0x6, 0xff, 0xcc0, 0x59f5, 0x8000, 0x3ad5, 0xffffffff, 0x1f, 0x3, 0x0, 0x3, 0x0, 0x1ff, 0x40a, 0x7ff, 0xadf5, 0x8, 0x3ff, 0x0, 0x401, 0x3c607e4b, 0x200, 0x3dd3, 0x100000001, 0x6, 0x1, 0x2f, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9, 0x8000000000000001, 0xfffffffffffffffa, 0x4, 0x2, 0x5, 0x80000001, 0xcf80, 0x1, 0x7fff, 0x100000001, 0x0, 0xd806, 0xffffffff, 0x10001, 0x9, 0x1ff, 0x3, 0x20, 0x8000000000000000, 0xffffffff, 0x7fffffff, 0x7fffffff, 0x8, 0x1, 0x3, 0x7, 0x1, 0x9, 0x400, 0x9, 0xa9fd, 0x5, 0x1, 0x401, 0x5, 0x4, 0xf8, 0x2, 0x3, 0x800, 0xd747, 0x101, 0x40, 0x1f, 0xff, 0x3b, 0x9, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3ff]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000440)={0x0, 0x2, {0x1, @usage=0x100, 0x0, 0x1, 0xffffffffffffff9a, 0xff6, 0x1000, 0xb1, 0x40, @usage=0x4, 0x3, 0xf19, [0x100000000, 0x8001, 0x0, 0xbc0f, 0xfff, 0x1000]}, {0x4, @struct={0x8, 0x8}, 0x0, 0x81, 0x2, 0x9, 0x0, 0x54, 0x400, @struct={0x8, 0x1d68}, 0x7, 0x7fffffff, [0x28, 0x4, 0x80000000, 0xdf, 0x3ff, 0x5]}, {0x0, @struct={0x9, 0x6}, r5, 0xc, 0x1399, 0x8000000000000001, 0xf6, 0x5, 0x400, @usage, 0x800, 0x1000, [0x8, 0x1ff, 0xffffffffffffffff, 0x4, 0x10001, 0x20]}, {0x751, 0x1, 0x1}}) 15:11:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x68) 15:11:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0xffffffff00000000) [ 622.132536][ T27] audit: type=1804 audit(1658848291.553:283): pid=12747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/539/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 622.143238][ T3683] Bluetooth: hci8: command 0x0409 tx timeout 15:11:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6c) 15:11:31 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x81, 0x4, 0x4, 0x9, 0x1}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0xa, 0x0, 0x0, @empty}, r4}}, 0x48) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={r5, 0x51, 0x1, [0x20, 0xfffffffffffffffd, 0x9, 0x7, 0x7], [0x528, 0x100000001, 0xff, 0x3ff, 0x9778, 0x1, 0xfff, 0x6, 0x3, 0xe63, 0x9, 0x6, 0x0, 0x2e28, 0x5, 0x7, 0x4, 0x3, 0xaa3, 0xa9f1, 0x7, 0x3495d62d, 0x7ff, 0x4, 0x0, 0x3, 0x3, 0x3, 0xf3f2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x4, 0xfffffffffffffffd, 0x7f, 0xfc9, 0x5, 0x9, 0x3, 0x3, 0x3aaa, 0x80, 0xadd, 0x1, 0x5, 0x1, 0x8, 0x80000001, 0x5, 0x508, 0x5, 0x0, 0x3, 0x1, 0x4, 0x75f2, 0x7, 0xffff, 0x5, 0x6, 0xe6, 0x4, 0x0, 0x401, 0x32ac, 0x7fffffff, 0x8, 0xfffffffffffff000, 0xac, 0x3, 0x9, 0x7, 0x5b, 0x2, 0x8, 0x7, 0x100000000, 0x3, 0x7fffffff, 0x5, 0x40, 0x200, 0x400, 0x8000000000000000, 0x80000001, 0xee6, 0x6c, 0x8000000000000001, 0x6, 0x1, 0x1, 0xe3b1, 0xfffffffffffffff9, 0x0, 0x7, 0xbf, 0x5, 0x2, 0x4, 0x7, 0x7f, 0x345, 0x6fcc1d09, 0x957, 0xa5e2, 0x2, 0x101, 0x6, 0x100000001, 0x2, 0x8000000000000001, 0x40, 0x1, 0x6, 0x9, 0x9, 0x100000000, 0x0, 0x7]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={r5, 0x96e0, 0x0, [0x7, 0x8, 0x60, 0x101, 0x2], [0x3, 0x7, 0x0, 0x8, 0x2, 0xfffffffffffffc00, 0x1, 0x8, 0x5, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xb67, 0x3, 0x1, 0x6, 0x18f9, 0x9, 0x7f, 0x80000000, 0x7, 0x7, 0x1f, 0x5f9b, 0x100000001, 0x9, 0x8, 0x8, 0x1, 0x6, 0xb0e, 0x0, 0x81, 0x9, 0x4, 0x7, 0x4000000000000000, 0x6, 0xff, 0xcc0, 0x59f5, 0x8000, 0x3ad5, 0xffffffff, 0x1f, 0x3, 0x0, 0x3, 0x0, 0x1ff, 0x40a, 0x7ff, 0xadf5, 0x8, 0x3ff, 0x0, 0x401, 0x3c607e4b, 0x200, 0x3dd3, 0x100000001, 0x6, 0x1, 0x2f, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9, 0x8000000000000001, 0xfffffffffffffffa, 0x4, 0x2, 0x5, 0x80000001, 0xcf80, 0x1, 0x7fff, 0x100000001, 0x0, 0xd806, 0xffffffff, 0x10001, 0x9, 0x1ff, 0x3, 0x20, 0x8000000000000000, 0xffffffff, 0x7fffffff, 0x7fffffff, 0x8, 0x1, 0x3, 0x7, 0x1, 0x9, 0x400, 0x9, 0xa9fd, 0x5, 0x1, 0x401, 0x5, 0x4, 0xf8, 0x2, 0x3, 0x800, 0xd747, 0x101, 0x40, 0x1f, 0xff, 0x3b, 0x9, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3ff]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000440)={0x0, 0x2, {0x1, @usage=0x100, 0x0, 0x1, 0xffffffffffffff9a, 0xff6, 0x1000, 0xb1, 0x40, @usage=0x4, 0x3, 0xf19, [0x100000000, 0x8001, 0x0, 0xbc0f, 0xfff, 0x1000]}, {0x4, @struct={0x8, 0x8}, 0x0, 0x81, 0x2, 0x9, 0x0, 0x54, 0x400, @struct={0x8, 0x1d68}, 0x7, 0x7fffffff, [0x28, 0x4, 0x80000000, 0xdf, 0x3ff, 0x5]}, {0x0, @struct={0x9, 0x6}, r5, 0xc, 0x1399, 0x8000000000000001, 0xf6, 0x5, 0x400, @usage, 0x800, 0x1000, [0x8, 0x1ff, 0xffffffffffffffff, 0x4, 0x10001, 0x20]}, {0x751, 0x1, 0x1}}) [ 622.251089][ T27] audit: type=1804 audit(1658848291.593:284): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/443/cgroup.controllers" dev="sda1" ino=1188 res=1 errno=0 15:11:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x74) 15:11:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7a) [ 623.893978][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.900275][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 15:11:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) fcntl$dupfd(r0, 0x0, r0) 15:11:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x0) 15:11:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0d, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:11:33 executing program 1: r0 = syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x81, 0x4, 0x4, 0x9, 0x1}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0xa, 0x0, 0x0, @empty}, r4}}, 0x48) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r5}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={r5, 0x51, 0x1, [0x20, 0xfffffffffffffffd, 0x9, 0x7, 0x7], [0x528, 0x100000001, 0xff, 0x3ff, 0x9778, 0x1, 0xfff, 0x6, 0x3, 0xe63, 0x9, 0x6, 0x0, 0x2e28, 0x5, 0x7, 0x4, 0x3, 0xaa3, 0xa9f1, 0x7, 0x3495d62d, 0x7ff, 0x4, 0x0, 0x3, 0x3, 0x3, 0xf3f2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x4, 0xfffffffffffffffd, 0x7f, 0xfc9, 0x5, 0x9, 0x3, 0x3, 0x3aaa, 0x80, 0xadd, 0x1, 0x5, 0x1, 0x8, 0x80000001, 0x5, 0x508, 0x5, 0x0, 0x3, 0x1, 0x4, 0x75f2, 0x7, 0xffff, 0x5, 0x6, 0xe6, 0x4, 0x0, 0x401, 0x32ac, 0x7fffffff, 0x8, 0xfffffffffffff000, 0xac, 0x3, 0x9, 0x7, 0x5b, 0x2, 0x8, 0x7, 0x100000000, 0x3, 0x7fffffff, 0x5, 0x40, 0x200, 0x400, 0x8000000000000000, 0x80000001, 0xee6, 0x6c, 0x8000000000000001, 0x6, 0x1, 0x1, 0xe3b1, 0xfffffffffffffff9, 0x0, 0x7, 0xbf, 0x5, 0x2, 0x4, 0x7, 0x7f, 0x345, 0x6fcc1d09, 0x957, 0xa5e2, 0x2, 0x101, 0x6, 0x100000001, 0x2, 0x8000000000000001, 0x40, 0x1, 0x6, 0x9, 0x9, 0x100000000, 0x0, 0x7]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={r5, 0x96e0, 0x0, [0x7, 0x8, 0x60, 0x101, 0x2], [0x3, 0x7, 0x0, 0x8, 0x2, 0xfffffffffffffc00, 0x1, 0x8, 0x5, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xb67, 0x3, 0x1, 0x6, 0x18f9, 0x9, 0x7f, 0x80000000, 0x7, 0x7, 0x1f, 0x5f9b, 0x100000001, 0x9, 0x8, 0x8, 0x1, 0x6, 0xb0e, 0x0, 0x81, 0x9, 0x4, 0x7, 0x4000000000000000, 0x6, 0xff, 0xcc0, 0x59f5, 0x8000, 0x3ad5, 0xffffffff, 0x1f, 0x3, 0x0, 0x3, 0x0, 0x1ff, 0x40a, 0x7ff, 0xadf5, 0x8, 0x3ff, 0x0, 0x401, 0x3c607e4b, 0x200, 0x3dd3, 0x100000001, 0x6, 0x1, 0x2f, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9, 0x8000000000000001, 0xfffffffffffffffa, 0x4, 0x2, 0x5, 0x80000001, 0xcf80, 0x1, 0x7fff, 0x100000001, 0x0, 0xd806, 0xffffffff, 0x10001, 0x9, 0x1ff, 0x3, 0x20, 0x8000000000000000, 0xffffffff, 0x7fffffff, 0x7fffffff, 0x8, 0x1, 0x3, 0x7, 0x1, 0x9, 0x400, 0x9, 0xa9fd, 0x5, 0x1, 0x401, 0x5, 0x4, 0xf8, 0x2, 0x3, 0x800, 0xd747, 0x101, 0x40, 0x1f, 0xff, 0x3b, 0x9, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3ff]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000440)={0x0, 0x2, {0x1, @usage=0x100, 0x0, 0x1, 0xffffffffffffff9a, 0xff6, 0x1000, 0xb1, 0x40, @usage=0x4, 0x3, 0xf19, [0x100000000, 0x8001, 0x0, 0xbc0f, 0xfff, 0x1000]}, {0x4, @struct={0x8, 0x8}, 0x0, 0x81, 0x2, 0x9, 0x0, 0x54, 0x400, @struct={0x8, 0x1d68}, 0x7, 0x7fffffff, [0x28, 0x4, 0x80000000, 0xdf, 0x3ff, 0x5]}, {0x0, @struct={0x9, 0x6}, r5, 0xc, 0x1399, 0x8000000000000001, 0xf6, 0x5, 0x400, @usage, 0x800, 0x1000, [0x8, 0x1ff, 0xffffffffffffffff, 0x4, 0x10001, 0x20]}, {0x751, 0x1, 0x1}}) 15:11:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x300) 15:11:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r2, 0x2, {0x1, 0x1, 0x3}}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00005ed000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 624.133017][T12721] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 624.133409][ T14] Bluetooth: hci10: command 0x1003 tx timeout 15:11:33 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/223, 0xdf, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x2, 0x2, 0x6, 0x9, 0x3, 0x3e, 0x81, 0x12b, 0x40, 0x235, 0x8000, 0x3, 0x38, 0x2, 0x8000, 0x9, 0x2}, [{0x6, 0x26, 0x4, 0xffff, 0x5, 0x0, 0x9, 0x6}, {0x4, 0x7ff, 0x233d, 0x8, 0x1, 0x6, 0x400, 0xfffffffffffffffd}], "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"}, 0x10b0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000240)="3dd8310000b8010000000f01c1f4c744240000000080c7442402ca02ffffc7442406000000000f011424c4e11857bc0f0a0000000f01c3c4e325496ebb0b0fc75d00b8004000000f23c00f21f83503000e000f23f86566660f3881af72000000", 0x60}], 0x1, 0x78, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x401}, @cr4={0x1, 0x20000}], 0x2) r6 = open(&(0x7f0000000300)='./file0\x00', 0xa0080, 0x3e) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 15:11:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x500) 15:11:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async, rerun: 32) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0d, &(0x7f0000000000)) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 15:11:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) fcntl$dupfd(r0, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (async) fcntl$dupfd(r0, 0x0, r0) (async) [ 624.294653][ T14] Bluetooth: hci8: command 0x041b tx timeout [ 624.352794][ T27] audit: type=1804 audit(1658848293.783:285): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/540/cgroup.controllers" dev="sda1" ino=1188 res=1 errno=0 [ 624.393815][ T3646] Bluetooth: hci10: sending frame failed (-49) 15:11:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x600) [ 624.401462][T12721] Bluetooth: hci10: Opcode 0x1003 failed: -49 [ 624.448922][T12816] ptm ptm0: ldisc open failed (-12), clearing slot 0 15:11:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0x200}) 15:11:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x700) 15:11:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x900) 15:11:34 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/223, 0xdf, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x2, 0x2, 0x6, 0x9, 0x3, 0x3e, 0x81, 0x12b, 0x40, 0x235, 0x8000, 0x3, 0x38, 0x2, 0x8000, 0x9, 0x2}, [{0x6, 0x26, 0x4, 0xffff, 0x5, 0x0, 0x9, 0x6}, {0x4, 0x7ff, 0x233d, 0x8, 0x1, 0x6, 0x400, 0xfffffffffffffffd}], "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"}, 0x10b0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000240)="3dd8310000b8010000000f01c1f4c744240000000080c7442402ca02ffffc7442406000000000f011424c4e11857bc0f0a0000000f01c3c4e325496ebb0b0fc75d00b8004000000f23c00f21f83503000e000f23f86566660f3881af72000000", 0x60}], 0x1, 0x78, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x401}, @cr4={0x1, 0x20000}], 0x2) r6 = open(&(0x7f0000000300)='./file0\x00', 0xa0080, 0x3e) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) syz_open_procfs(0x0, 0x0) (async) pread64(r0, &(0x7f0000000140)=""/223, 0xdf, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x2, 0x2, 0x6, 0x9, 0x3, 0x3e, 0x81, 0x12b, 0x40, 0x235, 0x8000, 0x3, 0x38, 0x2, 0x8000, 0x9, 0x2}, [{0x6, 0x26, 0x4, 0xffff, 0x5, 0x0, 0x9, 0x6}, {0x4, 0x7ff, 0x233d, 0x8, 0x1, 0x6, 0x400, 0xfffffffffffffffd}], "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"}, 0x10b0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000240)="3dd8310000b8010000000f01c1f4c744240000000080c7442402ca02ffffc7442406000000000f011424c4e11857bc0f0a0000000f01c3c4e325496ebb0b0fc75d00b8004000000f23c00f21f83503000e000f23f86566660f3881af72000000", 0x60}], 0x1, 0x78, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x401}, @cr4={0x1, 0x20000}], 0x2) (async) open(&(0x7f0000000300)='./file0\x00', 0xa0080, 0x3e) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) 15:11:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000580000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x77f4f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000000100)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) getsockopt$bt_hci(r8, 0x84, 0x3, &(0x7f0000002280)=""/4078, &(0x7f0000000040)=0xfee) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r2, 0x0, 0x100000002) 15:11:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) fcntl$dupfd(r0, 0x0, r0) [ 624.857112][ T27] audit: type=1804 audit(1658848294.283:286): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/446/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 15:11:34 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r2, 0x2, {0x1, 0x1, 0x3}}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00005ed000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r3) (async) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r2, 0x2, {0x1, 0x1, 0x3}}, 0x18) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x4cdc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00005ed000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 15:11:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb00) 15:11:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async, rerun: 64) mmap(&(0x7f0000580000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x77f4f000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x1, 0x84) (rerun: 64) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000000100)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) getsockopt$bt_hci(r8, 0x84, 0x3, &(0x7f0000002280)=""/4078, &(0x7f0000000040)=0xfee) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r2, 0x0, 0x100000002) 15:11:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb98) 15:11:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000580000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x77f4f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) bind$bt_hci(r7, &(0x7f0000000080), 0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000000100)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) getsockopt$bt_hci(r8, 0x84, 0x3, &(0x7f0000002280)=""/4078, &(0x7f0000000040)=0xfee) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000580000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x77f4f000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r6) (async) bind$bt_hci(r7, &(0x7f0000000080), 0x6) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000000100)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) (async) getsockopt$bt_hci(r8, 0x84, 0x3, &(0x7f0000002280)=""/4078, &(0x7f0000000040)=0xfee) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r9, r2, 0x0, 0x100000002) (async) 15:11:34 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/223, 0xdf, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x2, 0x2, 0x6, 0x9, 0x3, 0x3e, 0x81, 0x12b, 0x40, 0x235, 0x8000, 0x3, 0x38, 0x2, 0x8000, 0x9, 0x2}, [{0x6, 0x26, 0x4, 0xffff, 0x5, 0x0, 0x9, 0x6}, {0x4, 0x7ff, 0x233d, 0x8, 0x1, 0x6, 0x400, 0xfffffffffffffffd}], "29a876cb228bb2a5b857f865a488037342345f65c3cccae8e87bc8939eaeb355f9dc1cbd2f3753a6a5df0b766d4319d28301fc1e36cc0a554093bc864d09f9c27f919d9511da2fb88d7bb7363de02f45e3b8c22873202ff26462eada04597157eb56040a405627037f5da94f552b15beaf28d3f198ff93ff12a159e3bc7533b477c893caa13f744c94b913875fa0163a8a764ce8ce0b266d40fd946367269943dcf51dfb7dd7b7df6b77aa717730ca899674a6edb47730eda4a3438b97275cad2365f4210d8bc6a9f776c43c6a6122eacceb2a9039524303c13ec700a0997ab183ec9a073689016b6359dd273acbe649023b0b5dc5a584440d597fdadc590749ea9dd87545559938f7d81d12485980a116af27ba01391f95bed17a1ba44ce8be81df4d1d684aa60461810efc7ba1b40936310532f3cec840b8b854bbde3fc9b28f7ffbe0b89ac1d23d3ed43fe1776afe9dcee67d464d4265dd6924093caf34cd8908bddc59a9d20f8337c246b6628bb2d4ba8adfcb474cb7498cc2cd764aa8264352010086e2e371c28ad9832aba858838a54fc8f003fd1ad68e7926108e22ccd358dfadf982ae6608478ffc9746663255e88651e30a5db29812c08b5acfae48104b33de8837a535250a19e0deed67a65bdc193c91ac4b3748d6334cd48977f46c473f6c1d3f112508353bc17be72060c18f31ce9ce9973650dae109c0888f62643a12adbbeb4171e17f218e6c56adcefb29f534ecbf832d61a2baa9f184bfe6c0f95bfcf54699f1b2de560661f0d4b00bf43d8fc20a4298b8b78d17eb242469d3be21100fcdd7fc17fe47c4599cd20b53c6d85a9e30e267b23c0fd3481fde94a6139a0908f8f2fabdd5cfc8913f237701e86e80a92492bb8a4bcb61f46ab8848ff077b9161eeef29755023011901c2b273f7138cc913723047f11278d237c0519d63a60a31fbb8a968dc4b6063fd30585958053cd287513c8f3229356089e51885af3c7a80b0edd10416215b7708d5d71e43ccbde1c37b8d77eeed55612a2df6fefa6ba7c06f8dff05c5e92edeac3016bb92f0e7744ac51229d98a2e8142afd55de8aaea553c902adfa4c59398a1226d60b28c725ecd9e615240bb8b6c904d133f04b02bfb2697ba325df250a136e8cd1ea8a954e394a5b2f79def7a0dba1589ca5fb7319c376a6f296dfc7e3d26e26a5df1be6b59411e45596d8241d60e6bca92c3c1eb03869d940d04f572cc9c0f544cece9c42288db0cb37f173157afea4564e05d6cb5028f33d99484602a973eeb695226b87de5ea6aaeb10e06fda43acab232029d28e637562d9bef29ef72119d4005381aee58598f3ba9600653b0c5d0d4372dafca038f84b8b39d8f6e1bb720c1239be0ef4c3576ad20fd9605f96d0af72e4c3adc18dfa42b001188fdc9ada84bfb796be7921cf6d6a826f200fb7965a4b67289126aab499b29a2fe94e4680e6dc306eb9030662146e86a628e8d3237109e9b1feca21fff02f04eaa61d705fad4c2cddaf0ae9b152d772b3ae8208dbd31156a7d4605e52906a3b59dec03c62e7ce73975db0fac681d39f9f507335d261b88dd6d2f705f2647625447bca2ee1e69f6029de3466ca7cfa7940dcecaf80ee9fcac3e2dc19408f223e5363e92a0a9893dec7e10ee8e1abcab1336b271246acd7a531385edb76a4f2b0697d41e69773837dbf5ab4f516b171ac07127c8cc82d6e095c7aa1df426ec283284089b20e467cc41bfe8f5bc24416ec2e42af654a6283cb4fddfce75aad6c0220697d8bbe1020abb155e5e5927953d78e3b0ce1b4b1bf205bb67904b75c312089aff4153d2cdb9f3550063a73a8bb45f03887a0cfdad9a3d87ac7e016a376843e16b5454407aed5c7cd3682f87dde045bfc49fddf4e5407a9e3a8e9da0db0695f9e72847494021fceec80b281f0290d246e09be9241727d19eb27b3a7c1cd2dd92a62990cde8a7fb2c2acdd1b16702fdb0e7f9b62d131a11fdb47b00aef5b1f84544a78816b783419fc2c3748b96d1ade2f0542c7af9407f78b57b4da778a929406d94eb725c8bd5bc54a43300d7c16cdca63fe8fc3b0a12ef7c38e35e601c9d8d0d271d097fc0a4b840852ab7a603598a23e2d085c4c52906b2782995c8c5cefd7b69d1be085ef532d3ca39146bd4d72faad2936e1304a7d3fb95a476b384675865d26b5b40441cf403c12f772f23286c4bc5123809fb69cd689fe85fee2943cd1f3f9ace21398b2cd3d1f4be8b34fe49dad86f4b7ec7282895b30c4a97ff794379724829f06eac52304775644901f8a6e5609dfc0fc2bb0f596354b338a59f772b589a46e71e0361df189c716487356c1fe850b15c73b7e7ce4abce4a1b5ad6f97fde49affe0e5129c5f802e1620fce075d254b92c22008795a7fc8b3f5c7f89f6b682a96232c64a7851d35ae172ae2083bacaf6fb29e9053cb3da7a732c19198f944e52e24d97f625e8d0a306041a5c48053606f61bfed279d48e1ceb8b39982cd48c69c3b14339e54092d630dc0c716eafc4af385b728b208b24883f627cab4e1449cba5ff0a43235cf0cb9183f58f213265424bd60bb70207f81baf51b720f76ca979f44bab52b314b439beb10d7eb373e5b30ae6275afb498ccb7ebd3b961296b9615629ec7676eeea918800e32a1184bd542bf61a13f28bbd3886419ce7e849335ba5f317bb72f09dd07787a917e1384647e12495afefe082d3e9a868a0c06428dbaea8f09b4ffdd29ad4f76571ff65f2d9db6a8f1f9139f06b34bc1ae408bd1ba4db2910c882bdb70f1c11936025dfda99c133d188c5a2ddf02dcf05444a2478a3aee64613c31e75417d60ed010335b1616d043b4c613687d6650e596f03d01bfd8a47abb1a5fe5024fe897e29fc495f85ba3339f8b522f81b8f5a1c6a064a12212b0e07d72f539c0c599c4f12eb370084c5b8de867c06bb60d82f1102a64e3bd502f09e4c4c3ccf9e2f08dbeb13d7f27e3f2d426dcaecba8cff8dae88d89521ee11f0190b15245de8a055ece678a604cc75fe0de80c1b659e25ef6958fc8ce00d9838fa2dd52202ec6baebdd8ad0a713d470fb0704b6b508bf9cb54b8577c0677816c417981e49f1e08e7e243892fbfa792c6d1865e4c386a8a4e4aeee4378fe33887cccf6716ae396d2d530044a6b91b7796386a3be770efb4ab88ceb8b026b1a7d4a5a0a162243277632b252c9ad5d51756de145e7ff326f72ad074fef7c0a1524226d79bf1549df761eedf316889481f9acf4169a2798f717e1374e07ee2b1b8708da25a888dd98e2d8aa024d1411d5b1403448af9de0f2872b5cea73989f2c26dbf046f4cb9c174e28b6907ec4531e101d31820ca59bb2968a108bf9041c62f725737be6dc2eb58fbff1d28ad446a49847b498649ac9d5b1d012afab271aacb704121350ce6f7222b7e8a8b51cf2be3a3fffc35cd4da23e22dfb54546846588f25263950f950f3d073a082c3d3f015db8c73cb30ea01dcb448df4ea329115d17f4d587538edc06b7d786c63a18bbbe9529bcf4b245f248afa154b4977f25f1e8f51ab6ad9b7f8775dc369f70f0807e64d74958124361ddae013eb995576848e17f21e02310ad82e6c9ccfdae1d1ac1be161c8119c5c995a0245f78c4d1d6471305351ff10b185a114de3954bb08b3f599f943553888bb989371c4c49d74e0039127d653003b4b701573c8f4689ae7070daa204ae7232ecfce518f3923d9cf799cb3790670ff583497929d521f25fbf9597b0c6aa6794245756605573ace7f78515baa9d224606399a3fec520b47476399f6bd37f06dbf16332e24d8c726d21c81e03c39056b7cbb1a0de38d47b4b392db602d504f8c949ceb8012ad5e2b510176b3ec6110f75063a83af6aaef0f1713ef575973dad713bfd4c664e953bf23e4d38070e14e00cad348d2c245bab5496ecf0f9d16bb65b1b3cc161ae5fd76896427b7067a20324f05cd239d1b590d095b5fae406a4a9b9526694b71076ad51a23d8a0d8debfd5c9c6ad029aae356884faa99a9f397000663129d396f97b7cb0889b3aaaa5897af01ec3b8ae6f9a629c46d1b5864646273266408a72c0c509fd392de54611af851a80be9d82f7b27bf96a48de2d2b800070c6581c730c34c0ee6c870bd594e88ff77fc0158ad6a85819838b95e6a46b217e78ef58e715dc0e09a512ae6609f1b1e2a1a19c36011df917d3ff9a010692b084d55c12cd83cf0de435ea031e8b133ae5908bf8a8cfe1c864d58cb04a261dae526d74d325b91c89ca9755109c565ac1f93f2e6f51c6b87f92c7e4dfc64e3ef03eeda2fe2818ca203e4bb132a4acabca92c8fdd44258250ed4323b647a152a3e0d8383c20dcfac6eee8898a81379581b07029ed5bf228316be6ccf97fbfd2dd450b3dbe85c02909487144c550568f16877b3f483ca95f173530e0d20cbceeba755e032af41f3d62ef0a438ffc7b7512e45aef3106564926115deaae5f6d27e38df2cd6b629d00526ed29cdaacd3ddd05a185a481613e14f8b67865da611e2d94288ae194da185b985bbabb51e8e6efb6a183fca85d4fb0c315074f32e95d3d1081b0f330c569eaed72a49768a08205eaf52c67e964dca9bb074db0f66db50455805af6915fe38e5130b621275d6c7c13e7fcad512530f053fd649e12489cc409e82c5d433818ed9a9c14b82108cbb9abab58eb967b6fdd8db319bbee82f43940578e491081a07376004af617c59b0c7aa1b5be8a6cfcdeb372cdeff22bfe406bcadbc903bf02d1b70b91fd30893a0df8b7a996ae3e16c7e9f34613e96bb0ceb32c43da0f79c81c8ae78ab5039aec013aad1303cfbaab00ef7a5052795a1252e644befa7417c039ac94fe8f73c4a6a837ff8c3f61546f388a2186c45cd43d4e3336cb593b7adcaad57151b3008ffa891db2ec438ff4748ae7df2d7031a83f1e122cf20e6f792259adfc32fc955488d24791405e762887d5d447cb72b494209276b14d38eaf5a9ad88278e49969b5644fbd550708177f83ba7e4bc4c07dbb89dea8cc7458477013f0a090012f42c3a4ea6ab89c893544611f56e8bbec9279b8c3e80f76bb91a4a6db1c3ad1cda79963f2ed0e376f1d06368d84b9cfb304dd3496ed81688e4338986a94ad7ee8c4876b0399af94b2aca7782647ef061b38ec82a3cd66a97beb708370635b488c896178b617c1a282c57aec6e0bd12ff3f18c52a0ebe30d5119f6709ff78130875e2b22d59f8e384a996aae6f81954967b70f28b08fbdb748b73f503bf9e6debc9c5d5a5b5f73b5f23d17c500dd37e827ecf6b91df0de59b9583da938b9c182d37f8f95d53c1200273c40b837f8ca728e377c2b1b17477f678463dbeb2fe05664ff2613643fc55de9a190a9253f08d68aaa4b8ea6d86b6f54aa9c3909762900e24febb7f3f7e797fa2d427c444115842fc41595ad0579eba9dfd3f3394aa05f45f4b2d86716af8d0d085c40564ff74a38a9f7dfbbf79d784c6d55ec4998e7cc4489cb9e7215b8577be2533ed740de8ea27191c70a865f84c7343a8022e8937117a7f3863c595c1f1132e8485fa1ff1930bbcdf67e2efb52ab9cccb14d73bb33ab4da253fcbb47cbb420e7e2a8ccd58052464231de835c1e743bc6851f28a06852fa57eeb42a29279a2923bef0705b257578a9488c209d13ad8fbfdf7379898821d6ac0a63ef201b5463084ca1ddbee91874a4befa212bb941a340da8187e0c1aed9a200ab13da3d95ae78ec7d049b2624a8d30a47d1f55914976c3d013b5a38de8952dd6ad49da46f9cf24bb7fc"}, 0x10b0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000240)="3dd8310000b8010000000f01c1f4c744240000000080c7442402ca02ffffc7442406000000000f011424c4e11857bc0f0a0000000f01c3c4e325496ebb0b0fc75d00b8004000000f23c00f21f83503000e000f23f86566660f3881af72000000", 0x60}], 0x1, 0x78, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x401}, @cr4={0x1, 0x20000}], 0x2) (async, rerun: 64) r6 = open(&(0x7f0000000300)='./file0\x00', 0xa0080, 0x3e) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) [ 625.259923][ T27] audit: type=1804 audit(1658848294.683:287): pid=12866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/448/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 625.358443][ T27] audit: type=1804 audit(1658848294.783:288): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/448/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 626.373321][ T7289] Bluetooth: hci8: command 0x040f tx timeout 15:11:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0x200}) 15:11:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc6d) 15:11:36 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x4, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) 15:11:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080), 0x6) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r2, 0x2, {0x1, 0x1, 0x3}}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00005ed000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r3) (async) bind$bt_hci(r4, &(0x7f0000000080), 0x6) (async) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r2, 0x2, {0x1, 0x1, 0x3}}, 0x18) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x4cdc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00005ed000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 15:11:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) [ 626.693100][T12721] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 626.873649][ T27] audit: type=1804 audit(1658848296.303:289): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir537330331/syzkaller.MbRU59/449/cgroup.controllers" dev="sda1" ino=1187 res=1 errno=0 15:11:36 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f00000017c0)='\'', 0x6fffff9}}, 0xee) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4cdc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3600000000000000) 15:11:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0x200}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000040)=0x1d) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0x200}) (async) 15:11:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf27) 15:11:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f0000000680)="27de468c6110dde01791a2be5ac8319f4b55fc70d1b9d195dc35222c6e19cb5206ef90cee108f85c7b5c81f1208365c11f5aecccb2be08252cad936aff532f4cebb288d8d1d04383524c77355f08b4a2f52a08fd38a7e4f3a563cfbeb5a7614332c26e59110447236d8be9804bf93fd5cec3cec4a3fbb66a26c63eb2ef6400e633acdbacdb5c735679b6e8349d9a48c98f9f4319e0e10dcce0d1dea800247511801dd38419ef1bc061b98ae9522ea931e58f4e8b75c599643ff931a24be98943496be38995666c5407aa5f22d7f32d128f", 0xffffff42}}, 0xee) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)="09b897868864c2586a3e447b3d1f18819a0f4330db5dace670eb431ede23ab25cfdb5ea6fcf6cb151cfd04b2e111d3fc2d0746dd8cf79fa35cfcce02f2d6727b7b99ddd4622c3463a9ad8715640528a324e64a8506b879ab0c50a6147bc0ac6611f48f1400c3519623a074165397767cf029bfecd109ca766363cc8a1208feb60d82bdea9cdaed21834721f35e5a63aad48e13ff99d14ffb80fe7cf0c11b66", 0x9f}}, 0x8080) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6fe7, &(0x7f0000000480), &(0x7f00005eb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000051402002dbd7000fcdbdf25080001000100000008000368b6298c8b185b960002000000080003000100000008000100000000000800030002000000080001001100000008000300020000000800010000000000080003000200a45d"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) [ 626.943047][ T143] Bluetooth: hci11: command 0x1003 tx timeout [ 626.949395][ T3646] Bluetooth: hci11: Opcode 0x1003 failed: -110 15:11:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f0000000680)="27de468c6110dde01791a2be5ac8319f4b55fc70d1b9d195dc35222c6e19cb5206ef90cee108f85c7b5c81f1208365c11f5aecccb2be08252cad936aff532f4cebb288d8d1d04383524c77355f08b4a2f52a08fd38a7e4f3a563cfbeb5a7614332c26e59110447236d8be9804bf93fd5cec3cec4a3fbb66a26c63eb2ef6400e633acdbacdb5c735679b6e8349d9a48c98f9f4319e0e10dcce0d1dea800247511801dd38419ef1bc061b98ae9522ea931e58f4e8b75c599643ff931a24be98943496be38995666c5407aa5f22d7f32d128f", 0xffffff42}}, 0xee) (async, rerun: 64) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)="09b897868864c2586a3e447b3d1f18819a0f4330db5dace670eb431ede23ab25cfdb5ea6fcf6cb151cfd04b2e111d3fc2d0746dd8cf79fa35cfcce02f2d6727b7b99ddd4622c3463a9ad8715640528a324e64a8506b879ab0c50a6147bc0ac6611f48f1400c3519623a074165397767cf029bfecd109ca766363cc8a1208feb60d82bdea9cdaed21834721f35e5a63aad48e13ff99d14ffb80fe7cf0c11b66", 0x9f}}, 0x8080) (async) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6fe7, &(0x7f0000000480), &(0x7f00005eb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000051402002dbd7000fcdbdf25080001000100000008000368b6298c8b185b960002000000080003000100000008000100000000000800030002000000080001001100000008000300020000000800010000000000080003000200a45d"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 15:11:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1f00) 15:11:36 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x4, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) syz_open_procfs(0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="9a9500e9000c4951f009aa000066b9230900000f3265f20f11baa0820f0764f4f30f0966b8030000000f23c00f21f86635000008000f23f80f06", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x4, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) (async) 15:11:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2000) 15:11:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x50000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x7, 0xffffffffffff0000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e2be) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0xc0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r3, 0x0, 0x100000002) 15:11:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f0000000680)="27de468c6110dde01791a2be5ac8319f4b55fc70d1b9d195dc35222c6e19cb5206ef90cee108f85c7b5c81f1208365c11f5aecccb2be08252cad936aff532f4cebb288d8d1d04383524c77355f08b4a2f52a08fd38a7e4f3a563cfbeb5a7614332c26e59110447236d8be9804bf93fd5cec3cec4a3fbb66a26c63eb2ef6400e633acdbacdb5c735679b6e8349d9a48c98f9f4319e0e10dcce0d1dea800247511801dd38419ef1bc061b98ae9522ea931e58f4e8b75c599643ff931a24be98943496be38995666c5407aa5f22d7f32d128f", 0xffffff42}}, 0xee) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)="09b897868864c2586a3e447b3d1f18819a0f4330db5dace670eb431ede23ab25cfdb5ea6fcf6cb151cfd04b2e111d3fc2d0746dd8cf79fa35cfcce02f2d6727b7b99ddd4622c3463a9ad8715640528a324e64a8506b879ab0c50a6147bc0ac6611f48f1400c3519623a074165397767cf029bfecd109ca766363cc8a1208feb60d82bdea9cdaed21834721f35e5a63aad48e13ff99d14ffb80fe7cf0c11b66", 0x9f}}, 0x8080) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6fe7, &(0x7f0000000480), &(0x7f00005eb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080), 0x6) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000051402002dbd7000fcdbdf25080001000100000008000368b6298c8b185b960002000000080003000100000008000100000000000800030002000000080001001100000008000300020000000800010000000000080003000200a45d"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, r2}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000001880)={&(0x7f0000000680)="27de468c6110dde01791a2be5ac8319f4b55fc70d1b9d195dc35222c6e19cb5206ef90cee108f85c7b5c81f1208365c11f5aecccb2be08252cad936aff532f4cebb288d8d1d04383524c77355f08b4a2f52a08fd38a7e4f3a563cfbeb5a7614332c26e59110447236d8be9804bf93fd5cec3cec4a3fbb66a26c63eb2ef6400e633acdbacdb5c735679b6e8349d9a48c98f9f4319e0e10dcce0d1dea800247511801dd38419ef1bc061b98ae9522ea931e58f4e8b75c599643ff931a24be98943496be38995666c5407aa5f22d7f32d128f", 0xffffff42}}, 0xee) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)="09b897868864c2586a3e447b3d1f18819a0f4330db5dace670eb431ede23ab25cfdb5ea6fcf6cb151cfd04b2e111d3fc2d0746dd8cf79fa35cfcce02f2d6727b7b99ddd4622c3463a9ad8715640528a324e64a8506b879ab0c50a6147bc0ac6611f48f1400c3519623a074165397767cf029bfecd109ca766363cc8a1208feb60d82bdea9cdaed21834721f35e5a63aad48e13ff99d14ffb80fe7cf0c11b66", 0x9f}}, 0x8080) (async) syz_io_uring_setup(0x3f32, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x6fe7, &(0x7f0000000480), &(0x7f00005eb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) dup(r4) (async) bind$bt_hci(r5, &(0x7f0000000080), 0x6) (async) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) connect$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000051402002dbd7000fcdbdf25080001000100000008000368b6298c8b185b960002000000080003000100000008000100000000000800030002000000080001001100000008000300020000000800010000000000080003000200a45d"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x800) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 15:11:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x270f) 15:11:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e2be) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x1, 0x84) (rerun: 64) bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x83, &(0x7f0000001280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}, 0x1c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000002) 15:11:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3e00) [ 627.474384][ T27] audit: type=1804 audit(1658848296.903:290): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir879874208/syzkaller.fNXWbj/543/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 628.462959][ T3683] Bluetooth: hci8: command 0x0419 tx timeout [ 634.134776][ T3680] kworker/dying (3680) used greatest stack depth: 22016 bytes left [ 643.742877][ T28] INFO: task kworker/u5:7:3655 blocked for more than 143 seconds. [ 643.750824][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 643.758165][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.766919][ T28] task:kworker/u5:7 state:D stack:28392 pid: 3655 ppid: 2 flags:0x00004000 [ 643.776325][ T28] Workqueue: hci6 hci_power_on [ 643.781217][ T28] Call Trace: [ 643.784690][ T28] [ 643.787647][ T28] __schedule+0xa09/0x4f10 [ 643.792127][ T28] ? __mutex_lock+0xa6b/0x1350 [ 643.796990][ T28] ? io_schedule_timeout+0x140/0x140 [ 643.802319][ T28] schedule+0xd2/0x1f0 [ 643.806481][ T28] schedule_preempt_disabled+0xf/0x20 [ 643.814725][ T28] __mutex_lock+0xa70/0x1350 [ 643.819369][ T28] ? hci_dev_do_open+0x25/0x70 [ 643.825463][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 643.831059][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 643.837173][ T28] hci_dev_do_open+0x25/0x70 [ 643.841802][ T28] hci_power_on+0x12e/0x630 [ 643.846453][ T28] ? hci_error_reset+0x130/0x130 [ 643.851422][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 643.857510][ T28] process_one_work+0x991/0x1610 [ 643.862473][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 643.867939][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 643.873079][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 643.878161][ T28] worker_thread+0x665/0x1080 [ 643.882952][ T28] ? __kthread_parkme+0x15f/0x220 [ 643.888004][ T28] ? process_one_work+0x1610/0x1610 [ 643.893699][ T28] kthread+0x2e9/0x3a0 [ 643.897804][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 643.903525][ T28] ret_from_fork+0x1f/0x30 [ 643.907984][ T28] [ 643.912117][ T28] INFO: task syz-executor.4:12169 blocked for more than 143 seconds. [ 643.920272][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 643.927489][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.937688][ T28] task:syz-executor.4 state:D stack:28616 pid:12169 ppid: 3638 flags:0x00004004 [ 643.947023][ T28] Call Trace: [ 643.950319][ T28] [ 643.953352][ T28] __schedule+0xa09/0x4f10 [ 643.957816][ T28] ? io_schedule_timeout+0x140/0x140 [ 643.963188][ T28] schedule+0xd2/0x1f0 [ 643.967300][ T28] schedule_timeout+0x1db/0x2a0 [ 643.972174][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 643.977615][ T28] ? __wait_for_common+0x36f/0x530 [ 643.983023][ T28] ? mark_held_locks+0x9f/0xe0 [ 643.987810][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 643.992828][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 643.998058][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 644.003333][ T28] __wait_for_common+0x378/0x530 [ 644.008284][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 644.014247][ T28] ? out_of_line_wait_on_bit_timeout+0x170/0x170 [ 644.020609][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 644.025890][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 644.031124][ T28] __flush_work+0x56c/0xb10 [ 644.035731][ T28] ? queue_delayed_work_on+0x120/0x120 [ 644.041206][ T28] ? kasan_save_stack+0x2e/0x40 [ 644.046321][ T28] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0 [ 644.052166][ T28] ? mark_held_locks+0x9f/0xe0 [ 644.062401][ T28] ? __cancel_work_timer+0x408/0x570 [ 644.068211][ T28] __cancel_work_timer+0x3f9/0x570 [ 644.080462][ T28] ? cancel_delayed_work+0x20/0x20 [ 644.085960][ T28] ? rcu_read_lock_sched_held+0x3a/0x70 [ 644.091526][ T28] ? trace_contention_end+0xea/0x150 [ 644.102337][ T28] ? __mutex_lock+0x231/0x1350 [ 644.107370][ T28] ? kasan_quarantine_put+0xf5/0x210 [ 644.116133][ T28] ? hci_dev_do_close+0x25/0x70 [ 644.121046][ T28] hci_dev_close_sync+0x88/0x1140 [ 644.126297][ T28] ? hci_dev_open_sync+0x2130/0x2130 [ 644.131606][ T28] ? kfree+0xe2/0x4d0 [ 644.135696][ T28] hci_dev_do_close+0x2d/0x70 [ 644.140404][ T28] hci_unregister_dev+0x1bf/0x540 [ 644.145587][ T28] hci_uart_tty_close+0x23c/0x290 [ 644.150752][ T28] ? hci_uart_close+0x70/0x70 [ 644.155832][ T28] tty_ldisc_close+0x110/0x190 [ 644.160627][ T28] tty_ldisc_kill+0x94/0x150 [ 644.170926][ T28] tty_ldisc_hangup+0x30b/0x680 [ 644.176096][ T28] __tty_hangup.part.0+0x40a/0x830 [ 644.181225][ T28] tty_ioctl+0xccd/0x15e0 [ 644.192696][ T28] ? tty_fasync+0x390/0x390 [ 644.197275][ T28] ? __ct_user_exit+0xff/0x150 [ 644.202078][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 644.207070][ T28] ? __fget_files+0x26a/0x440 [ 644.211775][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 644.218744][ T28] ? tty_fasync+0x390/0x390 [ 644.223399][ T28] __x64_sys_ioctl+0x193/0x200 [ 644.228216][ T28] do_syscall_64+0x35/0xb0 [ 644.232781][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 644.238703][ T28] RIP: 0033:0x7f0f1ea89209 [ 644.243199][ T28] RSP: 002b:00007f0f1fb03168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.251635][ T28] RAX: ffffffffffffffda RBX: 00007f0f1eb9c030 RCX: 00007f0f1ea89209 [ 644.259724][ T28] RDX: 0000000020000140 RSI: 0000000000005437 RDI: 0000000000000003 [ 644.268437][ T28] RBP: 00007f0f1eae3161 R08: 0000000000000000 R09: 0000000000000000 [ 644.281754][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.290683][ T28] R13: 00007ffd8ddf67cf R14: 00007f0f1fb03300 R15: 0000000000022000 [ 644.301607][ T28] [ 644.305963][ T28] [ 644.305963][ T28] Showing all locks held in the system: [ 644.314799][ T28] 1 lock held by rcu_tasks_kthre/12: [ 644.320792][ T28] #0: ffffffff8bd864f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 644.331654][ T28] 1 lock held by rcu_tasks_trace/13: [ 644.337146][ T28] #0: ffffffff8bd861f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 644.348414][ T28] 1 lock held by khungtaskd/28: [ 644.353593][ T28] #0: ffffffff8bd87040 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 644.363840][ T28] 2 locks held by getty/3280: [ 644.368644][ T28] #0: ffff888025a50098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 644.378880][ T28] #1: ffffc90002d162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0 [ 644.389452][ T28] 3 locks held by kworker/u5:2/3643: [ 644.395084][ T28] #0: ffff88807ad77138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 644.408155][ T28] #1: ffffc9000321fda8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 644.419904][ T28] #2: ffff888021ffd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0x25/0x70 [ 644.430359][ T28] 3 locks held by kworker/u5:3/3646: [ 644.435781][ T28] #0: ffff88803809b938 ((wq_completion)hci10){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 644.446206][ T28] #1: ffffc9000323fda8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 644.458084][ T28] #2: ffff888038965048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0x25/0x70 [ 644.471163][ T28] 3 locks held by kworker/u5:7/3655: [ 644.478597][ T28] #0: ffff88802ee1f138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 644.493682][ T28] #1: ffffc90003cdfda8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 644.506530][ T28] #2: ffff8880363cd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0x25/0x70 [ 644.516337][ T28] 3 locks held by syz-executor.4/12169: [ 644.521879][ T28] #0: ffff88802affe1c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 644.533134][ T28] #1: ffff88802affe098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x61/0xb0 [ 644.543491][ T28] #2: ffff8880363cd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x25/0x70 [ 644.553399][ T28] 3 locks held by syz-executor.4/12639: [ 644.559046][ T28] #0: ffff88803e4011c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 644.568664][ T28] #1: ffff88803e401098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x61/0xb0 [ 644.578656][ T28] #2: ffff888021ffd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x25/0x70 [ 644.588514][ T28] 3 locks held by syz-executor.4/12907: [ 644.594456][ T28] #0: ffff8880820551c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 644.604696][ T28] #1: ffff888082055098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x61/0xb0 [ 644.614414][ T28] #2: ffff888038965048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x25/0x70 [ 644.624464][ T28] [ 644.628292][ T28] ============================================= [ 644.628292][ T28] [ 644.637233][ T28] NMI backtrace for cpu 1 [ 644.641659][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 644.651016][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 644.661060][ T28] Call Trace: [ 644.664349][ T28] [ 644.667286][ T28] dump_stack_lvl+0xcd/0x134 [ 644.671890][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 644.677181][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 644.682392][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 644.688658][ T28] watchdog+0xc18/0xf50 [ 644.692822][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 644.698908][ T28] kthread+0x2e9/0x3a0 [ 644.702978][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 644.708614][ T28] ret_from_fork+0x1f/0x30 [ 644.713045][ T28] [ 644.716482][ T28] Sending NMI from CPU 1 to CPUs 0: [ 644.721710][ C0] NMI backtrace for cpu 0 [ 644.721720][ C0] CPU: 0 PID: 9134 Comm: kworker/u4:54 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 644.721740][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 644.721752][ C0] Workqueue: bat_events batadv_nc_worker [ 644.721843][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x83/0x140 [ 644.721868][ C0] Code: 3c 02 00 0f 85 a4 00 00 00 48 03 1c ed a0 18 80 8b 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 20 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 87 00 00 00 48 8d 7b 18 48 8b 6b 20 48 b8 00 00 00 00 00 fc [ 644.721886][ C0] RSP: 0018:ffffc900061dfb98 EFLAGS: 00000246 [ 644.721900][ C0] RAX: dffffc0000000000 RBX: ffff8880b9a3adc0 RCX: ffffffff815e8891 [ 644.721913][ C0] RDX: 1ffff110173475bc RSI: 0000000000000002 RDI: ffff8880b9a3ade0 [ 644.721925][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8dbcf6d7 [ 644.721937][ C0] R10: fffffbfff1b79eda R11: 0000000000000001 R12: 0000000000000001 [ 644.721948][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000222 [ 644.721960][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 644.721978][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.721991][ C0] CR2: 00005644ef6a0520 CR3: 000000000ba8e000 CR4: 00000000003506f0 [ 644.722003][ C0] DR0: 0000000000000000 DR1: 0000000000000923 DR2: 0000000000000000 [ 644.722014][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 644.722025][ C0] Call Trace: [ 644.722030][ C0] [ 644.722036][ C0] rcu_read_lock_sched_held+0x25/0x70 [ 644.722065][ C0] lock_release+0x560/0x780 [ 644.722083][ C0] ? batadv_nc_worker+0x849/0xfa0 [ 644.722103][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 644.722126][ C0] batadv_nc_worker+0x86b/0xfa0 [ 644.722151][ C0] process_one_work+0x991/0x1610 [ 644.722178][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 644.722201][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 644.722219][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 644.722250][ C0] worker_thread+0x665/0x1080 [ 644.722276][ C0] ? process_one_work+0x1610/0x1610 [ 644.722299][ C0] kthread+0x2e9/0x3a0 [ 644.722316][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 644.722337][ C0] ret_from_fork+0x1f/0x30 [ 644.722366][ C0] [ 644.731232][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 644.731246][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 644.731276][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 644.731288][ T28] Call Trace: [ 644.731294][ T28] [ 644.731301][ T28] dump_stack_lvl+0xcd/0x134 [ 644.731338][ T28] panic+0x2d7/0x636 [ 644.731385][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 644.731420][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 644.731446][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 644.731478][ T28] ? watchdog.cold+0x130/0x158 [ 644.731514][ T28] watchdog.cold+0x141/0x158 [ 644.731541][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 644.731573][ T28] kthread+0x2e9/0x3a0 [ 644.731594][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 644.731620][ T28] ret_from_fork+0x1f/0x30 [ 644.731660][ T28] [ 644.736896][ T28] Kernel Offset: disabled [ 645.035661][ T28] Rebooting in 86400 seconds..