0000000080)='/proc/self/net/pfkey\x00', 0x72d600, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x1000000d}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040)='F', 0x1, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback}, 0x1c) shutdown(r1, 0x0) [ 428.677752][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 428.709012][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:16:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000300)=""/193, &(0x7f0000000400)=0xc1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_vlan\x00'}) fallocate(r1, 0x0, 0x0, 0xfffb) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000180)=0x44) write$P9_RGETATTR(r1, &(0x7f00000001c0)={0xa0}, 0xa0) fallocate(r0, 0x8, 0x0, 0x8000) 08:16:31 executing program 3: socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="ba4c0100", @ANYRES16=r2, @ANYBLOB="6cec6197b59bd6cda1afe80c00000000000080fa9993ab8f00"/36], 0x3}, 0x1, 0x0, 0x0, 0x30040014}, 0x4040000) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000003c0)={0x5, @raw_data="8b42ed7a6bae44690f673ce86dff337a50e61279db2a5f9ae225d9dd50d90550c603eff8f8dfde40c1a0a3709373f5e846602c66a34a835f156dde23584ce7b0f9d5e95e137f231536332d7b61cdeee6c2fc09999da033ef6916681b59e9845a94913df641a389be15c7c1a986f0778558e860bcbe2bbc1aa4bf9efcdd4fdcae38c10c71b40c8b7106649fdf0c9dda8dc6c4a64725f5150bd3467487d9fe2b3ca96ba92991a91951932b4bd443a031f012dbf7a3b42868c9afdacb9f9f2abdf06af2ab0aa4255acb"}) r4 = getpid() r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0\x00', r5, &(0x7f0000000200)='./file0\x00') sched_setscheduler(r4, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp1\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3a8e}, &(0x7f00000000c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d3030303030303130303030303230303034303030302c757365725f69643de44d450207cd195340c91017b2406bbabebe3a9c7ce42908215e1fa1e12d70a4d35295acaf4da397766e4dd2dc8150c5798e81239275f8dce7c84e9d028e2eb06e4e31f363817de84bc40ea48eb34b49a1427c6adacf49351d5325675a4f06ab9d9d5c51efe97c0abc52aefe9ce9be6ff641e00000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = dup(r6) read(r7, &(0x7f0000000780)=""/4096, 0x8539) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) [ 428.863413][T12578] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 428.925068][T12578] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 08:16:31 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x280, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe171}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x455}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x53bd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa0}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) chmod(0x0, 0x101) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff, 0x20, 0x0, 0x0, 0x0, 0x800, 0x8, 0x0, 0x1}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 429.023327][T12607] fuse: Bad value for 'rootmode' 08:16:32 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000000c0)={0x9, r1, 0x2, 0x80000000}) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000000)) 08:16:32 executing program 5: syz_mount_image$hfs(&(0x7f0000001e80)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r3, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), r3, 0x0, 0x2, 0x4}}, 0x20) 08:16:32 executing program 0: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3}) r1 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000280)={0x3, &(0x7f00000001c0)="684ca002148e6737503bd57b7c2069ff1d77792cc45b8aa8201e5d09f8f795489a2ec15d2ecde0f9a9410cb360efe9889a5756a99ccad1d0b9c05b7d1c7e94aa4783d53fe77d76ba571005365ffc807f66091fbb4eeaa334323247121c6a089336f157a455e07e3db858d2ee51106e341f90aa82fe75ae6d2178e1f8756d3ae877366ef02e36c3857782d2"}) syz_open_dev$ttys(0xc, 0x2, 0x0) add_key(&(0x7f0000000580)='logon\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000000)="6cca11d7059e149f105adacc204ca68b4e6441b3c8ae9abf2217528ba1bb", 0x1e, r1) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000140)) [ 429.232651][T12628] fuse: Bad value for 'rootmode' 08:16:32 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x1ff, 0x3, 0x1, 0x3}, @ipv6=@icmpv6={0x4, 0x6, "7af688", 0x1f7, 0x3a, 0x3f, @empty, @dev={0xfe, 0x80, [], 0x1f}, {[@routing={0x88, 0x2, 0x0, 0x5, 0x0, [@local]}, @hopopts={0x6, 0x9, [], [@calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0x3, [0x100, 0x0, 0x0, 0x1, 0x7, 0x8000, 0x400]}}, @jumbo={0xc2, 0x4, 0x7f}]}, @hopopts={0x2c, 0x5, [], [@calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x1, [0x1, 0x4, 0x3, 0x101a]}}]}, @fragment={0xc, 0x0, 0x5, 0x0, 0x0, 0x7, 0x66}, @hopopts={0x5c, 0x21, [], [@hao={0xc9, 0x10, @remote}, @generic={0x4, 0x46, "121bf3e2649bcf4373719edac4b34433aa250e9c3626bf029b83d079c7cd51b048df12b5f8fd9c036f2d5b5efb68d81a3fed774bd9c8cf85ec93f21b431c9102696489d2380a"}, @generic={0x81, 0xac, "6852e120103827c44107b654544253ad6c37e23d6864c4540424f4b2ad9f26746f0860372b971b56eab364d5e3f39440ffa69fbebe8730ae1bcd56d086b25e3175e453f43bafdd5438ae1444c2a9b73b9ab24c5d8f77801da465389125f52424169e9a9288463592256b756154ba8e3b44de2ce6e819a1bfa2e6594a7cabb0bb4745f0a105bedcca65392de930d73c4088820310f882b8538b2aabc5025293b516df36552ccf3bc54b0dfe2a"}]}, @fragment={0x87, 0x0, 0x1, 0x0, 0x0, 0x2, 0x68}], @echo_reply={0x81, 0x0, 0x0, 0x1ff, 0x800, "0bb273fc249d47017061ddf4f52829157d02491be93f61c61e050c48cca3cd63e6d73f5c7348b3c0104fb89c560508"}}}}, 0x229) 08:16:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(r3, 0x0, &(0x7f00000003c0)) dup3(r3, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000680)=@l2tp, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000e00)=""/157, 0x9d}, {&(0x7f0000000ec0)=""/178, 0xb2}, {0x0}], 0x3, &(0x7f0000001080)=""/198, 0xc6}, 0x10001}], 0x2, 0x10040, &(0x7f0000001240)) sendmsg$nl_generic(r4, 0x0, 0x64040014) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = getpid() sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x5, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x2, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x21, 0x1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x40fdf) [ 429.419793][T12634] hfs: unable to parse mount options [ 429.568102][T12641] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined. [ 429.584808][T12634] hfs: unable to parse mount options [ 430.445337][ T9631] Bluetooth: hci0: command 0x1003 tx timeout [ 430.452495][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 432.524222][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 432.531260][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 432.685191][ T0] NOHZ: local_softirq_pending 08 [ 433.324805][ T0] NOHZ: local_softirq_pending 08 [ 434.614591][ T12] Bluetooth: hci0: command 0x1009 tx timeout 08:16:41 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xa996, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x81, 0x8007, 0x1, 0x7608, 0x6, 0x80000000, 0x7, r6}, &(0x7f0000000280)=0x20) 08:16:41 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f0000000100)={&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="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"]], 0x20}, 0x1, 0x0, 0x0, 0x2000a000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) 08:16:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000ffff0600000009000100666c6f7700000000030002000800010000000000"], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0x0, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0xe}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0xd1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000080), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r5, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) getdents64(r4, &(0x7f00000000c0)=""/79, 0xffa0) ioctl$USBDEVFS_RESET(r4, 0x5514) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 08:16:41 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="18379c37", @ANYRES32=0x0], &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e22, 0x5, @remote, 0x5}}, 0x7, 0x1, 0x101, 0x9, 0xa5d}, &(0x7f0000000140)=0x98) r5 = socket$inet6(0xa, 0x3, 0x20000000021) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x0) r6 = socket(0x11, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[], 0x0, 0x0) msgrcv(r7, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgctl$MSG_STAT_ANY(r7, 0xd, &(0x7f0000000380)=""/102) bind$packet(r6, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 08:16:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x6f, &(0x7f0000000040)=0x244, 0x4) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:16:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(r3, 0x0, &(0x7f00000003c0)) dup3(r3, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000680)=@l2tp, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000e00)=""/157, 0x9d}, {&(0x7f0000000ec0)=""/178, 0xb2}, {0x0}], 0x3, &(0x7f0000001080)=""/198, 0xc6}, 0x10001}], 0x2, 0x10040, &(0x7f0000001240)) sendmsg$nl_generic(r4, 0x0, 0x64040014) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = getpid() sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x5, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x2, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x21, 0x1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x40fdf) 08:16:41 executing program 5: rmdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f0000000400)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x80000001}, {&(0x7f0000000340)="e5b3d5fc31ed0dd303ee0b462090fc6218223aff770b6acccb6d7a1b82bc50d502b1afa47c1954f28196f4b76ff6f9eb524924f9fb9344e60bb28749ff992fa978f18cb72cdfe445dcabb76d3f880cc6d29f5ca01ab13a354eadaf97ac7aa7f10de597168c37db42d801554718d1979e3dc6667c64f86f1b459900edfb34fcc76d402eab7a786f26ee8f58527c11a78d889a4c8ec0fc0beaca", 0x99, 0x2}], 0x4801, 0x0) [ 438.883600][T12696] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 438.901373][T12696] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 438.911609][T12696] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 438.947376][T12696] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 438.953915][T12696] EXT4-fs (loop5): mount failed 08:16:42 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000200)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000005, 0x40}, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1}, 0x0, 0x3, r0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) open(&(0x7f0000000300)='.\x00', 0x181300, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f441cb532934e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x3d}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = dup(r4) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000340000705000000ffeb00000000000000", @ANYRES32, @ANYBLOB="00000400130047e5a6c11de6060c1a336205000100000008000080000000000000000000000200"], 0x3}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000fffffffff6ffffff0b0001006d756c746971000008"], 0x3}}, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x4}, {0x0, 0x7}, 0x9, 0x6, 0x9}) splice(r1, 0x0, r3, 0x0, 0x38, 0x0) 08:16:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2, 0x5}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0)) 08:16:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = dup(r1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x0, 0x60, 0x80000000, 0x0, 0x1}) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_aout(r4, &(0x7f0000000800)={{0x108, 0x63, 0xff, 0x30f, 0x52, 0x3, 0x338, 0x9523}, "e4cf1dcf95225bfa3af872075f3a1433c7eb93e5b056902787da9c8b066ebf7245130933076521304e66a5868a46794ce9762fbe96c011e4f0c4d0c34fd66025884e6b80dd98b80e450df1c1d0eb16b964d17eba27e75961acc19fcd28aa3400c64a327725493f1a8e6473a93464296a86c6a13c7e744b15de067f4e0ce5b513f4bf5d8dd14d4a21d924ed6ee917d9eb77f1d63bf21683edc0d71c356c558ec1fd023ef2b3458af2cc72afa9f565ba", [[], [], [], [], []]}, 0x5cf) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r5, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x144, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fcae619}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60369c1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14bf4c51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc309}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62ea58db}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7944ceba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x756b911c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x241b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1875}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41d8af9c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x742c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4daf98c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x561e49c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x970c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4279}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d090c0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66238993}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x647f4eff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e4a3c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19ebe13d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabe3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5238}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65a43ce2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1a8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000}, 0x4805) fallocate(r7, 0x40, 0x100000000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB="eefccd098d351eb8890e643989194bce04e9ff1bb1cc5781a6cb877b5065bb39c1ed29b3877dc0a67076d02b390e159dc5c1cc5f6501983625215ea67feaa4a7b6f19de80050aff29c992e18f6713cf13574c3", @ANYRES16=r5, @ANYBLOB="000125bd7000ffdbdf250300000005002f000100000005002f000000000008000b0007000000050033000200000005002d000100000008003200060000000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 08:16:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') gettid() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000000c0)={{0x5, 0x40}, 'port1\x00', 0x10, 0x1d0808, 0xb48, 0x1, 0xe, 0x1ff, 0x7ff, 0x0, 0x4}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}}, 0x0) [ 439.231958][T12714] BPF: (anon) type_id=1 bits_offset=5 [ 439.260319][T12714] BPF: [ 439.269286][T12714] BPF:Member is not byte aligned 08:16:42 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x80a01, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000280)={0x9, "8dc61a"}, 0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r1, 0x23f, 0x0, 0x0, {{}, {0xe803, 0x410c}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$poke(0x5, r3, 0xfffffffffffffffd, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x42a400, 0x120) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000240)=0x81) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x8001, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d25a80648c63940d0424fc600800184001ac0f00281982c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 439.281084][T12714] BPF: [ 439.281084][T12714] [ 439.300802][T12727] BPF: (anon) type_id=1 bits_offset=5 [ 439.306520][T12727] BPF: [ 439.309493][T12727] BPF:Member is not byte aligned [ 439.314741][T12727] BPF: [ 439.314741][T12727] [ 439.450650][T12738] netlink: 12010 bytes leftover after parsing attributes in process `syz-executor.5'. [ 439.763518][T12740] netlink: 12010 bytes leftover after parsing attributes in process `syz-executor.5'. [ 440.764139][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 440.770297][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 442.844251][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 442.851299][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 444.924154][ T12] Bluetooth: hci0: command 0x1009 tx timeout 08:16:52 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xa996, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x81, 0x8007, 0x1, 0x7608, 0x6, 0x80000000, 0x7, r6}, &(0x7f0000000280)=0x20) 08:16:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000080)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xdf) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pidfd_open(r2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080), &(0x7f0000000400)='\a'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, &(0x7f00000000c0)=""/147}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100)="83453cfbaf939cbc442edbecbb74576e3a849513730ed6db7f1f4995a7391bd90801e189d3f9cb4f28dbefc01bf670a3e15693e16d9a8de10c11e2", &(0x7f0000000140)="fb23efd04940dd", 0x1}, 0x20) ptrace$setopts(0x4200, r2, 0x0, 0x4c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) 08:16:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e23, 0x0, @local, 0xffffffff}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x200000}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 08:16:52 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="2e00000054008105e00f80ecdb4cb9f207c804a01a0000f467fa74f9a8c2100a0002000a0ada1b40d805000300c5", 0x2e}], 0x1}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) mq_getsetattr(r1, &(0x7f0000000040)={0x7, 0x5, 0x3}, &(0x7f00000000c0)) 08:16:52 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="18379c37", @ANYRES32=0x0], &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e22, 0x5, @remote, 0x5}}, 0x7, 0x1, 0x101, 0x9, 0xa5d}, &(0x7f0000000140)=0x98) r5 = socket$inet6(0xa, 0x3, 0x20000000021) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x0) r6 = socket(0x11, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[], 0x0, 0x0) msgrcv(r7, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgctl$MSG_STAT_ANY(r7, 0xd, &(0x7f0000000380)=""/102) bind$packet(r6, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 08:16:52 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='veno\x00', 0x5) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe0c, 0x20c49a, 0x0, 0x27) [ 449.480377][T12756] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. 08:16:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/243) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r2, r2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/243) 08:16:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x100000001, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') [ 449.533049][T12756] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 449.552399][T12756] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.576303][T12756] PF_BRIDGE: br_mdb_parse() with unknown ifindex 08:16:52 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600400001000200000094060434cf6efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) r0 = socket(0x10, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff4e, &(0x7f0000000040), 0x1}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0xc88, 0x2, 0x6, 0x102}) 08:16:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e657665000010000280060005004e2300000400060008400000", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08000400258b0000"], 0x58}}, 0x0) 08:16:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000080)=ANY=[@ANYBLOB='./f\x00'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='squashfs\x00', 0x0, 0x0) [ 449.774548][T12777] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.798361][T12778] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.809410][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.830581][T12779] device geneve2 entered promiscuous mode 08:16:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000058000100100001007564703a7317f646a55099a020cb3ad97b797a300000000044000400200001000300000000000000ff01000000000000000000000000000100000000200002000a00000000000000ff0200000000000000000000000000010000000065e8ccdffeda7ebad67b3b05ecdf5527da48d3127d84bab881a78b70acd44b4ffda1b0e4257f8c4e61d3b497303465ac2841e9d52e12ba7e6ca357534d5e082fc3357bf85683cd356eb43dcda0e30f53be382c4ef4eb78ce14900a25b31339368ee1b5dc07de597778c96a9b2d641ef38eff8f00991e35300f3cdfbc7b998013f27d7c571325f0abf2bd0860c6ee55720a716668"], 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, r2, 0x9, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xeb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r3 = socket$inet(0x2, 0x4, 0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff91cb3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0xc0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f0000000300)={0x18, 0x0, 0x6, {0x7}}, 0x18) [ 449.966278][T12786] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.975957][T12786] tipc: Enabling of bearer rejected, illegal name [ 450.031526][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 450.046633][T12788] device geneve2 entered promiscuous mode [ 451.259411][ T0] NOHZ: local_softirq_pending 08 [ 451.654952][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 451.661069][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 453.724210][ T9616] Bluetooth: hci0: command 0x1001 tx timeout [ 453.730329][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 455.804133][T10872] Bluetooth: hci0: command 0x1009 tx timeout 08:17:03 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xa996, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x81, 0x8007, 0x1, 0x7608, 0x6, 0x80000000, 0x7, r6}, &(0x7f0000000280)=0x20) 08:17:03 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1ac, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa93}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2fa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3196}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20004020) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x6b, 0x7, 0x12, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x6}}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x4000000000002}, 0x16, 0x3) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x212400, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000640)=0x20, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r7, 0x300, 0x200, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0xc010) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) 08:17:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x84000, 0x0) r1 = gettid() ptrace$peek(0xffffffffffffffff, r1, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x1f, 0x4}, 'port1\x00', 0xc1, 0x1, 0x7, 0xff, 0x1d, 0x8, 0xffff, 0x0, 0x2, 0x6}) r2 = memfd_create(&(0x7f0000000140)='s\xf9steme0md5suV\x98~\xb4\xb0\x94\x02t\x03t|\xc6\x1d\xdbm%\x00\xe0!v\xf5\x97\xe7\x9f\xb3%-\v\xac\x8a\xf4\xcdN:<\xb2M0x0], &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e22, 0x5, @remote, 0x5}}, 0x7, 0x1, 0x101, 0x9, 0xa5d}, &(0x7f0000000140)=0x98) r5 = socket$inet6(0xa, 0x3, 0x20000000021) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x0) r6 = socket(0x11, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[], 0x0, 0x0) msgrcv(r7, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgctl$MSG_STAT_ANY(r7, 0xd, &(0x7f0000000380)=""/102) bind$packet(r6, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 08:17:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x12d0, 0x0, 0x1140, 0x0, 0x1140, 0x1140, 0x1238, 0x1238, 0x1238, 0x1238, 0x1238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x10d8, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'nr0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1330) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 08:17:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x50, 0x2, 0x6, 0x505, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x4008000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x501080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2dc}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x29}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x35}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xffff2e4d}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8}]}]}, 0x118}}, 0x20004004) 08:17:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100005070000fa00000000000000001a", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100766574680000c6bfeb21e2e24ee4a8716ee40000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100081050000000000507291450938a8", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b0001006970766c616e00000c000200060001000200000008000500", @ANYRES32=r3, @ANYBLOB="a07ed2028a19a14142e238e66f662038c75c315234a0c73fb0ef16072d42e50e36ca3edc8bf57d4fcf96590292f3d3233cabbae5830b1b337b39fcc990ddebb0e0477ddba97b7ceb33ace6cae9c30f84426b25f8adf33cbce84ad225b9d88e4751cdb5750da26de7c693b4c6518ab1271b37"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x0, &(0x7f0000000000)="080db5055e0b71") 08:17:03 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000240)={0x4, 0x3, &(0x7f0000000140)=[0x3, 0x6, 0x232], &(0x7f00000001c0)=[0x4, 0x6], &(0x7f0000000200)=[0x3, 0x100, 0x7ff]}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) creat(&(0x7f0000000080)='./bus\x00', 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)) [ 460.435694][T12813] xt_CT: No such helper "snmp_trap" [ 460.468104][T12813] xt_CT: No such helper "snmp_trap" [ 460.511011][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 460.511027][ T23] audit: type=1804 audit(1583223423.398:84): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/97/bus" dev="sda1" ino=16895 res=1 08:17:03 executing program 1: ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000040)={0x0, 0x0, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000002b40)) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2d5) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,twofish)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = dup2(r5, r4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12,twofish)\x00'}, 0x58) r8 = socket$alg(0x26, 0x5, 0x0) dup2(r8, r7) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) dup2(r10, r9) socket$alg(0x26, 0x5, 0x0) gettid() stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000002640)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003e40)={{{@in=@local, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 460.580110][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 460.663125][ T23] audit: type=1804 audit(1583223423.408:85): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/97/bus" dev="sda1" ino=16895 res=1 [ 460.691748][ T23] audit: type=1804 audit(1583223423.408:86): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/97/bus" dev="sda1" ino=16895 res=1 [ 460.721647][ T23] audit: type=1804 audit(1583223423.578:87): pid=12845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/97/bus" dev="sda1" ino=16895 res=1 08:17:03 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x2000000000000011, 0x2, r5, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendto$rose(r0, &(0x7f0000000240)="421012daa87baeb774fdc4b7d53acca79943d935b1325b9ee43685b451541357cb83d8f8b91037939a0596d8815f0a09ed15a2410a99972f4f399dd2ec14ef7dc133bd4e95ebb7f716e963969966ab08f011ed8ea25ef2d62461631dafedebfd74e1d261da9fdb7d", 0x68, 0x4004814, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r4, 0x0, 0x9546) [ 460.854841][ T23] audit: type=1800 audit(1583223423.738:88): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16531 res=0 [ 460.887643][ T23] audit: type=1804 audit(1583223423.768:89): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/98/file0" dev="sda1" ino=16531 res=1 [ 460.924707][ T23] audit: type=1804 audit(1583223423.778:90): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/98/file0" dev="sda1" ino=16531 res=1 [ 461.187428][ T23] audit: type=1804 audit(1583223424.078:91): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/98/file0" dev="sda1" ino=16531 res=1 08:17:04 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="18379c37", @ANYRES32=0x0], &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e22, 0x5, @remote, 0x5}}, 0x7, 0x1, 0x101, 0x9, 0xa5d}, &(0x7f0000000140)=0x98) r5 = socket$inet6(0xa, 0x3, 0x20000000021) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x0) r6 = socket(0x11, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[], 0x0, 0x0) msgrcv(r7, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgctl$MSG_STAT_ANY(r7, 0xd, &(0x7f0000000380)=""/102) bind$packet(r6, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 08:17:04 executing program 1: semget(0x1, 0x0, 0x160) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) timer_create(0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvram\x00', 0x8000, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000340)="62c4fec2fe44150ca22349791d578677eb397b2cf4f544adb5070a", &(0x7f0000000400)=""/84, &(0x7f0000001580)="d733f4ea214fc1566e9718c754df711a6bc6d1add954825ff58ca97a1a47045f287b3446e210ada2a4b3de06a0696917f766ee7911ff9c28e1fb2d65e11aa5a9132e828b160e67d6d8c229c8d42fa38d99c727487f526e509ba6ca07ddf4c846a42ef588c473dbd8984a0c796c705978a6ba00c929a33db953d381cbc7b12635ba95a916e768acd14e1445023be61f5a9d", &(0x7f0000001640)="72d30574c6eed162521ecbe807708d68436d67197de07478d8e3f4cb6d2b2300b6f0d041ab80ffc2f112c0986ceb2073ddb146b6cb12280c55ebac386eca76b13d8b8c6a32b85c1712786464c02bca03e4549213659a8a32b4be7250e436ee48dc6798afd8cbb43a51c51df5a9578f54464cfd8534acd34b046d6b771d4f20609abbe176008be8eefcb447de63850301ba233165cbc4769db4b821359b1270990a8c8903d07752b562d7d7b0a4dcc8", 0x8}, 0x38) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) pipe(0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000240)={0x980000, 0x4, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9d0901, 0x4, [], @value=0xfff}}) umount2(&(0x7f0000000540)='./file0\x00', 0x1) openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0xc0900, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001840)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000580), 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x5) dup2(r3, 0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="000000839e0000"], 0x7) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000001700)={r7, 0x4, 0x30, 0xfff, 0x100000000}, &(0x7f0000001740)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={r8, 0x4, 0x3, 0x9, 0x200, 0x2, 0x0, 0xf10, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0xfffffffc, 0x0, 0x0, 0x7}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r9, 0x2}, 0x8) sendmsg$netlink(r2, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) 08:17:04 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) getgroups(0x1, &(0x7f0000000900)=[0xee01]) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r9 = accept(r8, &(0x7f0000000940)=@in={0x2, 0x0, @initdev}, &(0x7f00000009c0)=0x80) r10 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r11 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) pidfd_open(r12, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000000c0)=0x3) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="cd2e05f82d0fd032971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r16, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r17, 0x0, 0x8000, 0x2) r18 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$TIOCGPGRP(r18, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r18, 0x3, r17, &(0x7f0000000740)={0x4}) kcmp(r19, 0x0, 0x2, r17, r16) ioctl$DRM_IOCTL_GET_CLIENT(r15, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r19}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r14, 0xc0585609, &(0x7f0000000480)={0x7, 0xb, 0x4, 0x80000, 0x8, {r22, r23/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x4, "21a981fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r16}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r20, @ANYBLOB=',group_id=', @ANYRESDEC=r21, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r21}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r21) r24 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r25 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r25, 0xae01, 0x0) r26 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r26, 0x5423, &(0x7f00000000c0)=0x3) r27 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b8090000000000000050cf3c52c097150c405ea803a4b403c7681bd195001400000000000000024574682383951e42b06b16ca"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r26, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r27, 0x0, 0x8000, 0x2) r28 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r28, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r28, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r28, 0x3, r27, &(0x7f0000000740)={0x4}) kcmp(r29, 0x0, 0x2, r27, r26) ioctl$DRM_IOCTL_GET_CLIENT(r25, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r29}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r24, 0xc0585609, &(0x7f0000000480)={0x6, 0xb, 0x4, 0x80000, 0x8, {r32, r33/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x2, "21a991fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r26}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r30, @ANYBLOB=',group_id=', @ANYRESDEC=r31, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r24}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r31}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r31) r34 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r34, 0x40045567, 0xea72) fstat(r34, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r21, r31, r35) r36 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r36, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r37 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r37, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r38 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r39 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r39, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r40 = getpid() sched_setscheduler(r40, 0x5, &(0x7f0000000380)) pidfd_open(r40, 0x0) r41 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r42) r43 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r44 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r44, 0xae01, 0x0) r45 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/ptmx\x00', 0x5f3581, 0x0) ioctl$TIOCSETD(r45, 0x5423, &(0x7f00000000c0)=0x3) r46 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="cd2e05f82d0fd032971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r45, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r46, 0x0, 0x8000, 0x2) r47 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$TIOCGPGRP(r47, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r47, 0x3, r46, &(0x7f0000000740)={0x4}) kcmp(r48, 0x0, 0x2, r46, r45) ioctl$DRM_IOCTL_GET_CLIENT(r44, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r48}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r43, 0xc0585609, &(0x7f0000000480)={0x7, 0xb, 0x4, 0x80000, 0x8, {r51, r52/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x4, "21a981fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r45}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r49, @ANYBLOB=',group_id=', @ANYRESDEC=r50, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r43}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r50}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r50) r53 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r54 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r54, 0xae01, 0x0) r55 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r55, 0x5423, &(0x7f00000000c0)=0x3) r56 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b8090000000000000050cf3c52c097150c405ea803a4b403c7681bd195001400000000000000024574682383951e42b06b16ca"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r55, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r56, 0x0, 0x8000, 0x2) r57 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r57, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r57, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r57, 0x3, r56, &(0x7f0000000740)={0x4}) kcmp(r58, 0x0, 0x2, r56, r55) ioctl$DRM_IOCTL_GET_CLIENT(r54, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r58}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r53, 0xc0585609, &(0x7f0000000480)={0x6, 0xb, 0x4, 0x80000, 0x8, {r61, r62/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x2, "21a991fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r55}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r59, @ANYBLOB=',group_id=', @ANYRESDEC=r60, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r53}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r60}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r60) r63 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r63, 0x40045567, 0xea72) fstat(r63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r50, r60, r64) r65 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r65, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r66 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r66, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r67 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r67, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r68 = openat(r1, &(0x7f0000000ac0)='./file0\x00', 0xa0000, 0x0) r69 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r69, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r70 = openat$ion(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ion\x00', 0x80000, 0x0) sendmsg$unix(r1, &(0x7f0000000c80)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000100)="6ec657a04a10d022219d8c9a52bab1be83c0fb16", 0x14}, {&(0x7f00000002c0)="9f281b3402bcfca2cc4be067c984127e8489c336fd2a81ca27811fb4cf846d3b74defc2fae38393e5530a89f883d0f9e4f1768c1a86c96bb6ca17f5e62b1c2ba29ee787837a9c6e157a6077bfd5a66c1d5620010ea3f2d6beafafd6565a7da54033f40dc9606a7bf6d43ced062b501eb8b3179d5aab3c166779773ab3f2c5a9a556b13fa1091a3750f204e89208782e8261f9240a9bad1fc6b43d7ad542fecd4672f18e273eca0d1da1d1ae7393d40ab2883d424065422d37bf0e8b6f0dafdfc960a72d31d49148365b0dbece9e89d7025f4e54cac15a7f9b4505f48f89bcb943f81cf32c5986ff6e5", 0xe9}, {&(0x7f0000000180)="77eecc7b899b6c3dd4fdf020fea1c605c74a4bda1abd36a00d3179fec974ca9c1acaaf5f9cce9f2faaae9ecda43ac267548b170538cfe9e341700b44768084ab7a71612bce52f86a3316057b531a691544d8d9dc5539dceb596eb972be683c9f87d5362a7ca1268aeac0104e732ef307f06b85566dc953b8", 0x78}, {&(0x7f00000003c0)="7bfa25d6d1aa326551e2c2c96c6f7be0a762069a723671fd21c25b8ac8cefb41027db5c99c8ea76e6aac2f138fa8c705a139c7f68956c820c6c15cd1c49b489f08811f952bc1abfb70ac5fe928190686a568b39e7af2432a554d6a8e6ebb36a35b70", 0x62}, {&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="0030f32fb687c73f38217d9d1af3e3f81c290008f19ccddeafee2e8a6f1e35856ac91adbfeceeff440fe107ea64c337f547c21ca76dd7e82ce5bad14f98d0540a2455373bff09767be3632712677eb7298d6bd360cacfc5b99218130efdf3853d16de38f5861a2a78fa5581f2eeb89edd671296e2cddea328870bcb2d26a7e614c2bb7", 0x83}, {&(0x7f0000000600)="d1d02ba2fa6fb3bbb01f3954ac2fc3ba3492d3a7b712e9ebc01b7e1d71795ba4f2c780d7e5b307175dbcea48a40721d9c81441c1eec1a00b81c45517b7433d2c2949258eaa250d504120e9fc89226586151576a0eed77516e09c9c01847bdf3980b0920b49bd1c8c3b48325f6914f7c07c7b671b6644aeafd950302d39ede2c1795aacfa0e6828fa83a8ba722d15f11211900e3463801ad0bd7f87c4976bb421b05c8776f4cfc43715bedc32e9e09c5b", 0xb0}, {&(0x7f00000006c0)="899d18ffc5e15f40ff779176d6c6a79cd4e2537cad2b7f32e570a8c1297e0522f5da8ee17355e8180673eff0f14c59e6ae817f17eb2a7aeac44692ed0df7e5e611e0617c00ebd622cd80d7d5cd385a40cb8f2c9d2ad3867314c22455a568b2e0ca4c80736f63acdf73ca4eb94c350c008032e67050d346619d4fde36b7888278a65180ddacf5331ac4360022229ca062", 0x90}, {&(0x7f0000000200)="c788dfbfaf6bf1cca8cf", 0xa}], 0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r11, @ANYBLOB="1c00000000000000010000ea02000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r35, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=0x0, @ANYRES32=r36, @ANYRES32=r37, @ANYRES32=r38, @ANYRES32=r1, @ANYRES32=r39, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r40, @ANYRES32=r42, @ANYRES32=r60, @ANYBLOB="db560000000020000000000001117a4b640001000130b2de8e973bc759b0ea52f4e97c8edef9ae6c42b3539bd3607852bfe8825938a10b47ea19f73e6c5c87820b40af35fb3cada5e98b8617eaa0c8dc1a5820032d", @ANYRES32, @ANYRES32=r65, @ANYRES32=r66, @ANYRES32=r2, @ANYBLOB="1000000000000000010000000100000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r67, @ANYRES32=r1, @ANYRES32=r68, @ANYRES32=r69, @ANYRES32=r70], 0x161, 0x4000802}, 0x8000) r71 = socket$inet6_tcp(0xa, 0x1, 0x0) r72 = fcntl$dupfd(r71, 0x0, r71) ioctl$PERF_EVENT_IOC_ENABLE(r72, 0x8912, 0x3f) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000040000011000000240001001400010008000108ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e0000002080002000000000008000700000000000c001000080001"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) [ 461.766005][T12878] 9pnet: Insufficient options for proto=fd [ 461.860601][T12878] 9pnet: Insufficient options for proto=fd [ 462.524145][T10872] Bluetooth: hci0: command 0x1003 tx timeout [ 462.530337][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 464.604175][ T9616] Bluetooth: hci0: command 0x1001 tx timeout [ 464.611577][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 466.684319][ T3008] Bluetooth: hci0: command 0x1009 tx timeout 08:17:14 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xa996, 0x10}, &(0x7f0000000200)=0xc) 08:17:14 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000008c0), 0x3}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) semget$private(0x0, 0x5, 0x540) getxattr(0x0, &(0x7f00000003c0)=@known='security.apparmor\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)="9635ab0f9b", 0x5}, {0x0}, {&(0x7f0000000200)}], 0x3) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b0000000ff07000055000100000000000500000040ed468c8044038b40000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4f) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000005c0)={0x18, 0x0, 0x7, {0x3}}, 0x18) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r9 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ubi_ctrl\x00', 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vga_arbiter\x00', 0x530800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@mcast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xfffffffffffffe16) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x4, &(0x7f0000000340)=[{&(0x7f0000000280)="f9777a69c83d6a2b1de8b182139cd01b3edfd35b7f65f10d79c86e4872d1cac2ea9132ee17182b88597def8c8e3eb5d72fd4040064a2bc6ff835284e6160ef7cd8bcec709cb8033079917571e682e6b59b1aca8167e01112352a838f55b5c4646b1d592072940512d916429fee28faf7703393d08a34cb8eeec0af6603d4206ffc2c7b", 0x83, 0x4}, {&(0x7f0000001440)="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", 0x1000, 0x100000000}, {&(0x7f0000000100)="c7a5d65890cbb80dc10c57a9269ca70fd0d7ab2cf584b0f61c9d6012d65c86815688f318df8c15446ad08eacce8c45853a43ba474282995129c82c9c6f555d2a8e706d34cf1bbb18f52daadc94fc304bbdd3f79860ecee1ae59eb1a8ee24dc0f91ceba287f2ebb9acf83c523900d", 0x6e, 0x6}, {&(0x7f0000000640)="5974c18c3f99681fb745c4644c60cd47c4c941336bc1ac7c9f212bdb4cd14a86347a46e3dcc2f32257a6f2ad43de758169af0c8974bc04338bf59884d83256d1bdf13aeab12d53e2bcfee4bdba159e35c1d0400d7fd5797ec5956377db739d5673af74f20dcd3dd3886fb9da0a2f9140f440b519cf6a3c8cdf2f28adc59fbbaeb3d17e47b7b13b11dcd2a3de2ec3de6383c0351a08761026b276e0f98e3d00b205", 0xa1}], 0x200040, &(0x7f0000000980)=ANY=[@ANYBLOB='space_cache,nodatacow,nossd,fragment=data,noenospc_debug,ssd,uid=', @ANYRESDEC=r10, @ANYBLOB="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"]) 08:17:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=""/204, 0xcc, 0xffffffffffffffff}}, 0x10) setuid(0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 08:17:14 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x4) r1 = syz_open_dev$media(&(0x7f0000002f00)='/dev/media#\x00', 0x80, 0x10800) getsockname(r1, &(0x7f0000002f40)=@caif=@dbg, &(0x7f0000002fc0)=0x80) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xe}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4004000) arch_prctl$ARCH_GET_CPUID(0x1011) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c) 08:17:14 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="0300056e49000100001400000000f7ff00000f020200000000bc015bd20000000000420000000000000000000000000000000000000000230000ffffdabe", 0x3e, 0x1c0}]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) 08:17:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfa41, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1, 0x5}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x3, 0x7f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x980911, 0x6, [], @value64=0x3}}) write(r2, &(0x7f0000000180)="dc2c7a7d88c5e6e570b4fe57d5f7f45104c2b1c032a277c8019cdc6855dbc9e3bcef79b38552755b88dfc47ffee00a27dff934cfb5d360b935a4d4075ec27dd5719589096d78e2732c6c1171325c7d5fe05cc93edc5175236f0e0348766a49390fba3bc9691828be3c33952015482ce218703e45e1cc780b7d24354c5ea3dd79c1589d76716bab4a70557a8956", 0x8d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='(vmnet1cgroupself]security+\':procuserGPL-\x00', &(0x7f0000000280)='./file0\x00', r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000340)=""/4096) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000001340)={0x4, 0x7, 0x200, 0x20, '\x00', 0x100}) r5 = openat$cgroup_ro(r2, &(0x7f0000001380)='cgroup.stat\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000001400)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000013c0)=[{}, {}], 0x0, [{}, {}]}, 0x98) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$SIOCAX25DELFWD(r6, 0x89eb, &(0x7f0000001500)={@null, @default}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000001600)={0x5, 0xb, 0x4, 0x2000000, 0x1, {}, {0x1, 0xc, 0x1, 0x6, 0x9, 0x1, "be3aa11a"}, 0x1, 0x4, @fd, 0x2, 0x0, 0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000001680)=0xc54, &(0x7f00000016c0)=0x2) syz_open_dev$vcsu(&(0x7f0000001700)='/dev/vcsu#\x00', 0x9, 0x4000) dup(r4) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/net/pfkey\x00', 0x4c4000, 0x0) ioctl$SOUND_MIXER_INFO(r8, 0x805c4d65, &(0x7f0000001780)) r9 = request_key(&(0x7f0000001800)='big_key\x00', &(0x7f0000001840)={'syz', 0x3}, &(0x7f0000001880)='em0systemvboxnet0%\'\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000018c0)={r9, 0xde, 0xf6}, &(0x7f0000001900)={'enc=', 'raw', ' hash=', {'digest_null-generic\x00'}}, &(0x7f0000001980)="7b2c2a46e6fc12cde9f598e151989a7f9eba14d2f5554e14100bccb6d87523a78ca3fa6d83f56c0be2c55aeef53bb78ccb13df3c6db4b849142c58d98538817410a2f3cbb9dadf6c6a166f59c919a751b38444d16c5cf134c14864ea7d77ab80e552e30e59f6b041eb6d1281f15f9a497b3751f6be9082692adaa822984c4e532ab72de927d757513d398225f0f5ba80a3ccb7bf255fd4add5f85cef3b44414a8006f2a821db133ca9cc2ddc248962a93fc192fcea0b91588badb694a5b06a513c17f2827aeb1a62841ca8a0b5be3adb29ff4df259d6812a9f5a5d830574", &(0x7f0000001a80)=""/246) r10 = syz_open_procfs(0x0, &(0x7f0000001b80)='net/unix\x00') getsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000001bc0)=0x1, &(0x7f0000001c00)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001c40), 0x2, 0xa}}, 0x20) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/zero\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, 0x1407, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x2c}}, 0x0) r12 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001ec0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001f00)=0x1c, 0x80800) setsockopt$inet6_IPV6_ADDRFORM(r12, 0x29, 0x1, &(0x7f0000001f40), 0x4) 08:17:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sysinfo(0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 08:17:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023cd3741ce8074c5fe8524c0306554362ddd4c0617b1ed0cd8cb892ef805ab93a186423f124b7c6a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e3", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x5, 0x8e, 0xe0}}, 0x30) 08:17:14 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket(0xa, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, &(0x7f0000000040)=0x728ce2c10a78b11d) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r6, 0x8001}, &(0x7f0000000080)=0x8) [ 471.535772][T12945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:17:14 executing program 4: getpid() openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x412040, 0x204) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) getpid() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x44, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0xb, @local}]}, 0x44}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @remote}, &(0x7f0000000240)=0xc) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x60, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x65}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40ee000800"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r6, @ANYBLOB="06000e0007000000"], 0x40}}, 0x0) [ 471.578985][T12945] team0: Port device veth3 added 08:17:14 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002e0007031dfffd940101830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) r1 = socket(0x2, 0x80000, 0x2) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) close(r2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast2}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in6=@ipv4={[], [], @local}, 0x4e23, 0x8f7, 0x4e23, 0x30, 0x2, 0x80, 0x80, 0x2e, r3, r4}, {0x6, 0x1f, 0x6, 0x3ff, 0xdde4, 0x7391, 0x3, 0x7}, {0x7, 0x6, 0x1, 0x3}, 0x6, 0x6e6bbe, 0x2, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d2, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3507, 0x6, 0x2, 0x1, 0x1eab351b, 0x7, 0x5}}, 0xe8) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x1, 0x800000000000, @remote}, 0x10) 08:17:14 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) accept4$tipc(r0, &(0x7f0000000080), &(0x7f0000000240)=0x10, 0x80000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @ipx={0x4, 0x0, 0x2, "b2e13dbdd469"}, @in={0x2, 0x4e20, @multicast1}, @can, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='veth1_to_bridge\x00', 0x0, 0x0, 0xba}) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x48090, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 471.732077][T12957] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 471.756681][T12957] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 473.484270][T10872] Bluetooth: hci0: command 0x1003 tx timeout [ 473.491185][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 474.285453][ T0] NOHZ: local_softirq_pending 08 [ 475.568752][T10593] Bluetooth: hci0: command 0x1001 tx timeout [ 475.575586][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 477.644144][T10593] Bluetooth: hci0: command 0x1009 tx timeout 08:17:24 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) 08:17:24 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='reiserfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 08:17:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget(0x3, 0x484) msgrcv(r0, &(0x7f0000000040)={0x0, ""/17}, 0x19, 0x2, 0x3800) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB="011e000005"], 0x1}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x100000000, 0x0, &(0x7f0000000100), 0x127480f, 0x0) 08:17:24 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) accept4$tipc(r0, &(0x7f0000000080), &(0x7f0000000240)=0x10, 0x80000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @ipx={0x4, 0x0, 0x2, "b2e13dbdd469"}, @in={0x2, 0x4e20, @multicast1}, @can, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='veth1_to_bridge\x00', 0x0, 0x0, 0xba}) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x48090, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 08:17:24 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400204) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000000000061102c000000000063010c0000000000950000000000000013183465134439eb5e7a5945ef181a9b3e056885cd03dd098ca51ab6bcbb2596f74941ce2389073cc7169a3a6724a17b80826e315f113fcd87999a1d6ef4f043f1912847b1d5caf03502a893905c563de8101d35d041fab12b7cb9b915f003bbc9906271dd6b33878d97126f4bb571342757533dd070db03d1e4245bdbbc64bbc8fb23166ac5901b985877dadae532a723c2a38bfcb54c5bdae019ce1fdcfcfb1fb268451e0bb009f0f90c9bf4a7d05154273377ddaa40ea9505e05f3ac2f344f3ab02b5d9a6ba90863ed00420aea51c99ad0abe746ee21361c38b46a9959caa080000000000000068671555060c7e041e1121b5a0e419628cbbf88db3df5d1e3696694a3d01add527ecb05797245bce1f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) 08:17:24 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000)={0x1}) sched_setscheduler(0x0, 0x5, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pidfd_open(r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r3, 0x0) unshare(0x40000000) 08:17:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r2}}]}) 08:17:25 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x3}, 0x1c) listen(r0, 0xff2c) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 08:17:25 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) accept4$tipc(r0, &(0x7f0000000080), &(0x7f0000000240)=0x10, 0x80000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @ipx={0x4, 0x0, 0x2, "b2e13dbdd469"}, @in={0x2, 0x4e20, @multicast1}, @can, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='veth1_to_bridge\x00', 0x0, 0x0, 0xba}) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x48090, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 482.193216][T13000] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 482.276690][T12999] IPVS: ftp: loaded support on port[0] = 21 08:17:25 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="f4", 0x1, r2) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'blake2b-256-generic\x00'}}) 08:17:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x61, 0x3, 0x4, 0x8, 0x1, {r1, r2/1000+10000}, {0x2, 0x1, 0x8, 0x40, 0xff, 0x1a, "264e49ae"}, 0xffffff00, 0x3, @userptr=0xff, 0x62, 0x0, 0xffffffffffffffff}) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000140), &(0x7f0000000180)=""/24, 0x18}) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200)={{}, [@null, @netrom, @netrom, @default, @netrom, @rose, @bcast, @default]}, &(0x7f0000000280)=0x48) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f00000002c0)) r5 = openat$full(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ec7}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4c840) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000600)={0x9e0000, 0x2, 0xf7, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x9b0962, 0x7, [], @value=0x8}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000700)={{{@in=@rand_addr=0x80000000, @in6=@rand_addr="81e07fda2d404d0566d0e9d2ccb6b163", 0x4e20, 0x2, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0x21, 0x0, r9}, {0x751, 0x401, 0xb44, 0x1, 0x6, 0x0, 0x7, 0x9}, {0x200, 0x1, 0x5, 0x4}, 0x7, 0x6e6bb8, 0x0, 0x0, 0x3, 0x3}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in=@multicast1, 0x3501, 0x5, 0x2, 0x8, 0x8, 0x40d1}}, 0xe8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000880)={0x980000, 0x3f, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x9909cc, 0x1, [], @string=&(0x7f0000000800)=0x9}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r10, 0x40305652, &(0x7f00000008c0)={0x4, 0x3, 0xfffff800, 0x8, 0x5, 0xee, 0x2248}) r11 = accept$ax25(0xffffffffffffffff, &(0x7f0000000900)={{0x3, @default}, [@default, @default, @null, @null, @rose, @default]}, &(0x7f0000000980)=0x48) flock(r11, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f00000009c0)={0x14, 0x1}) r12 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) ioctl$KDDISABIO(r12, 0x4b37) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa0, r13, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x82, 0xac, "ff9faa3fb2b9bb12f50da41f08073d6caed4f683eb235764c605daa3b03dfb10252ddd045bd2281914d23785384dabc638358446482ac41dde18581ef0e73fc219f2bf15b3b5dadbea0274c828a54d4255fb2a15529bd8841e07eed1d2777eeb098f7998c6e0bfd8c827851ac90210ab7c924efde5b80317bf8c2e73d751"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/bsg\x00', 0x22c043, 0x0) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/hwrng\x00', 0x201, 0x0) write$FUSE_OPEN(r14, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x14}}, 0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000c80)={0x2, [0x80, 0xfff]}, &(0x7f0000000cc0)=0x8) r15 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000d00), 0x80000) preadv(r15, 0xffffffffffffffff, 0x0, 0x8001) 08:17:25 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x0, @sliced={0x0, [0x2, 0x3, 0x0, 0x5, 0x56a2, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfc, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff, 0x401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x20, 0xfff, 0x3ff, 0x0, 0x0, 0xfff7, 0x0, 0x8000, 0x8], 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/79, 0xffa0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)) listxattr(&(0x7f0000001340)='./bus\x00', &(0x7f0000001380)=""/93, 0x5d) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000001300)={0xeaf, 0x31, 0xfffffffe, 0x7}) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 482.598030][T12999] IPVS: ftp: loaded support on port[0] = 21 [ 483.054057][ T9654] tipc: TX() has been purged, node left! [ 484.364109][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 484.370297][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 486.324108][ T9654] tipc: TX() has been purged, node left! [ 486.444077][T10593] Bluetooth: hci0: command 0x1001 tx timeout [ 486.450131][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 488.524221][T10593] Bluetooth: hci0: command 0x1009 tx timeout 08:17:35 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 08:17:35 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) accept4$tipc(r0, &(0x7f0000000080), &(0x7f0000000240)=0x10, 0x80000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @ipx={0x4, 0x0, 0x2, "b2e13dbdd469"}, @in={0x2, 0x4e20, @multicast1}, @can, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='veth1_to_bridge\x00', 0x0, 0x0, 0xba}) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x48090, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 08:17:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getpeername$l2tp(r1, &(0x7f0000000e00)={0x2, 0x0, @multicast1}, &(0x7f0000000e40)=0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe2(&(0x7f0000000a40)={0xffffffffffffffff}, 0x84000) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000a80)={0x2, 0x9, 0x7, 0x81, 0x5, 0x0, 0x2, 0xc1, 0x8, 0x2, 0x4, 0x1, 0x20, 0x40}, 0xe) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/xfrm_stat\x00') r4 = open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000dc0)={0x78, 0xf, 0x3}) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="a400000000010e000000000000000000030000087c00028006000340000000000c00028005000100010000002c000180140003fbffffff0000000000000000e6ffffff0114000400fe88000000000000000000000000010106000340000100001400018008000100ac1e0340000400000c000280050001008800000006000340100100000c000580080001005241530006001240000200002114dfe83440b1a72cfde7d9aa703e608f6608ef85d724293fb356c349be3fa0be440fcbd92a964ccbcfce818e5572fae7a7416727022ce4ee4f7e657dcdf328abc382208ecb64c9edc15fa1bb8548bf2ff5eec3de600061efa5999e6005a4edd7d7bfbad58723f204ad5fe6e05ceaee0bf92d84e66704bd526cd7a6f8c800"/290], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x13248, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r6, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000300)=@ipx, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f0000000880)=""/131, 0x83}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000001480)=""/4096, 0x1000}], 0xa, &(0x7f0000000280)=""/53, 0x35}, 0x120) r8 = open(&(0x7f0000000b00)='./file0/file0\x00', 0x490000, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000f80)={0xffff, 0x2, 0x4, 0x0, 0x3ff, {0x0, 0x7530}, {0x1, 0x0, 0x6, 0x2, 0x80, 0x0, "91788695"}, 0x527, 0x2, @fd, 0x12, 0x0, r9}) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000d00000f020004"], 0x1}, 0x1, 0x0, 0x0, 0x14040804}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000c40)=@assoc_value={0x0}, &(0x7f0000000c80)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000cc0)={r10, @in6={{0xa, 0x4e20, 0x6, @rand_addr="68b9131ff3a9c7148404279f20d4857d"}}}, 0x84) preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) socket$inet6(0xa, 0x2, 0x1) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) utimes(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000f00)={{0x0, 0x2710}, {r11, r12/1000+30000}}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:17:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x2, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x81, 0x7, {"3358cd88dfab17c8a11dc54d14b100aa"}, 0xfffffffffffffffc, 0x2, 0x6}}}, 0xa0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0xd, 0x2) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 08:17:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f24a3aa6bb3019c13bd23212fb56f040026fbfefc41056bd8174b7960317142fa9ea41d8123741c4e345c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965c39e9ef8f6e3968f200e011ea665c45a3449abe802f5ab3e89cf6c06000000000000f16ececb0cd2b6d357b8580218ce740068720000074e468eea3fd2f73902ebcfcf49822775985bf313405b433a8acd715f5888b2007f00000000000000000100000000000000000006a10f58fa64533500000000000000000000000031000000000000000000e75a89faff01210cce39bf405f1e846c12423a164a33e680846f26ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d54740a46792cbf4609646b6c5c29647d2f900"/419], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000640)=r0, 0x4) r2 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001640), 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000040)=@hat={'permhat ', 0x2, 0x5e, ['-:\x00', 'GPL\x00']}, 0x22) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0xf49}, {&(0x7f0000000840)='\x00', 0xff5e}], 0x2, 0x0, 0x0, 0x1a0}, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x412002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x6, 0xffff8000, 0x7, 0x8]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x44020) 08:17:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 493.087986][T13053] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 493.311181][T13053] team0: Device ipvlan1 failed to register rx_handler 08:17:36 executing program 5: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) time(&(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020098000100ef80000000000200019928dbb4da123baefd4c4dce18d5e419fc4a4cf7e59b4e157803000000000000004dd7c3ae00000000000000000000000000005667cbf9a731bf65ea126360d986df2c30a01e908f9aebadb6fdccc42105c823658a36cdc88f8b8757f370d6d1cadf5edf457e7d93239b9a8ab375e527f5d96e6dcd5c93844c68823eabb60dd1d7768a05160cc650f655e27b760923d3e71d02be82bf856374a05ce6579ac937fed13acc000000000000", @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b9ccac064b28045fb5ccc42eb61c605897774bbe080006af12731e934d26bb80df96bf5e21df7559522954af9f969081f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1891ff83bd8103dba937f866fa23cc", @ANYRESHEX, @ANYRESDEC], 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) socketpair(0x0, 0x0, 0x0, 0x0) 08:17:36 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x80, 0x6, 0x7, 0x3, 0x40}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5, 0x5}, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x0, r0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='F', 0x18000, 0x20000013, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) [ 493.662855][ T23] audit: type=1800 audit(1583223456.548:92): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16817 res=0 08:17:36 executing program 3: getpid() tkill(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x800, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x20800, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x453, 0xa03, 0x70bd27, 0x25dfdbff, "9f50a914dff6e2890894f3185c5fcba99febfefba9740283f9fefad7036af790f1c68e0f63ef7bd4abde56bd07deea6d289e32890089accb1c6b741254e3dfc9ceb427e5dec482bcff1ee61f45b2c32d25c6d614039bbf4ed578b1b18c12fe7d01f855f965b9", ["", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x48000) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000002c0)={@any, 0x633}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000d601c82cb41a6ca9fb758c5229c9e01f05e06c84b19df6091fbee1d9fddd0b24b357137ade28816d94f437148d81f29f94c7387678441ae42e64e83d2f959cb7ada484cba3abb7e87ab6a8f617e1", @ANYRES32=0x0], &(0x7f0000000340)=0x8) syz_emit_ethernet(0x50, &(0x7f00000024c0)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x1a, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local, [{}]}}}}}}, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000001c0)={@remote, @broadcast, @remote}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="740000002400f30700000000ddffffff00000000", @ANYRES32=r5, @ANYBLOB="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"], 0x74}}, 0x0) r6 = socket(0x10, 0x80002, 0x74) sendmmsg$alg(r6, &(0x7f0000000180)=[{0xa, 0x1000000000000, &(0x7f0000000100)=[{&(0x7f0000000040)="e588da94b522c2d1f313702948718f407fe7166ac45a790cd2095b44582f3310fb003cb29f9afc1ddb6272a61982d91403b9914e7638a71eab73d729de3c717034a0069e9ed7d8d5fa1979ad04faed8aeb63cac0ab9a4d2927d53b44ef0f6eb8b357571086780d116f40c92841c5a3d72ac31d7abedde3433aa57b7fefb2a6e25f68b39642e8ed4cba1d481661ba"}, {&(0x7f0000000600)="a175aecfc133f10e8096d588d507cb2369905aafe9156c60719627564d1f5841ed3912a4b4d6372b4d52111e6d26ae638675c823527d292fb9cfb0691358daaeed278a87b98817f0efa445e1e8110e40b7979829311002818ea4bfa43e186dbdf71f761f261789a4e4063b30213fc8674cff946703b49ecc157cd063ec3bf08b8f75365561ef81b12e6d77479cb6fba9e4a0e862fe0729da03403caa9b02aff1a185885195"}], 0xe, &(0x7f0000000100)}], 0x126618d46e7cf97, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r11}, @CGW_SRC_IF={0x8, 0x9, r10}]}, 0x24}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r15}, @CGW_SRC_IF={0x8, 0x9, r14}]}, 0x24}}, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={0x0, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @rc={0x1f, @none, 0x57}, @nl=@unspec, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x81, 0x8000000008, 0x3}) 08:17:36 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 08:17:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x10140, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000300)="14b3b1df", 0xffffffffffffffc4, 0x0, &(0x7f0000618000)={0x2, 0x4620, @remote}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0209070709000000e2d6379100fa", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x83, &(0x7f0000000180)={r3}, 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f00000004c0)='system.posix_acl_access\x00', 0x0, 0x47, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r7, 0x0, 0x1, &(0x7f0000000080)='\x00', r8}, 0x30) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000280)) socket$kcm(0x11, 0xa, 0x300) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000480)='system.posix_acl_access\x00', 0x0, 0x123, 0xec77e8342cf30813) dup(0xffffffffffffffff) r9 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r9}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) socket$kcm(0x11, 0xa, 0x300) 08:17:36 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x4320, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 08:17:36 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x200048c1) syz_emit_ethernet(0xfb, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200040, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0x4}, {0xb, 0x3}, {0xe, 0xfffe}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x10d0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) [ 494.308839][T13058] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 494.332433][T13058] team0: Device ipvlan1 failed to register rx_handler 08:17:37 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x58, 0x7d, 0x1, {0x0, 0x51, 0x40, 0x20, {0x20, 0x4, 0x1}, 0x100000, 0x8, 0xc1ae, 0x2, 0x5, 'wlan1', 0x1, ',', 0x8, '*\'}#eth1', 0x10, '^vmnet0Pvboxnet0'}}, 0x58) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x880, 0x0) getsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000180)=""/206, &(0x7f0000000280)=0xce) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = accept4$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x10, 0x80800) write$dsp(r1, &(0x7f0000000340)="fd98ca815b66fb79ac750809c6297b1114ccae6202e6f5e14c3082903e43899212987be5a67b8d81736cffcfb25baa2b65afdd1a80610ae223a2680d27fdba6521eaa754aa6bacd992901081492537c59961a1b9bf830a6a34dcb85f309d1e37f62225", 0x63) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$audion(&(0x7f0000000700)='/dev/audio#\x00', 0x200, 0x10000) r6 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) statx(0xffffffffffffffff, &(0x7f0000000780)='./file1\x00', 0x6000, 0x400, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = syz_open_dev$sg(&(0x7f00000008c0)='/dev/sg#\x00', 0x7, 0x400000) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ubi_ctrl\x00', 0x480a00, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000940)='/dev/urandom\x00', 0x2001, 0x0) r13 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000980)='/dev/vfio/vfio\x00', 0x800, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)=0x0) r15 = geteuid() r16 = getgid() r17 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/mISDNtimer\x00', 0x402442, 0x0) r18 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002d40), &(0x7f0000002dc0)=0x60, 0x80000) r19 = getpgrp(0xffffffffffffffff) r20 = getegid() r21 = clone3(&(0x7f0000003540)={0x0, &(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0), {0x32}, &(0x7f0000003400)=""/113, 0x71, &(0x7f0000003480)=""/72, &(0x7f0000003500)=[0xffffffffffffffff], 0x1}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003680)={0x0, 0x0, 0x0}, &(0x7f00000036c0)=0xc) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000003700)={0x6, 0x3, 0x4, 0x400000, 0xfffffff8, {0x0, 0x2710}, {0x3, 0x1, 0x6, 0x80, 0x9, 0xfb, "48dbbaf9"}, 0xd62, 0x1, @userptr=0x3f, 0x3, 0x0, 0xffffffffffffffff}) pipe2(&(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r26 = getpgid(0x0) r27 = geteuid() r28 = getgid() r29 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000037c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000038c0)=0xe8) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000039c0)={0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000003a00)='./file0\x00', 0x1400, 0x2, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003b40)='./file0\x00', &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r36 = getpid() stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003d40)=0x0, &(0x7f0000003d80), &(0x7f0000003dc0)) statx(0xffffffffffffff9c, &(0x7f0000004000)='./file0\x00', 0x2000, 0x80, &(0x7f0000004040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000004140)='./file0\x00', 0x0, 0x0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r41 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r42 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000004280)='/dev/udmabuf\x00', 0x2) r43 = syz_open_dev$ttys(0xc, 0x2, 0x1) r44 = gettid() r45 = getuid() r46 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000042c0)='/dev/ocfs2_control\x00', 0xc80, 0x0) r47 = accept$alg(r2, 0x0, 0x0) r48 = accept4$tipc(r0, &(0x7f0000004300)=@id, &(0x7f0000004340)=0x10, 0x80000) r49 = syz_open_dev$sndmidi(&(0x7f0000004380)='/dev/snd/midiC#D#\x00', 0x6, 0xc0840) r50 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f00000044c0)=0xe8) r52 = getgid() r53 = getpgid(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004500)='./file0\x00', &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fstat(0xffffffffffffffff, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r56 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004640)=0x0) getresgid(&(0x7f0000004680), &(0x7f00000046c0), &(0x7f0000004700)=0x0) r59 = fcntl$getown(0xffffffffffffffff, 0x9) r60 = getuid() getgroups(0x4, &(0x7f0000004f00)=[0x0, 0xee01, 0xffffffffffffffff, 0xee01]) r62 = gettid() fstat(r3, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004fc0)='./file0\x00', &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r65 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005080)='ns/mnt\x00') r66 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/ocfs2_control\x00', 0x101000, 0x0) r67 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000005100)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005140)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000005240)=0xe8) getgroups(0x5, &(0x7f0000005280)=[0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xee00]) r71 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000052c0), 0x4) pipe(&(0x7f0000005300)={0xffffffffffffffff}) r73 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005340)='/proc/capi/capi20\x00', 0x8840, 0x0) r74 = fcntl$dupfd(r2, 0x406, r3) r75 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000005380)='/proc/self/attr/current\x00', 0x2, 0x0) r76 = socket$phonet(0x23, 0x2, 0x1) r77 = openat$procfs(0xffffffffffffff9c, &(0x7f00000053c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r78 = openat$capi20(0xffffffffffffff9c, &(0x7f0000005400)='/dev/capi20\x00', 0x8040, 0x0) r79 = syz_open_dev$mice(&(0x7f0000005440)='/dev/input/mice\x00', 0x0, 0x200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000059c0)=0x0) lstat(&(0x7f0000005a00)='./file0\x00', &(0x7f0000005a40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000005ac0)='./file0\x00', 0x0, 0xfff, &(0x7f0000005b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r83 = getpgid(0x0) lstat(&(0x7f0000005c00)='./file0\x00', &(0x7f0000005c40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000005dc0)=[{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)="cda5001d97d8a94bdd94ac3ae3f095d9fcce1dc805bbc1c6dcb3d0717953bf8646b121501f8d982fadbf096061249b8e500285c6e74462f3c352eceb316d1bd066c00a54a316beee11e38f0320f6d79099fb9f68a433ba93eee321dcdd9f779a8b0dbfafcbeb6f7840ad2abc17bff694a5cabde732a5845ed98f651325109d98d9bee1fab44e6aebe413ecc1d952e12727102cebe1a87c165da4f70086f5d5ff8cfb", 0xa2}, {&(0x7f0000000500)="f63bc287d070b45175d17cea137cef3f9fe370f170ab3daa408a78c51fa9b08da6dbb801ed687f0ca0a562ee719b9e164b7884708ba83de7a64ed333ce0ea510fb612d59a489f9dcfbed8b3b30efab68737b0b68671613e32291a451c91e3c96260d67bd8d59d8933540ebf8a470a91e061cbcddb7da3ea5c14617d6718202f2581483aad8c55ad6642fc78ff4ed2d7e6b2b38319c104a9d76b0046eb9efcc923cfa03ce10ac3191c9994e6fe0a2b48b2202f2bb2528891914d6cc28f95a531f329e57fd6e95156fd830b5e696d1ac41952bcd399ebbba9441931a6fa28e438af0712043b4309c1d73aea212960e0576bd", 0xf1}, {&(0x7f0000000600)="4f84853bcda37f7621a7665c027481f8dc139d689d10109e70702480708fb72dddfd1d468642145aa51581540de9d8ea9415e1f5d117338c9d6f6de4abc1601a3a6fc7f05df6ebaf7a72ff9bae15fadfd78722ea5cae579a5d4a1fb9dca9c3303f996b450c7d7ec97fb982bd00ee61b1e3f598864f226157ad7449a1450327e71f983bfc359e4d12f55ed6ca09ad71664963b4d035d2c860fca9489c54facd422de3308eb21c8ff82c1325", 0xab}], 0x3, &(0x7f0000002e00)=[@rights={{0x18, 0x1, 0x1, [r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r9, r10, r11, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r2, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xee01, r20}}}], 0xc0, 0x840}, {&(0x7f0000002ec0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002f40)="64191c3fa9f14b9761a605cd", 0xc}, {&(0x7f0000002f80)="451d49b5b82264a353d027b57397f5ed6c5435655c6612f6759d8d9c938f343e9c0cc0fab182f0b1451e60322ba387b3f404d176d41e2767bd2dc56cb952de8635d569a97e396e94d1fa2f28c96e941e31ef0b62d13bbd236e21122e5770578a8a6d5a173798faaf7798ecc4af9f367b8700730ee1417142f5f88b3817bd51fb3fa343c2561c98bd4fb27440ab28d0faacc460baaca4accc0e92be3a71222be30ca7c7c3060b795b74e73e1771f0445485f06e42adb2dd183f85168f02d28d470732ad2f", 0xc4}, {&(0x7f0000003080)="6df6853171a70977a363e18e5a96edc1b3920b376dcda8fa07d7796a957c86015ddd6197a738fc36482890fa8f2798fa668e58c158b8d6f9cf596b3ae4", 0x3d}, {&(0x7f00000030c0)="5795fa15773a9f8927c1ef65e509b2f0a7d13700b6689026ee19", 0x1a}, {&(0x7f0000003100)="06ed6afb047a55d2e8bde2c6efe87a861264b51c353420cc03970b7a24f23e5eab42feaecf1d393f1ca72679cdf836778a77b47962b009975727e5fb2717e0453c96144a666d3ef15e2754747ef2e3e2031bcd6cdf18faf6fdf3", 0x5a}, {&(0x7f0000003180)="72b28f438dd9777d489c074b75f9cc10c8f0ddd9ed7ffdd808a3b11fe3c3ee58cc0070aa96751124a8a79b778d0a0afa99eeee9c72cfe1ab1c222faadae136c21c142a914458511e3cce306186f089246d865547e9a8dd44ce9349310244cade9c1da34f351d555486f61884560f8c4d45738d36ed67d3bafe0170b800e4b7498691ea0c259d10b52dfd9dfa5063b97eede05b28b30c1866", 0x98}, {&(0x7f0000003240)="9643a5209662a9a9e28c056273f9f72c32a6e8e7d6f1fb11fab2e6d5fb25632fa8d838fe76dcca0f5991d375a192b65878c1fa18df3d0f7e079d8e951075220700e26c6c9616adee9aef1b084a89667d2f4d15524f5d7d3cac4f8c8ae7f409d2819266f1803fed9564f3cd128b404a26", 0x70}], 0x7, &(0x7f0000003e00)=[@cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r24, r25, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @cred={{0x1c, 0x1, 0x2, {r32, r33, r34}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r35}}}, @cred={{0x1c, 0x1, 0x2, {r36, r37, r38}}}], 0xf8, 0x804}, {&(0x7f0000003f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000003f80)="26d48fae38f646ba34b62203a4", 0xd}], 0x1, &(0x7f0000004740)=[@cred={{0x1c, 0x1, 0x2, {0x0, r39, r40}}}, @rights={{0x20, 0x1, 0x1, [r41, r42, r43, r0]}}, @cred={{0x1c, 0x1, 0x2, {r44, r45, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r46, r47, r48, r1, r0, 0xffffffffffffffff, r49]}}, @cred={{0x1c, 0x1, 0x2, {r50, r51, r52}}}, @cred={{0x1c, 0x1, 0x2, {r53, r54, r55}}}, @cred={{0x1c, 0x1, 0x2, {r56, r57, r58}}}], 0xf0, 0x4000}, {&(0x7f0000004840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004b00)=[{&(0x7f00000048c0)="9432d220e06f54c0ecaf6704fceb110878e1e1a6dfcdfe9b5301ec100d4e676daddb89c4d8aa6383f17b3f23b15ff7625423f97a4bcc6f6f56fc173b5f6808b00b7ad7", 0x43}, {&(0x7f0000004940)="11908753acc64e463c81823f5bb54efb4b9f24b79e52a74573ac46d323d98403994eeb2af0409e96b372892e5e14816c34f8a00d41f92ae1c6f1277bd15125328c0dbf964835db8b681782f01456ad368d2410d929c83e0d236c08864ed7da4dd40d20e22bbf9a74e9b6b712ad3c4ef859cc6337caf3205a3a20f43c8ffec81e388c8d213efbfe667328152f42d525ba358f934f378b6359cb1a1b3bf3b385e0b41a4ba3628dc11b8ade3f100e8118b9747d1b92875414213694d80dd86ab94da6d3", 0xc2}, {&(0x7f0000004a40)="5e6a1318e4211333068b10928aaf426df8b3fd4ccf169eb5705418c3445588b80e13b23acfffa0d467ed99f7a5b60a02fc060ce2eb9db13c5e786952d08113d589bdc35543f3724b08d58db2d0684cf9cd8f5bbcf07b165ec0783915305820bc722164aa737b12965bdc0a9fabe55613109b17adf9d637bd2a14682bc623af4fa56f75cb3e2b83bc", 0x88}], 0x3, 0x0, 0x0, 0x10}, {&(0x7f0000004b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000004bc0)="08118a4340774def8d93621e7564e54bd3a278c70113c28a5176fc219ca954f38fdfe692d6c185b916c064b64f4ef82fa7416b0f79d77d5ec39944cf52b81d3f1de0ab32ea4cc588fbaf70f85225a6c537feeb72a8f2ebc7666425f59964a715f4b8b57dfc5a5b0d66677157fb61fe0e20d11f88111f579ded4a7d0b2bae16e63b9a502058b5af556aec2e22b8caa964395b60c238ded7b107ea76c6922c77294e9e80d050f5b8a16334d15cbd3d8d77d469314530c9c088d1584f05d66e063f8d91272479c46f9379021dd0b209f784d782c3", 0xd3}, {&(0x7f0000004cc0)="0d7725d6b803778b6afa395a2b64277594173b514f6041264719c0d13cff75a13d179c8a087b28c1bade9703c85f30b3677e2c8fe4a47c291776cba81ecb3c6b5813e1b50e346f9b9771589238c1fcdd9f2ba1d36711784ae0e217a0b9105b15cfa9261e46b38e2a9bcd3dc82397ce144c66157aacf20ba0b1760c811776250ba700a9efebfff71b44df51c5202a6da6595eef7b9367cbbe1edca58707ec0860b4262781a3650a8141b3296c7582", 0xae}, {&(0x7f0000004d80)}, {&(0x7f0000004dc0)="5a8c8d43688a63562cd8756dd6e6e943f9078c71184f3789f7e820a3f2f09528fda9cc1d3c0ab3fee1edc903f2", 0x2d}, {&(0x7f0000004e00)="d387cc125651bb2af2e954447cfb57d1f8236cc407fde5439c2a217fd1527f16b3592f2a724954599599c4a97163bb1849040b4d191ccaa1a62431b6d05107b767ad20ba605d4919f1f9729606e88a179c9ed604cb5a8a7c59db6fccca157803c6a1cf9192423cef586e71ace023510d39cbdc58446a490ff3", 0x79}], 0x5, &(0x7f0000005480)=[@cred={{0x1c, 0x1, 0x2, {r59, r60, r61}}}, @cred={{0x1c, 0x1, 0x2, {r62, r63, r64}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r65, r66, r67]}}, @cred={{0x1c, 0x1, 0x2, {r68, r69, r70}}}, @rights={{0x30, 0x1, 0x1, [r2, r71, r0, r72, r73, 0xffffffffffffffff, r74, r75]}}, @rights={{0x28, 0x1, 0x1, [r1, r76, r2, r77, r78, r79]}}], 0xe0, 0x40}, {&(0x7f0000005580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005980)=[{&(0x7f0000005600)="6200c34686dceaa2407dfdfb4dbeaaba8b89ffdc5cd27e3dfd167af202c94e769c75f47d3740e82d3ec61d4fd0eeb2172c4a02a7f9487828b3084df6228e068286ae22cc3b9fc081593267701288156e4d6945346a5ad5e922e8562d50d8b8ca55833efc4a38da0f48db502b7e4ae3975ec8d7448e5e97a0616b673a0d0e99c50ed962b5b7be8037b4c6dd3c28c6369c9d3c716a8defa04bdaabf96d8d2a659d383bfa0ceec9ae", 0xa7}, {&(0x7f00000056c0)="3641ffec5fb964b3673f2e76a939fe893714da299c87dbc3527231de5acbef03a21e106ac35a99efed8ee2df1e430e1cfd6f641c1f6b9aa6d0a6f5f68a2638285cc600a944519debce5a2da0b93983d19a117e3b88110e7cb4b5e490fda8a2d0f010f6ff30bb15d3ada36ad7e9246e1dd6416697ce9d1a9a61974a9779df7c5a5ce57f69421129a473f99014bf55b1a89992033b9c6a4f94e4d0f916a45b7c4f54c2b0ab25cada73211d02cfabcee3bd0ecd889352a1908a9976df40467219330808db0d64d2a9041159c630c41203fbdf011473df5f86b85b0a430b1f944d", 0xdf}, {&(0x7f00000057c0)="bf781e22dd331558874d18bb84e1f9148c76e9313b7948dcc3e2aabee2e91e2c9d5093e07b805f0b655bac7f284aab57b821c812bd6d5f4aa9734b865dd00be256735f017cba9426ae708c933713dc31cab61fdf28118b48073010fd1f3ea074d71f679263b49028db7bd09d4a23d68dfbc723a373601eed326d7ad6ac90adde6a6aec2ae4ae5c13f9fc25d1214d97067abaff5bff3252d1a965e1fad4c46428be2c0d42b7f03f506a09238081e3fdbc11df0dbb497eea899a2cfab9ebf7cd4b9eba6ea9523b64fccbdb16a5bafa031702125287cb9dbaa8f9ed72ec4ce0b95c8b324ddd2a9067f5485e", 0xea}, {&(0x7f00000058c0)="94250bd22a8300479d814899af5d02d9214baff0c68b0baa885f5552bc33d39c9b9d3879c6faa4d1ff0050f848cf71eeeb520b9da2e4369b81adb33698cbcca738166f05551ae964b97daa44406bf45b78752aa29cb926db95b2eea84014adf1c40b19f1ef386edbdf704ce52ea84059154f04f70052bd1c9a7b1837a87beba818ab2d9e3cbda0cd", 0x88}], 0x4, &(0x7f0000005d80)=[@cred={{0x1c, 0x1, 0x2, {r80, r81, r82}}}, @cred={{0x1c, 0x1, 0x2, {r83, r84, r85}}}], 0x40, 0x800}], 0x6, 0x4000) 08:17:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x2, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x81, 0x7, {"3358cd88dfab17c8a11dc54d14b100aa"}, 0xfffffffffffffffc, 0x2, 0x6}}}, 0xa0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0xd, 0x2) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 08:17:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x40, 0x420000) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x0, 0x0, 0x182022, 0x0) [ 495.018081][T13117] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 495.126486][T13117] team0: Device ipvlan1 failed to register rx_handler 08:17:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000200)={0x40, 0x70, &(0x7f0000000040)="37dbbd587e9e6de9e8329e16c76032a1a5a4ab3751249dd161201ccaef06c5c3a7", {0x5, 0x40, 0x30314752, 0x4, 0x3f, 0x10001, 0x5, 0xe8}}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$P9_RWALK(r5, &(0x7f0000000180)={0x71, 0x6f, 0x2, {0x8, [{0x0, 0x4, 0x4}, {0x0, 0x0, 0x5}, {0x40, 0x1, 0x7}, {0x2, 0x2, 0x8}, {0x2, 0x3, 0x8}, {0x2, 0x2, 0x5}, {0x1, 0x2}, {0x4, 0x2, 0x8}]}}, 0x71) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f00000000c0)={0x0, 0x80000001, 0x6, 0x1000, 0x3, 0x1}) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1ff) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xffc00000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@fat=@flush='flush'}]}) 08:17:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x181c00, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x4) dup2(r1, r0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:17:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8101, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000016c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 08:17:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pidfd_open(r0, 0x0) clone3(&(0x7f0000000340)={0x800200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x23}, &(0x7f0000000200)=""/87, 0x57, &(0x7f0000000280)=""/109, &(0x7f0000000300)=[r0], 0x1}, 0x50) gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pidfd_open(r1, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x15, 0x0, @tid=r1}, &(0x7f00000003c0)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000000)={0x8, 0xf6}) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000000c0)={0x0, 0x0}) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) r4 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x800000015) [ 495.970883][ T2725] Bluetooth: hci0: command 0x1003 tx timeout [ 495.977824][ T9860] Bluetooth: hci0: sending frame failed (-49) 08:17:39 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8, 0x42000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000280)="af41ba5c96d5effc8d198cda9565b0e876da17e38b1406fb04577e95d099ca17de5120d993b59379088c0f303d2d6372caa8edde8b8b52f858a081dddec79d0224b3cc77f46b620963199b11097e63b67403a8b4983493df49a02b31d843ba83cbcaae026f2b4a928e9a1f90e97a48f105", &(0x7f0000000300)=""/201}, 0x20) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r5) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fstat(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r9) write$P9_RSTATu(r3, &(0x7f0000000200)={0x58, 0x7d, 0x1, {{0x0, 0x3f, 0x0, 0x0, {0x8, 0x3, 0x5}, 0x12240000, 0x23, 0xc7, 0x200, 0x4, 'fou\x00', 0x4, 'fou\x00', 0x0, '', 0x4, 'bdev'}, 0x4, 'fou\x00', r5, r7, r9}}, 0x58) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x5, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0xf0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 498.044096][ T2725] Bluetooth: hci0: command 0x1001 tx timeout [ 498.051682][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 500.130050][ T2725] Bluetooth: hci0: command 0x1009 tx timeout 08:17:47 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:17:47 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x5) r1 = socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x7, 0x300) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getpid() openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x103000, 0x0) sched_getparam(r0, &(0x7f00000002c0)) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @loopback}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0207faf9076966207993be7fc25700d4f318434078bab247e2398a83fc53ef045264ca674ee792dba767a808c571965b0b95901f111bc78fd66f912e7e893c33467e950ee47647d8f3ae56039b929eae303729214d68a6dab79e79c473d12c3f8221cc603f77695ec47f9d82d7d9331866e5a4902dac5c3d", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r8, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r9, 0x7, 0x10, 0x7, 0x8}, &(0x7f00000001c0)=0x18) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) 08:17:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8101, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000016c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 08:17:47 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = eventfd(0x2) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r2}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 08:17:47 executing program 1: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@default, @remote, @null, @rose, @bcast, @null]}, &(0x7f00000001c0)=0x40, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000280)={0x8, 'team_slave_1\x00', {'macvlan0\x00'}, 0x1ff}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000440)={0x1, 0xfff, [{0x81, 0x0, 0x200}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x779, @empty}, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002bbd7000fddbdf25020000000800010003000000080001000300000008000100000000ff7f0001000200000008000200020000000800020002000000080001000200000008000200020000000800020002000000"], 0x5c}}, 0x4004040) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r8, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) fchmod(r5, 0x84) dup3(r4, r2, 0x0) 08:17:47 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket(0x2c, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x0, "827bfebad99d4f5486ada8"}, 0xd, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='vboxnet0+cpuset-\'[&trustedeth0\xc7M\x00', r0) add_key$keyring(&(0x7f0000000380)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)='X', 0x1, r1) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, 0x0, r1}, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000f00)='\x03\x11&\xe8\\\x19\xd8\x87o\xb0i\xddi_t-\xfc\xd7\xa8\x9a1{-\xbf!\xd9\xfe\xce\x85\xd6\x9cY\xf4o\xef\x90\xcf\xce\xe7\xfa\xce\xb0\xa02\x19\x93\x1a%CZ\xca\x81\x00\\\x1d\x1c)42\xb2\xdd\xd1\x87|\xe1X\x1aby\xedo\xa2+z\xf6i$\x84s\xd2e\x05\x00\xd1g\xc0\x8c8,TQ\xa8Bz\x96:\xdaq/\xd1\x98\x93\xaf7\x17\xfa\x10\x99\x87\xce\xd5Q\xab;OOPr:i\xd2\xb3-i\x00\xbc\x19M\"\xd5s\x85\xa7Bo|\x95\xd0\xbc\xbc-\x80lS\t-H\x86Y\xe2\xde\xd4K\\\x1dF\x87b\xf2y=\f\x12\x8aw\xfc\x17\xa69/w\xeaH\x80\x90.\xf4\xbf:\x95!RO\x0f\xf3\x02\x01\xa0)\vL/\x81Zo\x0e\v<\xf1_\xd3\xde\x0eB\x01\x8f~\x1f\\@D\xa374z\xaf\xad\xb2=7\xfc\x8b\x1a\x8b\x15\xc0\xfc2\x0eI1Iv\xc9f\x8b\xc5M\xaf\xdf#H\x02\xc6\xa0\x92\x80\x14:\xa9\x82\a\xc6+Z\xea\xa4m\xabL\xb1\x15)\xd4<\xe5\xe4x&\x84\xa3\n\xca\xaey\x87\xf5\xb3<\x8c\xeb\xbe0\xe9\xe7\xbau\x9b\xf5\xcb\xc8\xfb\x97\xcaI\x7f\x85_\xa5\xe0J,\xa0\xef\xe7\xe2\x96\xba\a\xb8\x19\x9d\xd4\xf6\xe7\"\xea7\x06\xa7o\xadB\x05\xdb\x11\xc7\xbcM\xab2\x87\xa8F\x19p\xeb#a;g\x8cyn\xfb3\x95x\xee7\xf7\x02Q$\xfc\x86\xd4\x8cy\x0f\x1b\x1e\xb5\xcf\xd4\xa9\xba\xe4L\xf9\xee\xb3;TP:,\xa8*Z,Du\a\x99\xfb*\x9d\x9a\xed\xd4t\xf4\xad\xf8\x8dj\xfd\xe2\x1e)3>.;\xf8\x16\xed\xdbJ\xd1\x84K\xe6(j\xcb\x93\xbb\xa6]\x82\x85\x0f\xac\xf3\x12}pi\x0f\xe2d\x9e\x0f\\\n\b\x19\x8c!\xc1b\x1c\x15\x89\x1e\x87\xd0\xd6\xef\x05,WI\xce]\xdc\xb3N;:\xd3\xe3\xe3\x02\xc8\xf1\xa6\x92\x06S\x81\xc2\x99\x9eU\xd3\x15R\x1d\a \x0e\x12f\x04\x83?\x96\x18s\x80xw\x99\xcb\x87\x1dj+mp\x18|\xbe;\x12\'y\xc1\x17\xda\x8eb\'\xbel\xe4\xe3\xdaM\a\"|\xe3\xbd|LRk\x01\x1a\x17\x81\xe2\x87k\xe8\xf2\x90\xb4\xe8\xf2\xb3V\x15\xce\xc8NqRJ\x05\xd6tm\xff\b@\xb4\x05\x93\xc7\xcf\xb7M\x13\x96_m0|\x9f\x93\xd6\xe6\xd1\xaa\x1b1\xed\xbfAzI\xb5\xbf\x02\xe59\xb2\xb4\xed\x1a\xab\xe2\x1eS\xd5N0\x9c\x00\xd66fD\xd4\xcbO2v\xa0\xa4\xc8\xf2\\\xee\xa0\xcc\xbf9\xe1\xad\x82\x86\x83\xe7\xac\xaf\xdc\xb5\x04\x80\xe4k\x9dZ\x92i\xa7P\x8b\xe7\x03q.\xff?\xa3\x1e\x97\x9cW\x17ipm>(\x8d\xf8\xf9\xa4\xb4.\x0f\xaeM\x9c\x99\x81\x14\xbf\xbb\xae\xc2:\x1f1\x95%\x96\x86Y\xa8\xab\x85Y)\x85v\x1e\xe9B\xc2IF/9\xa4B\xec\xcc\x9e\xd1\xf8\xeaN\x01\xe0t$SW\xe1\x15\xe5\x1c\xb3,-\x98\xdb\x97\xbc\xf0\xf8[&\x8f\x11\x9fV\x113x\xad\x93\xb8\x87fm\x16\xba\'4\xb9\xaa\x1e\x96p?i\xb4\x98Siym#\x80po\xe9\x87\xde\xb0\x1d\xe3\x01\xe9\xd4\x19\x9b)\xe5ur', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x7fff}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000180)={r3}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x4e21, 0x9, 0x4e24, 0xff, 0xa, 0x0, 0x80, 0x1d, r6, r8}, {0x4, 0xffffffffffffff7f, 0xc8b, 0xff, 0xffffffff00000001, 0x101, 0x5, 0x8}, {0x3, 0x7, 0x81, 0x5}, 0x7fff, 0x6e6bbf, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d3, 0x33}, 0x8, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x1, 0x3, 0x81, 0x3, 0x3, 0x1}}, 0xe8) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x44800, 0x0) unshare(0x60020000) 08:17:47 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000d0000000c00040003000000020000000000000800000000000000"], &(0x7f00000002c0)=""/236, 0x27, 0xec, 0x8}, 0x20) 08:17:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4a00) getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setgroups(0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x10, &(0x7f00000002c0)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x161100, 0x0) bind$nfc_llcp(r3, &(0x7f0000000480)={0x27, 0x0, 0x1, 0x4, 0x0, 0x5, "19dd558cb2638b13737bd566587934fe7256ac5f18e98d990ec6bda2b31d744a7e97277195a025ff73cd0a8db756293856d8d08e35ff49c206c69b133025b1", 0xf}, 0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000040)=0xc) setgroups(0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f00000003c0)={0x8001, 0x40, 0x8, {0x0, 0x1a}, 0xfffffff5, 0x9f}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x6, &(0x7f0000000200)=0x2) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27) socket$netlink(0x10, 0x3, 0x0) [ 504.696512][T13188] BPF:Invalid section offset 08:17:47 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x301002, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000080)={0x2, 0x10000, 0x0, 0x8}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) semget(0x0, 0x0, 0x7b2b962946e7a146) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140)) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x0, 0xffffffffffffffff}) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4008641c, &(0x7f0000002c00)={r5, &(0x7f0000001c00)=""/4096}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={r5}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x424800, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0xd0000, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x220080, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fb0\x00', 0x0, 0x0) lseek(r7, 0x0, 0x3) 08:17:47 executing program 4: sched_setscheduler(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x9, 0x8, 0x4, 0x200000, 0x3, {r0, r1/1000+30000}, {0x5, 0x2, 0x9, 0x9f, 0x2, 0x40, "a32f1af0"}, 0x0, 0x2, @fd=r2, 0x5, 0x0, r3}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000240)=0x8) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20000051) 08:17:47 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080004000c00000010000000140000030000000100000002", 0x69, 0x6}], 0x0, 0x0) 08:17:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r4 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r5 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r5, 0xd, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r6, 0x1, 0x24, 0x0, &(0x7f0000000000)) accept(r3, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl(r7, 0x1000008912, &(0x7f0000000440)="fc18548b5b7b1703166e59fc1d94eb64dafdffff45ec463311cca50d1f7d") r8 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)) getpgid(0x0) listen(r8, 0x2) r9 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r4, 0xb) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff3d}], 0x1, 0x0) io_setup(0xfe, &(0x7f0000000200)) [ 505.296284][ T23] audit: type=1800 audit(1583223468.188:93): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16529 res=0 [ 506.684159][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 506.691232][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 508.764321][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 508.771097][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 510.844100][T10593] Bluetooth: hci0: command 0x1009 tx timeout 08:17:58 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:17:58 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000036030000000000003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000007460698f266662f413d52960eeb0c1c966ce2169"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0xffffffffffff19f0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ftruncate(0xffffffffffffffff, 0x39) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0x10, 0x2, 0x0) dup2(r1, r0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) ftruncate(r2, 0x39) r3 = dup(r2) r4 = socket$inet6(0x10, 0x2, 0x0) dup2(r4, r3) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000280)={0x1d, 0x7, 0x2, {{0x10, '/dev/input/mice\x00'}, 0x3}}, 0x1d) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000002c0)={r7, 0x1000}, 0x8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:17:58 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 08:17:58 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000000000000000000000000e7ffffebf6f2a2299748aeb81e1b00920efd9a0000010000000000e0ffffffffffffff5f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x20000, 0x0) 08:17:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioprio_get$pid(0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40900, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x101, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f00000000c0)={0x7d, r6}) r7 = socket(0x1d, 0x5, 0x6) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipmr_newroute={0x30, 0x18, 0x200, 0x70bd2a, 0x25dfdbfe, {0x80, 0x0, 0x0, 0x7f, 0xfc, 0x1, 0xfd, 0x1, 0x100}, [@RTA_METRICS={0xb, 0x8, 0x0, 0x1, "73e28adead43c5"}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 08:17:58 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r4 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r5 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r5, 0xd, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r6, 0x1, 0x24, 0x0, &(0x7f0000000000)) accept(r3, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl(r7, 0x1000008912, &(0x7f0000000440)="fc18548b5b7b1703166e59fc1d94eb64dafdffff45ec463311cca50d1f7d") r8 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)) getpgid(0x0) listen(r8, 0x2) r9 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r4, 0xb) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff3d}], 0x1, 0x0) io_setup(0xfe, &(0x7f0000000200)) [ 515.411459][T13246] QAT: Invalid ioctl [ 515.521212][T13258] can: request_module (can-proto-6) failed. [ 515.549499][T13246] gretap0: refused to change device tx_queue_len [ 515.609633][ T23] audit: type=1800 audit(1583223478.498:94): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16963 res=0 08:17:58 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 515.674551][T13246] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 515.792620][T13246] QAT: Invalid ioctl 08:17:58 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 515.839121][T13258] can: request_module (can-proto-6) failed. 08:17:58 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60831a4600648800fe80000000000000000000a25f753e8d9f60ef00000000aafe8000000000000000000000000000aa0000000000649078ffffff3ffffcffffffffffffffd5d527cd19b9691e1cc12087d1b17fb52bb0470cbc5760d4492de98a08ce81b3866aad1bcd7a6df9dd218604b7278d56226915db4da31a3578f02302bb1a0901e738a5cc8ee42bdee7aa0655d56a585a9434971a4bbda9f597a3172cc156d0f0e07ada123f41f0a64ad945fe3d9f1bb33527d9a45d618f683706297d6d0d7d1ce519dd7f75b6777c1183003828626630b0f44dd3f31b3d3da6821cb9a5550b2f87e6d1362b3d9a2ba3d9547f24b5f3c7a48b747687449eee81f385a6116ce3cabe3b5468eeb8deb621"], 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x80) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendto(r1, &(0x7f0000000140)="a7cd5ce864f280fb2c1fb57f0701e44d78ea6cdacb363e5ff339c41b7138e0d4d71c029353f29db5b2ab0c8750d12bce3e6ae47f5d9f5aebc2ca0eedf37e6d8a7bb6c5cb0ad7884e313cd384a90e2ab2b31da29fc12920deaae45fbf656929c2050c6b5057015efc3301a134aff470ca47fc38c273a067b72e", 0x79, 0x40004, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x0, 0x0, 0x1, 0x2}}, 0x80) 08:17:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xec}], 0x1000000000000409, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:59 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:17:59 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x418, 0x400}], 0x4801, 0x0) 08:17:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x12) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$9p(r3, &(0x7f0000000000)="9d65e657f3bfa78e335ecdd0d6f4", 0xe) 08:17:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000001020102000000000000000000000000240001801400018008000100ac1e000108000200ac1e053b9d70e09953e5b492c2fdc0de"], 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0xc) sendmmsg$alg(r2, &(0x7f0000001740)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)="f73b2cb45e643131fb861b1d4453a73654680aea026f339b11044095c5435c70ac21c0fbc05132e2585d3ca3468f682079043cab47976e28c87e38196efb2659f702e8a4e57f", 0x46}, {&(0x7f0000000180)="69efab5aef7ae6bb1220557f081c0b9b7997ac1c616e9e6554b3468d6ffe53d75d1bd2495029b49d7c42885b7fd36eb5aa6137b903480c972eed60d85cfa4e3fb6453bffa1d6fc8326947c2b37e486ec8aaeeaae5d5b83b5526733e891529a4d633e267e28036513c10b5a4eecf2935eef5b4bce", 0x74}, {&(0x7f0000000200)="913b8d178be8b3a35a9e9b3d8f7ff272e3ffe9f22c5df494092e36302fa78108608e0b663587a017c9715a62bbd184d803215f545e7df5276b909c3a695df94ce40120dd05954848a1e5f549cd8a02a9c8dcbb200f6582a0ac3be4606a7680799b4ac2b3337c043f484d0d4fcc3406c5d8f842531ea4c46351199f2c3fca7477a375a5c97a1c631328012ee5c671935c29fcec1ac9cc20f31ac172499a395fe45a9fac1582a4a09a660168e7fdf102fb699b9cb7fcd55286220c11a334b9ca143879e32f60687f8dbb4ff7837d47b9a569a81e05270e9b6b6556de5ff77dc85cdbbfef21a4f59f305acdf6", 0xeb}, {&(0x7f0000001780)="bc5f92c9011f0871f6e2fcfb5601fa509ba8c8a6b92e82c334b70dabdc1dd73ad689218aaea01a01ad327ee6306e4533ab0a74d8d5b41ca91365345318851092cee656328f4218f5208afa87d1", 0x4d}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="81a181d6ae5964ebc0482b2825ff7b1aca5283aebdb311f90a8c0222d339317b4e15ef041f6a854813661d1e61963faadde66e3b4aec83b1d8b478673ee975d98c1a9e91fbe40ce335e4441638a1782a42ed126ee6ece9d535e5b7fa848d5de82add79083f4e95d13f0c6e2772b2956017201d84b7c5847f6ae4e843c6dd70fcb92a6251630f256a7cc35fa354404df844e13d9d7ff299f4a6f3870086a69c70dd21d3582af33401ac729cec330a9e34d0c0ed7cca098860462aa601d1", 0xbd}, {&(0x7f0000000040)="f4616a8c219e73ff7e2faa536601a9d5a62e3911fabe8412fe22d48bf69eaa204c3f8578e65dfa52b4466753583a51ef6630e5813afe", 0x36}], 0x7, &(0x7f00000014c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffff9}, @iv={0x50, 0x117, 0x2, 0x35, "0d528caf3f7a7eae4cfb838af26856daf1b7149ec43369e0ad906dacc8dd7c0a0e312614f7734f9ef5c7637b70f7f5ba616b0fe5fe"}, @iv={0xb0, 0x117, 0x2, 0x9b, "50ff49d4581007287b87bcacc81bf42999843accb5a4105deba86cb2fe6bb52805c4073b3feb421de27423a7624487e3e06b3354ca17eb7c75c50ef670027315cde7f15c1baa5f9402c75a8d9d05c13c7d8b19fcfcc514918ccfbd23cbbaa9da916c052ad4cb3121911ea1d0f45f9e2871c0373c4013f54a053e2403a11364e8ff7c00b354ab8b55df6c89327ee0578ffd0d9fd3fdf33577e2d7c2"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}], 0x258, 0x2000}], 0x1, 0x0) [ 516.333407][T13306] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.370203][T13306] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 08:17:59 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 516.437621][T13315] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 516.496918][T13315] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 08:17:59 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = getpgrp(r0) setpriority(0x0, r1, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x200, 0x20140) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070777d0000009000701020000090000000000200003050013800100", 0x22) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x0, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r5, &(0x7f00000000c0)={0x90, 0x2f}, 0x90) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r6, &(0x7f00000000c0)={0x90, 0x2f}, 0x90) r7 = open(0x0, 0x0, 0x0) read$eventfd(r7, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10f081, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) r8 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r8, 0x89ea, &(0x7f00000002c0)) r9 = open(&(0x7f0000000340)='./bus\x00', 0x199180, 0x1b7) fallocate(r9, 0x10, 0x0, 0x10000101) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r10 = open(0x0, 0x0, 0x0) read$eventfd(r10, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) 08:17:59 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x6000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/142, 0x8e}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='hugetlb.2MB.max_usage_in_bytes\x00', r1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000900)) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) r4 = syz_open_dev$media(&(0x7f0000000800)='/dev/media#\x00', 0x1, 0x8000) perf_event_open(&(0x7f0000000640)={0x3, 0x70, 0x7f, 0x80, 0x52, 0x80, 0x0, 0x7, 0x14020, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xdd, 0x380000000000}, 0x2110, 0x80000000, 0x7, 0x9, 0x0, 0xbd6, 0x4}, r3, 0x1, r4, 0x0) 08:17:59 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000004e80)=@assoc_value={r4, 0x9}, &(0x7f0000004ec0)=0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000002c008151e00f000300000c00190e00060000000001000000000300"/46, 0x2e}], 0x1}, 0x0) [ 516.713744][T13336] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 516.732651][T13336] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 517.109893][ T23] audit: type=1800 audit(1583223479.998:95): pid=13349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16953 res=0 [ 517.129514][ T23] audit: type=1800 audit(1583223480.028:96): pid=13333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16953 res=0 [ 517.150307][ T23] audit: type=1800 audit(1583223480.028:97): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16953 res=0 [ 518.054144][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 518.061366][T13331] Bluetooth: hci0: sending frame failed (-49) [ 518.684201][ T9631] Bluetooth: hci1: command 0x1003 tx timeout [ 518.691696][T13331] Bluetooth: hci1: sending frame failed (-49) [ 520.124203][ T9631] Bluetooth: hci0: command 0x1001 tx timeout [ 520.131062][T13331] Bluetooth: hci0: sending frame failed (-49) [ 520.764126][ T9616] Bluetooth: hci1: command 0x1001 tx timeout [ 520.771017][T13331] Bluetooth: hci1: sending frame failed (-49) [ 522.204148][T10873] Bluetooth: hci0: command 0x1009 tx timeout [ 522.844117][T10873] Bluetooth: hci1: command 0x1009 tx timeout 08:18:09 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:09 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getuid() syz_mount_image$f2fs(&(0x7f0000000300)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x8001, 0x5, &(0x7f0000000580)=[{&(0x7f0000000380)="f0c63c1379ffd165de99fe8cca68ae0e08e3d758024ca70d875fa0a70182a91479dde19ec48203f8a2a3f4f9065b7210d2ad6a4c3f1796d6dbccd8d1eadaa539880ca448347af21fb339f21ba3ba", 0x4e, 0x1ff}, {&(0x7f0000000400)="39491a94ae015462349f1d759372c3541b80", 0x12, 0x2c3}, {&(0x7f0000000440)="f6d4f863233752eabf729d3d2203cf8e90fab064fb0e8d5325761d092aa1", 0x1e, 0x3}, {&(0x7f0000000480)="eadc84f249889b1907e8c6909482e2b14899a3060c90e815da8603b823be565c41ca5a9f84d35a2698a760e4e588986ea484f213d5049145ea6d4335c4cb0a8ae193ed9c6864b3407a4cf7edcfcf71d5c2519e7bf96622a5ec5a53435b94e0465daa3462a9c968b317bd990eb0957c5c2aad32d93d1bdea5d8825f982019a949", 0x80, 0x40}, {&(0x7f0000000500)="cccdf547a287eed94d117bb70ca3ff1e2d4bbd891f5c00e629ae27d7808b766f4fb4501a8c4e5a2f6dcd88bc865629da9460820e16e93589c53fa65c3367779889b00fe1a6fe2c92a26f0aaeb7edfc473c6bad42", 0x54, 0x8001}], 0x0, &(0x7f0000000600)={[{@whint_mode_fs='whint_mode=fs-based'}, {@background_gc_on='background_gc=on'}, {@noinline_xattr='noinline_xattr'}, {@usrquota={'usrquota', 0x3d, 'em0cgroup'}}, {@prjjquota={'prjjquota', 0x3d, '){'}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@seclabel='seclabel'}, {@fowner_lt={'fowner<', r1}}]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000030000008002000000000000f000000000000000f0000000f0000000e8010000e8010000e8010000e8010000e801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000c800f00000000000000000000000000000000000000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000004000000000000000000000000000028005443504d5353000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000073797a6b616c6c65723100000000000063616966300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 08:18:09 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xbd, 0x100}, 0x0, 0x0, 0x8001, 0x2}, 0x0, 0xfffdffffffffffff, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005d717398b569dfb7d37164f031cdab24f1e404dadf9a2c", @ANYRES16=r2, @ANYBLOB="dd0700000000a9e0170000000000"], 0x3}}, 0x0) pipe(&(0x7f0000000140)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x8400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = dup2(0xffffffffffffffff, r3) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x3f, &(0x7f0000000140)=""/12) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf93010e, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951362d3fa985503f8f45bfb4e9240b985dda11bde27881f17233d3ad01f2177b1a53e51397d581d1549a05c1955f5d2a27a54f154dfab0a4d6a66872083c12fb816fc83d2a0f56c7b308972c13e068508685eb082db85be8bcf0074dd91f31c0bc042060d", @ANYRES32, @ANYBLOB="534fce983e5c2d7673b4958005e750e907d4fdc7bf13d088ad203bd736a956945b0f66f933a31733392547e20febfc8d209cbf74cd6243bf2406fae4ddbe02d390fffad64b012deb14b92f020709e51b3e84a45b53c64c5aa753b3531c693655564c9a8ddb7d983a19eb11b0803dced96346ee580ea4a890f90a69b44067df0949c216f3b291122bcd89a0777619426cacf7375a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) socket(0x20000000000000a, 0x2, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 08:18:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18c, 0x30, 0x3ff, 0x0, 0x0, {}, [{0x178, 0x1, [@m_nat={0x174, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xd96, 0x1, 0x4, 0x20}, @local, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x1, 0xff, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff20, 0x6, 0x0, 0xfb, 0x3}, @multicast2, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x8, 0x4, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x3, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7fff, 0x1, 0xfffffff8, 0x1ff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x6, 0x3, 0x1, 0x4}, @local, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x80, 0x0, 0x7fffffff, 0x9}, @multicast2, @loopback, 0xff000000, 0x1}}]}, {0x49, 0x6, "af5a344fe3da2076845e3f2a7ec19baa4804a61a3e7491fa27d74b07812116480bd6f5973345a85737375bc4e74b4a8ab72fd8c3826dcc07695e686e60bfbe9765153e06e7"}}}]}]}, 0x18c}}, 0x5000) 08:18:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x0, 0x40000004, 0x0, 0x7, 0x0, 0x100000004cc], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x618600, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5bb1eb3bb114000000", @ANYRES16=r7, @ANYBLOB="0506000000000000000010000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x840002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4080) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4068aea3, &(0x7f0000000380)={0x7b, 0x0, [0x2, 0x5, 0x59, 0x9]}) 08:18:09 executing program 5: r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8e) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x404101, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000100)=""/43, &(0x7f0000000140)=0x2b) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup2(r1, r3) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x4}}, 0x18) [ 526.352571][T13359] device vxlan0 entered promiscuous mode 08:18:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4001, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:18:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001600)=ANY=[@ANYBLOB="00000000000000000a00000045b5365b578ebc7d987fcb52610f00000000ff02000000000000000000000000000100000000400000000000000000517efcfc28f66488ab12f49f019900"/144], 0x90) syz_open_dev$ttys(0xc, 0x2, 0x0) 08:18:09 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:09 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000500)={0x4, 0x1, 0x4, 0x400, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92822522"}}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x44}}, 0x8054) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02008d00", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x53}, &(0x7f0000000140)=0x8) 08:18:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000080)={0xc864, 0x1, 0x81c, 0x80000001, 0x5, 0x100, 0x1000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="005c0d0eba873da7746507daf69e8bf99884ce29f17987390786a4f7ade4db16645f33af36d71c228bdd4db36f0f9a0800000015b439", @ANYRES16=r1, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400200001000a00000000000000fe8000000000000000000000000000aa01040000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x102, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000340)={0x18, 0x0, 0x2, {0x800}}, 0x18) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 08:18:09 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x2, 0x77) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='veno\x00', 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, 0xffffffffffffffff, &(0x7f00000000c0)=0x5b89, 0xe6) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0xb5, 0x0, 0x81, 0xfe, 0x0, 0x0, 0x4068, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x8, 0xfffffffffffffff8, 0xffffefff, 0x3}, r3, 0x6, r5, 0x0) process_vm_readv(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)=""/186, 0xba}], 0x2, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000180)=""/63, 0x3f}, {0x0}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/179, 0xb3}], 0x6, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 528.524185][ T9602] Bluetooth: hci0: command 0x1003 tx timeout [ 528.530317][T13331] Bluetooth: hci0: sending frame failed (-49) [ 529.164115][ T2725] Bluetooth: hci1: command 0x1003 tx timeout [ 529.170393][T13331] Bluetooth: hci1: sending frame failed (-49) [ 530.604209][ T9602] Bluetooth: hci0: command 0x1001 tx timeout [ 530.610316][T13331] Bluetooth: hci0: sending frame failed (-49) [ 531.244213][ T2725] Bluetooth: hci1: command 0x1001 tx timeout [ 531.250361][T13331] Bluetooth: hci1: sending frame failed (-49) [ 532.684091][ T2725] Bluetooth: hci0: command 0x1009 tx timeout [ 533.167238][ T0] NOHZ: local_softirq_pending 08 [ 533.172261][ T0] NOHZ: local_softirq_pending 08 [ 533.324533][ T12] Bluetooth: hci1: command 0x1009 tx timeout [ 535.094928][ T0] NOHZ: local_softirq_pending 08 [ 535.099946][ T0] NOHZ: local_softirq_pending 08 08:18:20 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:20 executing program 3: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x8, 0x6, 0x4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'veth0_virt_wifi\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x1000, 0x2) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x4e21, 0x8, @remote, 0x200}, 0x7, [0x48a, 0x6, 0x8bb, 0xffffffff, 0x8, 0x80, 0x76, 0x5]}, 0x5c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x4001, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000280)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000300)={0x101, 0x3, 0x2, "abce2df0af28c134c63aa955521f01bf221d45486a7594cefae8d3bae79f2d87", 0x4745504d}) r5 = openat$cgroup_ro(r4, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000380)={0x2, r3}) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x25) r6 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x0, 0x400000) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000400)={'security\x00'}, &(0x7f0000000480)=0x54) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e21, 0xfffff801, @loopback, 0x5}, 0x1c) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000500)={0x8, 0x9, 0x4, 0x800, 0x83, {}, {0x1, 0x1, 0x3, 0xe5, 0x20, 0x7, "3cd44066"}, 0x9, 0x2, @offset=0x240, 0x8000, 0x0, r7}) getsockopt$ax25_int(r8, 0x101, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000640)={0x1244, 0x14, 0x800, 0x70bd25, 0x25dfdbfd, {0xa, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "24d1d2d127debdbda130e44644abbe1371af6a436eb6b3b48cb2d7ad880e44002d852d09c3da2dd0de8dfbed16a36bf33d715909187da7e8d9a6d40df29cf1353b9654c0af95f5d0974a42ddad0065036c36092e4f1c1972e57e4316bf363ec8d381ed689b7e53956d77454ebbcd6cae09e69be451e7e59b8699211a7647a122650878043a9d65a154703b65"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "c44fff3397247b1297bc03cec3b4f21050b25059d58eb4e09a06e7c8635b24fdece6f8bc7d86396032880f6b4e8d7380d12df8348f3f157b14a7591594225880125401027ac7d6617899d2bb206fa62ce221b7b9a4f12bbd0bf8b1616b2995de608a54d20f3589f579ef79f3c92abf391f326cee82d29cbfc698e9abfcede7c6e4f5d1aa246df6df5f0f36b2e657fc06df4d79f0c26e622bcdbd9664800054a0a80d"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "a44a3185fdbb1220c20e609edea2bf1bc1ceb5d94bf40b78825bb479353fa52a50d9e9a5ae4fe4271acc0855d3b5a2548d18530bb2dda76570bb9c39be2c7c8ab775e78d32c6ff208b52678fbb0478ccbbf600c1d9f56fffd55d470e8a073b4be8ce0555e38bc83f0b18b4d6bcdc03fa5b2bf43f0b922c76e27cf75af08590fe81339503aa337e525ce3768dd7e11c66059aa9c8fcd4cac7646bbe938d9d497c6d98f77da21ebc1a9d27178d0d694447aeffc9b0a89653ac7c45d7695b00dc5fc15cdf318de8e37aa32853cb56fd23cf86a5e88393ef286be2dac6bbf8d9e1b187b82931ab8259f5f58aea165f"}]}, 0x1244}, 0x1, 0x0, 0x0, 0x101}, 0x800) bind$x25(0xffffffffffffffff, &(0x7f0000001940)={0x9, @null=' \x00'}, 0x12) r9 = open(&(0x7f0000001980)='./file0\x00', 0x240, 0x131) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f00000019c0)={0x1, 0x3, 0x3f, 0x3, 0x7}) open$dir(&(0x7f0000001a00)='.\x00', 0x10000, 0x11) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001b40)={&(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0], &(0x7f0000001ac0)=[0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x1, 0x5}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/vsock\x00', 0x10000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, 0x1401, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) 08:18:20 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000002c0)={0x12}, 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000780)="2c3bb47d0872"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:18:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x4009}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pidfd_open(r2, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/raw6\x00') sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1405, 0x0, 0x70bd26, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000003}, 0x40) r4 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x1, 0x802) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x111000, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f00000001c0)) dup2(r1, r0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="18134f38a21c85921b04a28f4713a7a7", 0x10) 08:18:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0xffffffff, {{0xa, 0x4e21, 0xfff, @mcast2, 0x1f}}}, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10001420000a77, 0x0) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) splice(r5, &(0x7f0000000180)=0x121, 0xffffffffffffffff, &(0x7f00000001c0)=0x1000, 0x400, 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}, 0x50}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 537.170956][T13424] Unknown ioctl -1069525502 [ 537.245548][T13424] Unknown ioctl -1069525502 08:18:20 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000280)=0x62, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000300)={0xa1, 0xd}, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x5c, 0x100000) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000100)=""/221, &(0x7f0000000200)=0xdd) 08:18:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800004000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x162}], 0x808480, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x5, 0xa9, &(0x7f0000000300)="afb473192a273aea62ee60ae8ce014c5980519fc672c0cf6c75c9971755f8d7f541283da84ddf3d775bfc4c100572777b5aa1b94407ef6be04072c1479d23ae6b00bedf0f31ef4e519563dcd35704ce8b7452e0c631c68446147f7b68665f37f08ec6f332c413150634dcdc5a48e45f08912fcec2f5070fa1cd805d6d5df23e3ae4186457dd5b9b5ca746db022f53cb067f56ead28ecc46d6408662649143c02117d8cb57fbd04aaf5"}) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000637620003555e5689d91b59672a8a29c14dadc3cab5ed450fe2f2ea21e6a23e220a67d351f7e3e71bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d06a30b65ef3b9726b72d3999f59b85afa20c6e8e6bc42bc9f9fce6123d6cbc43"], 0x5f) unlink(&(0x7f0000001e00)='./bus\x00') ftruncate(r1, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 537.410571][T13447] usb usb7: usbfs: process 13447 (syz-executor.3) did not claim interface 0 before use 08:18:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8c2a8807}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x180000}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:18:20 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:20 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, 0x0, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="03020400000000009000120009000100697069700000000080000200080003000000000208000300ac1414aa080003007f000001080005000900040005000a000100000006000f00030000000500050009000800050004000400000006000f000000000004001300080002000000000000000000", @ANYRES32=0x0, @ANYBLOB="060011004e240000060012000000000008000200", @ANYRES64=r4, @ANYBLOB="06001000ff7f000008000a400e17eff487d775e6e75e0704d7c96288f7698b95d4ceea43aa893c38cc57e494006022474cdd9515dedebeadf295b74e7d3718a6976793d9bc979f9b0410e236c446e09082c35f128ce9e3ab391fbe77b7e8e08da34355252133d775743570e67022ab2dbc64cf4339f75dbd1f7d2c350bc9293c1f", @ANYRES32, @ANYBLOB="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"], 0x9}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:18:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xb5, 0x81, 0x81, 0xfe, 0x0, 0x0, 0x4068, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000300)}, 0x4800, 0x0, 0x5, 0x8, 0xfffffffffffffff8, 0xffffffff, 0x3}, r2, 0xa, r0, 0x1) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000540)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x3ff, @mcast2, 0x8}}, 0x24) sendmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000007040000005be4b3128400dc8d"], 0x18}}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003e80), 0x1, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001008000000000000000010000000baddb357ba2a25bba6ec6fce077e0e09f4820000001c80187803476c2dc4cf700ec4a53af755f7fcfd0882fea4d37b3326454d61a3d97c53081f28bfee7d5314ecf9ad214c3d87c7cf063ed13188bd332065c92419de4cd9c64c4f22308dcafc2f7600ef8961fc64a09447e7ad27ec50ebeaa6a3b0b47755059341a11081ddfa5568b817cbb44e4679493a0f963c9be2a7ae1fba764f526ef870bf8535526d7981c9e333fe5ddeb88182edbb6b7acf058259e1cbeb8de8ace55d248dc89a724bfab58d311fc6b00532868b89fd28e23dbd23ef1dac"], 0xeb}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="520400000000000000327a014ebcba3cac08f8a35f8b25b3e96affeac488689f3b534ef98ef02c7b1472cb80e2f2907d8d35acd892b27900eb6d628ccfeab2124e2f9f3af2f9"], 0x46}}], 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "9687c55709825c6c99559494278800"}) r5 = socket$inet(0x2b, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="66867573682c00e2359baa0eb183a857cc62b93746053caee8a551cc81fea8062dc2a0178f019f3cbc87d24f23"]) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmsg$inet_sctp(r5, 0x0, 0x2e749e73384943a3) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a68, 0x0, [], @value64=0x1}}) ioctl$BLKRAGET(r8, 0x1263, &(0x7f0000000200)) r9 = openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) pwrite64(r9, &(0x7f0000000580)="c157529050f8510c82239517f1f4ff5af368b0c8aeda1161159ab19d9d45695048cda6ce974da81e63bce6558651d1d3ce617e0817de19f7e4260981719f7b2caefc2ea9545619cba4e7caeb86b03ab6a0c5405398a99eb08746933da8e651602a6f52a4a55b65008086ff6edd969c8b2b483c2922b588f0927b809822363d43c8ff3604d042b3b8f2ff277d1cbd47f7ac8e3b1f4181b4569295ce505c867b6aae4bd0aba5", 0xa5, 0xff) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) dup2(r10, 0xffffffffffffffff) 08:18:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffd}}, 0x48) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r6 = io_uring_setup(0xa4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x215}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r7 = dup3(r5, r6, 0x80000) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000100)="6f5a19da9117e4f664b22f3b0654f657e0735c09067fce08b0aad69ad876daedacb6272aef2eece6848a9a12177401d6d5481e283bc0d74118b2f487be4e70577d2ca53baecfd836c72ad9b096b6d38b1182e38728780817eec6c737aace118ccf304b6ebd988bb03c2954b3e1cc86c8bf54b14df9a72e8711b2ba246cdd53bdbb1eaa40b7bdf9581ad8b2daf774e2297c75cbb36b0873", 0x97}], 0x1) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) mq_getsetattr(r8, &(0x7f00000002c0)={0x9, 0x6, 0x80000001, 0xfffffffffffff801}, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2f0000001c0005c5ffa2ff080d000000020005000e000000190102c9130001000180ae2d0000000f000000a28663b3", 0x2f}], 0x1}, 0x0) [ 538.495303][T13459] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 538.503630][T13459] FAT-fs (loop5): Filesystem has been set read-only [ 539.404362][T10873] Bluetooth: hci0: command 0x1003 tx timeout [ 539.410612][T13331] Bluetooth: hci0: sending frame failed (-49) [ 539.964328][ T9616] Bluetooth: hci1: command 0x1003 tx timeout [ 539.970896][T13331] Bluetooth: hci1: sending frame failed (-49) [ 541.484508][ T9602] Bluetooth: hci0: command 0x1001 tx timeout [ 541.490598][T13331] Bluetooth: hci0: sending frame failed (-49) [ 542.044174][ T3008] Bluetooth: hci1: command 0x1001 tx timeout [ 542.050350][T13331] Bluetooth: hci1: sending frame failed (-49) [ 543.564557][ T3008] Bluetooth: hci0: command 0x1009 tx timeout [ 544.124310][ T12] Bluetooth: hci1: command 0x1009 tx timeout 08:18:30 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:30 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000000)=0xbca, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1cd66984c7a03a3f84f30e2b88000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000000000000800020000000000"], 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x270bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x401}, 0x4805) sendto$unix(r0, 0x0, 0x3a, 0x5daf557533041cf8, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 08:18:30 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x6b67, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x6b66}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 08:18:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280), 0x0) 08:18:30 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb34, 0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r1 = socket(0x11, 0x802, 0x81) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 548.115024][T13516] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 08:18:31 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:31 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 548.908551][ T23] audit: type=1800 audit(1583223511.798:98): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17003 res=0 08:18:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x104, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) socket$inet(0x2, 0x4000000805, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="14b1df25", 0x4, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) socket$inet(0x2b, 0x801, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) fcntl$getownex(r3, 0x10, &(0x7f0000000580)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_access\x00', 0x0, 0x47, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) socket$kcm(0x11, 0xa, 0x300) r4 = dup(0xffffffffffffffff) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r7, r8, 0x0, 0x10000000000443) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r8, 0xc0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=0x6, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r9}, 0x30) openat$null(0xffffffffffffff9c, &(0x7f0000001680)='/dev/null\x00', 0x1100, 0x0) 08:18:31 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:31 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x6b67, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x6b66}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 08:18:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0xdac4, 0x6, 0x4, 0x400000, 0x9, {0x77359400}, {0x1, 0x2, 0xac, 0x5, 0x0, 0x8, "af353be1"}, 0x4a0, 0x1, @fd=r1, 0x3000, 0x0, r0}) 08:18:32 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) socket$inet(0x2, 0x3, 0x7) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f000072eff0)=[{0x0}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000d00ead2b70abc4d7dd881c1e65afdcdda6c04cf037fb0ebc38f1ec176ff3bce4ce575eb80733f8536b85bc47142d5b4dbb2f3815943"], 0x13) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r4) 08:18:32 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653071f00053c27d87bf905e86c4c1d2c36643fcd2e1fbc3302b1bc49aace7a60705faf51a32636abaf953a2aadfba90fd77425a3cf516a172c05d760743e75c4fce862dedcb026ca01c2b750f33b0f9263ee34ec65ebb8820b3eed2aeb5ec66312b23330348985c0b3c9d477d66340337a14ad47ed698fab59c3517f86b28e6028e2f4b582207308", 0x89}], 0x4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:18:32 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x39, 0x4) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="616c6c6f6373697ae8423fd12c00"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/78, 0x4e) 08:18:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0xa, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) [ 550.185481][T13593] xfs: Unknown parameter 'allocsizèB?Ñ' 08:18:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000380)) socket$inet6(0x2c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 08:18:33 executing program 0: unshare(0x2a000400) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff1000/0x4000)=nil) r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000200)=0x1, 0x9, 0x0) unshare(0x8000400) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmdt(r0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000000)={0x8, 0x2, 0x0, 0x4, 'syz1\x00', 0x8}) [ 551.324106][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 551.331422][T13331] Bluetooth: hci0: sending frame failed (-49) [ 551.724126][T10593] Bluetooth: hci1: command 0x1003 tx timeout [ 551.730350][T13331] Bluetooth: hci1: sending frame failed (-49) [ 553.404159][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 553.410287][T13331] Bluetooth: hci0: sending frame failed (-49) [ 553.804255][T10873] Bluetooth: hci1: command 0x1001 tx timeout [ 553.810386][T13331] Bluetooth: hci1: sending frame failed (-49) [ 555.484120][T10873] Bluetooth: hci0: command 0x1009 tx timeout [ 555.884125][T10873] Bluetooth: hci1: command 0x1009 tx timeout 08:18:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) getpid() ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:42 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000004c0)=""/4096, &(0x7f0000000000)=0x1000) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x9a0000, 0x6a, 0x6, r1, 0x0, &(0x7f0000000180)={0x990905, 0x2, [], @p_u32=&(0x7f0000000140)=0x100}}) fstat(r2, &(0x7f0000000200)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x2800, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x5, 0x2, 0x5, 0x1}) 08:18:42 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x8140000, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000040)={0x130, 0x2, &(0x7f00000003c0)}) r4 = msgget(0x3, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000280)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000007c0)={0x0, @reserved}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x18) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000240)=0x10, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x1c) ioctl$TIOCOUTQ(r7, 0x404c4701, 0x0) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000100)={0x20, 0x3}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x40000}, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 08:18:42 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="26f2c2c7a753a2e3450f2fd626339b8506a0322eaa9792ec34c8d00053bdb9356fe0795465f50696d6444d54a64edaa9d78d", 0x32, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000240)={r4}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) 08:18:42 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$packet(0x11, 0x0, 0x300) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x7, 0x300) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x9) pipe(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f9f72314ca3ef06dc3036e8f8528ffeeeb51d0c18971e07c0508a10e680dc1", @ANYRESHEX], 0x2, 0x0) gettid() syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r3 = getpid() r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x103000, 0x0) ftruncate(r4, 0x3) tkill(r3, 0x0) sched_getparam(r3, &(0x7f0000000200)) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x83c, 0x1000, 0x1000, 0xfffffec4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r6}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) 08:18:43 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0}, 0x200041c0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) r8 = perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) close(r8) dup(r8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101a41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002400290800000000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="c76a1821639e9e126cd3f457b559e59f8f04c26bc2d8c1d2bd2ca3c408bfc8142ebd08adb4376f34600c9347c67f5fa5e70892b40447a431f23a1fb1807907dbea"], 0x1c}, 0x1, 0xffffff7f0e000000, 0x0, 0x40180}, 0x0) 08:18:43 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioprio_get$pid(0x2, r4) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x28000003, &(0x7f0000000100)={0xa, 0x28000004e22, 0x0, @empty}, 0x1c) ptrace$setregset(0x4205, r0, 0x201, &(0x7f00000013c0)={&(0x7f00000003c0)="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", 0x1000}) socket(0x27, 0xa, 0x40) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x10) write(r2, &(0x7f0000000280), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x19000080, 0x8000000000000000, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) [ 560.469430][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 560.586644][ T23] audit: type=1804 audit(1583223523.478:99): pid=13616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/123/bus" dev="sda1" ino=16609 res=1 08:18:43 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x8140000, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000040)={0x130, 0x2, &(0x7f00000003c0)}) r4 = msgget(0x3, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000280)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000007c0)={0x0, @reserved}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x18) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000240)=0x10, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x1c) ioctl$TIOCOUTQ(r7, 0x404c4701, 0x0) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000100)={0x20, 0x3}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x40000}, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 08:18:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x1) close(0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x101080, 0x0) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000200)=""/103, &(0x7f0000000040)=0x67) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x1, 0x79, 0x80, 0x0, 0x1, 0x15400, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x101, 0x3000000000}, 0x28, 0x10001, 0xb79f, 0x9, 0x1ff, 0x7, 0x4}, r4, 0x1, r3, 0x8) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000280)={0x7, 0x20, 0x538, 0x1, 0x1f}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f53ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100400248ff050005001201", 0x2e}], 0x1}, 0x0) [ 561.159581][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 561.466216][T13669] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.476249][T13669] bridge0: port 1(bridge_slave_0) entered disabled state 08:18:44 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 561.512746][T13669] device bridge0 entered promiscuous mode 08:18:44 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x8140000, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000040)={0x130, 0x2, &(0x7f00000003c0)}) r4 = msgget(0x3, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000280)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000007c0)={0x0, @reserved}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x18) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000240)=0x10, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x1c) ioctl$TIOCOUTQ(r7, 0x404c4701, 0x0) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000100)={0x20, 0x3}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x40000}, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 561.698086][ T23] audit: type=1804 audit(1583223524.588:100): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir183050204/syzkaller.CBuKgu/120/file0" dev="sda1" ino=16609 res=1 [ 561.724179][ T3008] Bluetooth: hci0: command 0x1003 tx timeout [ 561.750083][T13331] Bluetooth: hci0: sending frame failed (-49) [ 562.524265][ T3008] Bluetooth: hci1: command 0x1003 tx timeout [ 562.530421][T13331] Bluetooth: hci1: sending frame failed (-49) [ 563.804298][ T2725] Bluetooth: hci0: command 0x1001 tx timeout [ 563.810392][T13331] Bluetooth: hci0: sending frame failed (-49) [ 564.604117][ T2725] Bluetooth: hci1: command 0x1001 tx timeout [ 564.610222][T13331] Bluetooth: hci1: sending frame failed (-49) [ 565.884214][ T9602] Bluetooth: hci0: command 0x1009 tx timeout [ 566.684075][ T3008] Bluetooth: hci1: command 0x1009 tx timeout 08:18:53 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:53 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:18:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x1) close(0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x101080, 0x0) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000200)=""/103, &(0x7f0000000040)=0x67) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x1, 0x79, 0x80, 0x0, 0x1, 0x15400, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x101, 0x3000000000}, 0x28, 0x10001, 0xb79f, 0x9, 0x1ff, 0x7, 0x4}, r4, 0x1, r3, 0x8) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000280)={0x7, 0x20, 0x538, 0x1, 0x1f}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f53ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100400248ff050005001201", 0x2e}], 0x1}, 0x0) 08:18:53 executing program 3: r0 = shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="cd2e057f2d0fd032971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r5, 0x0, 0x8000, 0x2) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000740)={0x4}) kcmp(r7, 0x0, 0x2, r5, r4) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r7}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000480)={0x7, 0xb, 0x4, 0x80000, 0x8, {r10, r11/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x4, "21a981fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r4}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r9) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000000c0)=0x3) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b8090000000000000050cf3c52c097150c405ea803a4b403c7681bd195001400000000000000024574682383951e42b06b16ca"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r14, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r15, 0x0, 0x8000, 0x2) r16 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r16, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r16, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r15, &(0x7f0000000740)={0x4}) kcmp(r17, 0x0, 0x2, r15, r14) ioctl$DRM_IOCTL_GET_CLIENT(r13, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r17}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r12, 0xc0585609, &(0x7f0000000480)={0x6, 0xb, 0x4, 0x80000, 0x8, {r20, r21/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x2, "21a991fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r14}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r18, @ANYBLOB=',group_id=', @ANYRESDEC=r19, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r19}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r19) r22 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r22, 0x40045567, 0xea72) fstat(r22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, r19, r23) r24 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r25) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r27 = getpid() sched_setscheduler(r27, 0x5, &(0x7f0000000380)) pidfd_open(r27, 0x0) r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) pidfd_open(r28, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x1, r1, r23, r25, r26, 0x82, 0x2}, 0x9, 0x2, 0x0, 0x1, r27, r28, 0x8}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r29 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r29, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r29, 0x0) bind$inet6(r29, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) connect$inet6(r29, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 08:18:53 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x8140000, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000040)={0x130, 0x2, &(0x7f00000003c0)}) r4 = msgget(0x3, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000280)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000007c0)={0x0, @reserved}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x18) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000240)=0x10, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x1c) ioctl$TIOCOUTQ(r7, 0x404c4701, 0x0) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000100)={0x20, 0x3}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x40000}, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 08:18:53 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 570.532004][T13690] 9pnet: Insufficient options for proto=fd [ 570.633869][T13690] 9pnet: Insufficient options for proto=fd [ 570.679076][T13690] Dead loop on virtual device ip6_vti0, fix it urgently! [ 570.786113][T13700] 9pnet: Insufficient options for proto=fd 08:18:53 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:18:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x1d) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2202, 0x0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0xfe}, @ipv4={[0x0, 0x0, 0x8], [], @local}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r11}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xed6c}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8048000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4040) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x334, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IE_PROBE_RESP={0x30e, 0x7f, "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"}]}, 0x334}, 0x1, 0x0, 0x0, 0x24004004}, 0x48810) ioctl$int_in(r0, 0x40000000af01, 0x0) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000000)=""/62, 0x3e, 0x0, 0x0, 0x2}}, 0x48) r15 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r15, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SG_GET_TIMEOUT(r15, 0x2202, 0x0) close(r14) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r16 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7ff, 0x42c000) ioctl$SG_GET_VERSION_NUM(r16, 0x2282, &(0x7f0000000140)) r17 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r18 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r18, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r18, 0x8935, &(0x7f0000000200)={'virt_wifi0\x00'}) r19 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r19, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r19, 0x5411, &(0x7f0000000240)) openat$cgroup_int(r17, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r17, 0x40045010, &(0x7f00000001c0)=0x7f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r14}) 08:18:54 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff33c89fb386") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xd10001, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="9635ab0f9b", 0x5}, {0x0}, {&(0x7f0000000140)="5d9e4fd5e3b976b359edf8311e79b6a5681485bae64f690d10682c0f1256cf305e3d635ef8848fe3ed6b8d4652f3e574e4b4e5d6a04026ef", 0x38}, {&(0x7f0000000200)="0d9c3b5c42d56e9b6bae5172320a925364adb9bd708cb7d95792b124b6acaf07472555403aa5fc49b7895405ca1256d04996000001ed520f78e3413654", 0x3d}], 0x4) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xa, @pix={0x600, 0x1b, 0x0, 0x8, 0x0, 0x60000000, 0x6, 0x2, 0x0, 0x7, 0x0, 0x5}}}) sync() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 08:18:54 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:18:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8) r3 = socket(0x2c, 0x5, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000300)=""/4096, &(0x7f0000000000)=0x1000) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000240)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001300)=""/100, 0x64}, {&(0x7f0000001380)=""/249, 0xf9}], 0x2, &(0x7f0000001480)}, 0x61) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0xb56c58075ff72a5b) sendto$unix(r3, &(0x7f0000000180)="210000d9", 0xff46, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 08:18:54 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) getpriority(0x0, r0) sched_setscheduler(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x5, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0xaaf}, 0x0, 0x4, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r8 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYBLOB="a323ebb35f91425db4460667fb41d3a9de923b96f91ccc4e", @ANYRESHEX=0x0, @ANYRES64=r5, @ANYRES16=r2, @ANYRES64=r8, @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYBLOB="ac35d045421f7955078b07828ec36b76d86bc015888a33775a982fadf80dbbf37564124dc2180b59c8988b5139d5c6047aa59a19afc9cd93c82a420c154a9ce5c5fa3b63123353f5b374dd2ef1b7328ce9637286842602b1dfa7aaf0f99edbf9b3e218abaa7c8e0674183d0699ec1db6ec1521c60ac4d20e75f7a1ac0aea63957777e5d8383b5941d7890adbff8bb63e4154f125e0cb8b8417d835eb0beb303edde1fef1a78c27eebea4283b039c7b", @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYBLOB="f19e7b4c6c2bab2648eab9a17d32d405", @ANYPTR64, @ANYRESHEX=r2, @ANYRES32=r6]], @ANYRES32=r7, @ANYBLOB="746bb3502d4752ab69c56dcd534b0b84d79b1df654996b122a0f83ec16a7cfca8acef7c115f37401e5edb65fff886c04a492e5b642d71d8ce967e39dfffe4311e47b7826913a61d8f05db16b2f878600e1e253c8c35948dd88049215279749c36d095b3259eb50012e40cb497c3134317afd8603f1e3e4ba7a78fc039d4d46e55ad139c6afadbf07699910cfbf9b934253181f81c886bc081c4356d0d6bef128ce46661d298cee0d408d8776401d00082d25ed6f609b93d0638226c103bbce22322e", @ANYRES16, @ANYRESDEC=r1], 0xe4) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r10}, 0x0) getpgid(r10) syz_open_dev$sndseq(0x0, 0x0, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff96a6e9574b3108004500b91e0001ac1400004500f8b691c54221f1d0090000000000000000020000000000000000"], 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000104000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008000000000ffffffff01000000110000000000000086dd6361696630000000000000000000000076657468315f746f5f7465616d00000073797a6b5c6c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c2000000eeff000000000000e8000000e80000001801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe80000000000000000000000000000000000000000000000000ffffac1e00000000000000000000000040000000000000000000000000000000009a3ace57d3a7037a004954000000000000000000000000000000000000000000000000000000e1c4fc400d4d6a3f900800"/433]}, 0x229) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x3}, 0x3ff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r12) write$RDMA_USER_CM_CMD_LISTEN(r12, &(0x7f00000001c0)={0x7, 0xffffffffffffff95}, 0x10) pipe(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x0, 0x0, 0x400, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = fcntl$dupfd(r13, 0x3, 0xffffffffffffffff) write$FUSE_NOTIFY_STORE(r14, &(0x7f0000000040)=ANY=[@ANYBLOB="91ffff000000000000000000000000000000000000000000009900"/41], 0xfffffecf) [ 572.604137][ T9602] Bluetooth: hci0: command 0x1003 tx timeout [ 572.611643][T13331] Bluetooth: hci0: sending frame failed (-49) [ 573.324248][ T9602] Bluetooth: hci1: command 0x1003 tx timeout [ 573.330566][T13331] Bluetooth: hci1: sending frame failed (-49) [ 574.126917][ T0] NOHZ: local_softirq_pending 08 [ 574.684733][ T3008] Bluetooth: hci0: command 0x1001 tx timeout [ 574.690831][T13331] Bluetooth: hci0: sending frame failed (-49) [ 575.404200][ T9602] Bluetooth: hci1: command 0x1001 tx timeout [ 575.410298][T13331] Bluetooth: hci1: sending frame failed (-49) [ 576.764120][T10593] Bluetooth: hci0: command 0x1009 tx timeout [ 577.484113][T10593] Bluetooth: hci1: command 0x1009 tx timeout 08:19:04 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:04 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:04 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x6, 0x430000) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:19:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x81) r2 = gettid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r6 = dup3(r1, r5, 0x80000) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r8) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={r3, r8, r9}, 0xc) pidfd_open(r3, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) close(r0) 08:19:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb9a41e5098e2d4486dd6005920000140600fe8000000000000000005c92dd21b1e813050000aa00004e2200"/65, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x1, 0x4, 0x4, 0x80000, 0x4, {0x77359400}, {0x3, 0xc, 0x81, 0x1, 0x60, 0x1d, "1e67b9c4"}, 0x9, 0x2, @fd, 0x1d, 0x0, 0xffffffffffffffff}) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}, 0x0) 08:19:04 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000280)={0x7fff, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8482) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000100)={{0xa, 0x0, 0x7, 0xdb0c, '\x00', 0x2}, 0x6, 0x103, 0xd24, r1, 0x5, 0xe3, 'syz0\x00', &(0x7f00000000c0)=[',,\x00', '\x00', 'lo\x00', 'eth0GPLvboxnet0\x00', 'security\x00'], 0x20, [], [0x2ddc, 0xfffb, 0x2, 0x5]}) [ 581.502207][ T23] audit: type=1804 audit(1583223544.388:101): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir203887071/syzkaller.CfMkk6/98/bus" dev="sda1" ino=16801 res=1 [ 581.585612][ T23] audit: type=1804 audit(1583223544.418:102): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir203887071/syzkaller.CfMkk6/98/bus" dev="sda1" ino=16801 res=1 [ 581.613608][ T23] audit: type=1800 audit(1583223544.418:103): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16801 res=0 [ 581.637413][ T23] audit: type=1800 audit(1583223544.418:104): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16801 res=0 08:19:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="c800000010001fff0000257c3dc496ae8b222080", @ANYRES32=0x0, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x221901, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000080)=0x1000) sendmmsg(r0, &(0x7f0000000000), 0x2, 0x0) 08:19:04 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = getpgrp(r0) setpriority(0x1, r1, 0x600000000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x200, 0x20140) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000003c0)=0x3) syz_open_pts(r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r3, 0x5412, &(0x7f00000003c0)=0x3) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x6, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070777d000000900070102", 0x11) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x0, 0x2) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xffffffffffffff2e) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r5, &(0x7f00000000c0)={0x90, 0x2f}, 0x90) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r6, &(0x7f00000000c0)={0x90, 0x2f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x90) r7 = open(0x0, 0x0, 0x0) read$eventfd(r7, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10f081, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) r8 = open(&(0x7f00000003c0)='.\x00', 0x8000, 0xa0) ioctl$SIOCX25GDTEFACILITIES(r8, 0x89ea, &(0x7f0000000340)) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r9, 0x10, 0x0, 0x10000101) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x61800, 0x0) r10 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r10, 0x10, 0x0, 0x10000101) r11 = open(0x0, 0x0, 0x0) read$eventfd(r11, 0x0, 0x0) 08:19:04 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:04 executing program 3: r0 = creat(&(0x7f0000000380)='./file0\x00', 0x3e) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) setsockopt$rose(r2, 0x104, 0x3, &(0x7f00000000c0)=0x6, 0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000e40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000001040)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001280)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000000180)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xe6,\xf9\xec\x84R\xc2\x02\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=f\xf3\xca\'\xa8\x1b\xae\xff\xbe\xf9\xe7\xed34\x1c\xd1\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001880)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) 08:19:05 executing program 0: r0 = getpid() clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x8001, 0x0, 0x38, 0x2c4f, 0x0, 0xceb8, 0xa3, 0x7fff}, &(0x7f00000001c0)={0x0, 0x6a7, 0x6, 0xe61, 0x0, 0xed, 0x9d41, 0x6}, &(0x7f0000000200)={0x9, 0x8, 0x3ff, 0x9, 0xfffffffffffffff8, 0x100000001, 0x6, 0x20}, &(0x7f0000000280)={r1, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3800000000000]}, 0x8}) ptrace$cont(0xffffffffffffffff, 0x0, 0x7, 0x800) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000040)=[0x4, 0x0, 0x81, 0x72], &(0x7f0000000100), 0x6) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) fallocate(r3, 0x11, 0x1, 0x10000) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setgroups(0x1, &(0x7f0000000480)=[r6]) sendfile(r3, r4, 0x0, 0x12000) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x7f, 0x81, 0x3, 0x4, 0x0, 0x569d6d5c, 0x10, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0xfff, 0xb793}, 0x1081, 0xe0, 0x8, 0x6, 0x7, 0x3ff, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) syz_open_dev$vbi(0x0, 0x3, 0x2) 08:19:05 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 582.381783][ T23] audit: type=1800 audit(1583223545.268:105): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16673 res=0 [ 582.433947][ T23] audit: type=1804 audit(1583223545.318:106): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/129/file0" dev="sda1" ino=16673 res=1 [ 582.554561][ T23] audit: type=1804 audit(1583223545.438:107): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/129/file0" dev="sda1" ino=16673 res=1 [ 583.564293][T10593] Bluetooth: hci0: command 0x1003 tx timeout [ 583.570588][T13331] Bluetooth: hci0: sending frame failed (-49) [ 584.204155][T10873] Bluetooth: hci1: command 0x1003 tx timeout [ 584.210434][T13331] Bluetooth: hci1: sending frame failed (-49) [ 585.644217][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 585.650316][T13331] Bluetooth: hci0: sending frame failed (-49) [ 586.284394][T10873] Bluetooth: hci1: command 0x1001 tx timeout [ 586.290618][T13331] Bluetooth: hci1: sending frame failed (-49) [ 587.724219][ T9616] Bluetooth: hci0: command 0x1009 tx timeout [ 588.364118][ T9602] Bluetooth: hci1: command 0x1009 tx timeout 08:19:15 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:15 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x80, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="25b6ee3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='afs\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) 08:19:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x18, r4, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001800030a00000000000000001d01000008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7, @ANYBLOB="2d413bfa2b6889131a2cfb163f02bf79da7a3350829f6808951a3c8d16e0e241e8ed59504667d31b237614261d65442b3972e69ee0641a447cb1e47c59e7d7e9d9419aa98d8aa30e404e94d1b3135f4e3f5fc52706bc7c9c98f708b1cdcd4543f13387fb244c10f9"], 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f00000006c0)=@nfc={0x27, 0x1, 0x2, 0x2}, 0x11) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r12}, @CGW_SRC_IF={0x8, 0x9, r11}]}, 0x24}}, 0x0) r13 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r13, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getpeername$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x11, 0x800000003, 0x0) bind(r16, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r18}, @CGW_SRC_IF={0x8, 0x9, r17}]}, 0x24}}, 0x0) r19 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r19, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r19, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) r21 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r21, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r21, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @initdev}, &(0x7f0000000240)=0xc) r23 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r23, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) accept$packet(r23, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r24}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x200c000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x2e8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7868f1eaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 08:19:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000003740)=ANY=[@ANYBLOB="74020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000004c00088048000080200004000a00000000000000fe8000000000000000000000000000bb0000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x20000001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 08:19:15 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:15 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x75bb, 0xc, 0x4, 0x0, 0x4, {}, {0x3, 0x0, 0x0, 0x40, 0x1, 0x0, "c4c39796"}, 0x6, 0x1, @planes=&(0x7f0000000140)={0x0, 0xb58d, @fd}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x55b000, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000200)={0x0, 0x799, 0x7}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x11600, 0x0, 0x0, 0x7}, r4, 0xffffffffffffffff, r1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000)={0x0, 0x0, 0x10000}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000280)) 08:19:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x2021}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@remote, 0x0, r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r5, 0xffffffffffffffff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x378cf0e4) socket$alg(0x26, 0x5, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)="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", 0xe00) sendfile(r7, r8, 0x0, 0x12000) [ 592.489420][T13865] IPVS: ftp: loaded support on port[0] = 21 08:19:15 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000000000001000080a15f00000100000001000080370600000000000000000040010000800600000008000000070000000000650007"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() [ 592.728556][ T23] audit: type=1800 audit(1583223555.618:108): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16913 res=0 08:19:15 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) getpid() ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000240)="2e1d6e08201c5a50b4908898d09e3f8fa9b41b782dbdbd5e81e7e205d829d32ad676ccf0f56e5ccabfd75c86a62435dabbe4f9d991a8416dcab5305901f78f5f93146808f98fc5ed5f8c2a54439816b0af1fcf93f19016bfbf3717ae855bba973f1b497c8b9c058f325b94806156e21665b6ea39142105591788698c14d087ec05792313d9044bbe77ba8536083ebe6984889bf395e47aabdb8884450cdae8f3b02a9bda942b1d5abef44a6154465e4cdea1ae6ba2d79aa8eb1e2e2e35952610e46a068ce1ac3371f93b74ebc822da7df2659db563589aed3365399b194d399fad936d837477828e43349991b7e81205727b91e865ec93a6472bd068f2894d814aa1ca1494c330543f053f908c7d68022ad42354a4ac3deaa1ae68c251feac974e9605df821b165396a87663d937f36b3ae2a2", 0x133, 0xcd}, {&(0x7f0000000100)="879e", 0x2, 0xb0}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = dup3(r0, r1, 0x80000) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000200)={0x3a, 0x6, 0x0, {0x1, 0x0, 0x11, 0x0, ']eth1)md5sum)user'}}, 0x3a) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) statx(r3, &(0x7f00000000c0)='./file0\x00', 0x100, 0xfff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x0, 0x0) quotactl(0x2, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000140)="f904390d3fcf16797e7b2481f7500bfc1afe88bbbacc57198c97d54e37f894e23bf606996057404bf83d1d3b84871c8ddd6d5e8f4db05fe0735be0d1b4accd94280d6e9a7594032a05630fd5cccb848a2895717c695a346804dfc9301165b0a1") socket(0x3, 0x3, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3, 0x3, 0x1, &(0x7f0000ffc000/0x4000)=nil, 0x9}) 08:19:15 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 593.104402][T13867] IPVS: ftp: loaded support on port[0] = 21 [ 593.222182][T10514] tipc: TX() has been purged, node left! 08:19:16 executing program 1: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180)) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = pidfd_getfd(r1, r3, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f00000007c0)={0x3, 0x1, 0xf, 0x1e, 0x1f7, &(0x7f00000003c0)}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) fcntl$getflags(r5, 0xb) syz_read_part_table(0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {&(0x7f0000000240)="3886d5fd321184bcf4e1a28a20e650dfe2d9542197daba3900058ff73ca2d5b833a6d1e4aa479dcc589d5abc8761a4f9a870c3f50df55a69dac6ce37060ab8dbfd3491d5aa9b626ddfe8451533ad9ed392dae0a8d189d61d6bb95f9a1b11498e63ed1f096f2568e9448eb785b68930eba48f334ebc9369a57f5fb9f4bdc75a8988519d4b0566213090f1443ceae029682a2d68797e19b0b5859e1230f63dd23e60026c3e016b56b834c3931e9a178731b0c9af7133be7551241631cafbf3f876", 0xc0, 0xff}, {&(0x7f0000000040)="9c6619591f39ae5d6e050805b537bb52f9", 0x11, 0x5}]) getpeername(r0, &(0x7f00000001c0)=@nfc, &(0x7f0000000380)=0x80) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000800)=""/194, &(0x7f0000000900)=0xc2) [ 594.444159][ T9602] Bluetooth: hci0: command 0x1003 tx timeout [ 594.450289][T13331] Bluetooth: hci0: sending frame failed (-49) [ 595.084186][ T9602] Bluetooth: hci1: command 0x1003 tx timeout [ 595.090322][T13331] Bluetooth: hci1: sending frame failed (-49) [ 596.524589][ T9602] Bluetooth: hci0: command 0x1001 tx timeout [ 596.530674][T13331] Bluetooth: hci0: sending frame failed (-49) [ 597.166918][ T0] NOHZ: local_softirq_pending 08 [ 597.174484][T10593] Bluetooth: hci1: command 0x1001 tx timeout [ 597.180543][T13331] Bluetooth: hci1: sending frame failed (-49) [ 597.344207][T10514] tipc: TX() has been purged, node left! [ 598.604146][ T9616] Bluetooth: hci0: command 0x1009 tx timeout [ 599.244150][ T9602] Bluetooth: hci1: command 0x1009 tx timeout 08:19:25 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:25 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x8010009) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x80045500, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp6\x00') ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000032, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 08:19:25 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000440)={0x800, 0x401, 0x3, 0x6}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x2243, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}}, 0x805) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000480)={0x2, 0x9}) 08:19:25 executing program 1: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x10000, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x1, 0xfea}) ptrace$setregs(0xd, r0, 0x7, &(0x7f0000000040)="bb7746a5f6651432e7503232e6003debb7ce38bf") ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000080)=0x6) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x4c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x9, @loopback, 0x1000}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x85a2, @rand_addr="07f28a0b0944905a99e4f122a965a87f", 0x7fff}}}, &(0x7f0000000280)=0x84) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000300)={0x70b, 0x4, 0x4, 0x20000000, 0x187d, {0x0, 0x2710}, {0x2, 0x3, 0x9, 0x8, 0x2, 0x7, "e9091eac"}, 0x4, 0x4, @planes=&(0x7f00000002c0)={0x70fd30f1, 0x6, @fd, 0x5}, 0x4, 0x0, r1}) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x6, 0x82, 0x5, 0x81, 0x9, 0x8, 0x1, 0x1, 0x9, 0x3f, 0x8, 0x6}, {0x2, 0x0, 0x0, 0x9, 0x69, 0x1, 0x0, 0x0, 0x8, 0x1, 0x3, 0x1, 0x5}, {0xffff, 0x5, 0x7, 0xf0, 0x20, 0x23, 0x20, 0x1, 0x3, 0x0, 0x5, 0xff, 0xfffffffffffffb4f}], 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x4000, 0x0) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000480)={0x81, 0x81, 0x7, 0x8, 0x9f, 0x9, 0x4, 0x7, 0x3, 0x7, 0x5, 0xd1, 0x1f, 0xbc}, 0xe) setsockopt$inet6_buf(r4, 0x29, 0x2f, &(0x7f00000004c0)="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", 0x1000) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x8000, 0x0) sendmsg$key(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x2, 0x18, 0x7f, 0xc, 0xa, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bb2, 0x1f, {0x6, 0x6c, 0x9, 0x8, 0x0, 0x9, 0x0, @in=@multicast1, @in6=@dev={0xfe, 0x80, [], 0x1d}}}]}, 0x50}}, 0x4) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vsock\x00', 0x20800, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000001640)='hybla\x00', 0x6) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001680)='/dev/nvme-fabrics\x00', 0x80000, 0x0) ioctl$TIOCGICOUNT(r7, 0x545d, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x2, 0x4, 0x6, 0xf000000000000000, 0x2, 0x6, 0x0, 0x2cb, 0x40, 0x3d5, 0x7, 0x6, 0x38, 0x1, 0x1, 0x3f, 0x1}, [{0x3, 0x7fff, 0x2, 0x0, 0xf20, 0x9, 0x8, 0x4}, {0x3, 0xfffffffb, 0x80000001, 0x3, 0x8, 0xff, 0xf0, 0x3ff}], "e147d1de75d8567421cad7c54b8330b92b79776a3733432d048057adb25b7a32051c6ef6e72b055de4f310414d355d236306e8511ecfc488dc15543873826d6d5abe3f7a5db9b61e0666c6a51e7c8fbe20e1e6eb4ae591600a15202450c59e464ad163e29f97e2a8fdd2437d9e8172d7aa6252f287b81f419ff40591abe1236e3172", [[], [], [], [], [], [], [], []]}, 0x932) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000002000)) fchdir(r1) write$capi20(r5, &(0x7f0000002040)={0x10, 0x7, 0xff, 0x80, 0x36, 0x5}, 0x10) r8 = syz_open_dev$audion(&(0x7f0000002080)='/dev/audio#\x00', 0x8, 0x400080) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f00000020c0)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000002100)={0x8, 0x1, 0x3, 0x6, 0x3f, "581f8ab48f07e6e3db8909f77aa67155033738", 0x1, 0x919}) rt_sigaction(0x37, &(0x7f0000002200)={&(0x7f0000002140)="c4e1f951e2c402858c39660f38307904c4a20d9970484b0fae81fcffffff403df4ffff1fc4e279b76c8700f3aa6765f3400f1edc66420f2912", 0x0, &(0x7f0000002180)="c4c1f172f4c0c4a1a5e5960c0000004281d9feefffffc441f910c0c4c2613c3512ef0000c461f3518800000000c4419f2a07c4e18ddcffc42221bc3cf4c42375684a40f1", {[0x5]}}, 0x0, 0x8, &(0x7f0000002240)) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002280)='/dev/rtc0\x00', 0x100, 0x0) write$binfmt_misc(r9, &(0x7f00000022c0)={'syz0', "e30cf1ca73b79e6e356d33b00c3422fc06a1a018f76f36de976c1768bd17b64a025861ff2a51b333e8f6821b9b02bdb36f5e03c7aa565ab47e0d62e645f311a72b180d985bfaaa3a967211eb6c70e0bb335a8523da89c818644bec9da75d04e3793a9d5d66ec7879920f3974809fd765487bbb196b1149e172e5b3c89ac7d446492fd98c6d821386af"}, 0x8d) 08:19:25 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 603.081973][T13932] Unknown ioctl 21531 [ 603.152769][T13932] Unknown ioctl 21531 08:19:26 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r5) r6 = timerfd_create(0x8, 0x800) close(r6) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000073c0)=ANY=[@ANYBLOB="302500000d0a010227bd7000000000000000000a08008000", @ANYRES32=r5, @ANYBLOB="08001900", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00f\x00', @ANYRES32=r4, @ANYBLOB="23d8e386", @ANYRES32=r3, @ANYBLOB="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"], 0x2530}}, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x2, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 08:19:26 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syncfs(r2) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:26 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], 0x1) r1 = getpid() migrate_pages(0x0, 0x0, &(0x7f0000000100)=0x3, &(0x7f0000000140)) sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000080)=0x81) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000300)) 08:19:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000440)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000100)={0x2, 0x1, [0x7a8, 0x2, 0x1a, 0x6, 0x80000000, 0x80000001, 0x2, 0xfffffff7]}) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1039, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r5 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8e17, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008890}, 0x2000c000) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101080, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x0) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758009ab4ea6f7ae55d88fecf92216750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 605.244147][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 605.250708][T13331] Bluetooth: hci0: sending frame failed (-49) [ 605.964976][T10873] Bluetooth: hci1: command 0x1003 tx timeout [ 605.971289][T13331] Bluetooth: hci1: sending frame failed (-49) [ 607.334316][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 607.340432][T13331] Bluetooth: hci0: sending frame failed (-49) [ 608.044454][ T9616] Bluetooth: hci1: command 0x1001 tx timeout [ 608.050619][T13331] Bluetooth: hci1: sending frame failed (-49) [ 609.404144][T10593] Bluetooth: hci0: command 0x1009 tx timeout [ 610.124314][T10593] Bluetooth: hci1: command 0x1009 tx timeout 08:19:36 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:36 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000000000090100000000000000010000840000000200000000020000000000000000300000612e00"], &(0x7f0000004600)=""/210, 0x4f, 0x193, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x3, 0x4, 0x80}, 0x10) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x3e) 08:19:36 executing program 0: syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000480)="a3", 0x1, 0x52}], 0x2008410, 0x0) syz_read_part_table(0x9, 0xaaaaaaaaaaaaaaf, &(0x7f0000000600)=[{&(0x7f0000000100)="900b72b09ae6cdf4ac8688844a5e2b73c4a9cad3a480ba0fa82f84dd97d9c6f8d3e2850889f73cfe7c3f76d0ae8c31364e760b84e6b2afebc5258934d7326863826dec36b5f85a9f6848f2536a21989d42954ab58aea382cb05142ac73e139c69a724495340b0dae7d9ae710c32e65fdb24120251b0ba2a09f7caff5de83c158d565fbf67cd1", 0x86, 0x20}, {&(0x7f0000000200)="5ce02d553f6bfce75e29bd4325a3308f52b2fb32d18671ccc2de6288ef549814962602bfbaf2b9ae43970a75302ba2991645b4ce0b96f4deebd716899bc8d088e8fb6188c138c458291a209df7eba3c61606550d4b09a36562c7ab2ad601104b60969af99de24fd4d06ca957046454169475d556dfd1acf9e52f02441bdcf5df5b8232e1976cad7c", 0x88, 0x80000001}, {&(0x7f00000002c0)="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", 0xfa, 0x70d}, {&(0x7f00000003c0)="65089586e4c979aaaf170844fecee7f19b9a725b8aabd35869a3e43d6b6da5a856a39d566fbe9981d73fad1e6b0181ce7bf0d85b3f21caf0b32a51a7ad262f3241e981cbe3d4ec0c875b2e7c70c8090dbc2fcbd08a014e882897f02214d0b01f8e2700bf9741fd485d8077fcadb07a746314ca0d8f", 0x75, 0x1cc}, {&(0x7f00000004c0)="f1adec65077e8f59ae2fa8db534d87195b49a556766e7926da611364fa2901a6cd880fffc17aa0fceb763b539a029b9cdf127321a98112a9bbd42eaa1ecf9ce675f776240edbdb6946a0d63a19277ee12f0b98072e9c6f2ea3bf2bfc8af48dc9ee9be899221d3c18327cd6cdc16c5e3dafefa478e2e00bfbbb4e64d97f934788a263e083943d7060ab8d428c8c18be51f239be32b0a682c1654d752d0f9a0c19f19400fc3907b482d469b5047ad8650a87f82a7409ffc7c2fed5eed322", 0xbd, 0xff}, {&(0x7f0000000580)="833da6e69385d4da8fbd9bdfbe0b79ac37d7ac59695669d4aee1b78ff0b2a1e99d1a78282a892f8176b55e505995d7da558b9192cdef38dc3fab576ea144691473f238830eed064f2838d97dcc49b06e40b8896ae76fd989b5c38e1671", 0x5d, 0x4b}]) 08:19:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x280002, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000280)={0xffffffffffff3dfd, 0x4, 0xd32, 0x1f}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) mount(&(0x7f0000000300)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='bdev\x00', 0x800810, &(0x7f00000003c0)='/dev/nullb0\x00') sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/214) 08:19:36 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:37 executing program 3: getpid() perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x8048}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x2, 0x8000000000002b9, &(0x7f0000d83f60), 0x0) io_destroy(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000800)={@bcast, @null}) r4 = io_uring_setup(0x689, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40002}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40402, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r9 = accept$packet(r1, 0x0, &(0x7f0000000380)) r10 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r11 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r11, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$P9_ROPEN(r11, &(0x7f00000007c0)={0x18, 0x71, 0x2, {{0x79, 0x1, 0x5}, 0x3}}, 0x18) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000005c0)={0x9a0000, 0x11, 0x80000000, r10, 0x0, &(0x7f0000000580)={0x980a9c, 0x8, [], @p_u8=&(0x7f0000000540)=0xa8}}) io_submit(r2, 0x5, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0xc03, r4, &(0x7f0000000280)="a26316b01d0e23685f1b0698e332067ccc83825455bd6db1a923540b881bdeb85852b01d47a7017c9863277c10d72ce511dfbabb1b72f767dde44d114511de7c5887cb4b63caae95bdb52cdbed49fb3b37f40d644470567d9c3d4bef4d2caedeca5d104c5f0cb706c59da360e89ff158ed4dd32d4be3913558a3ffd5d1b834c7c3f8306001b8a0dff615118799ff1c8bf14cc43acac3c1a592abda0381f143d54217b2e95530d4b4d29c7639b136e73adcc6d8996d3cc69a643582d1167d39dcd64f5af109546959715aadd422293237683c3e60", 0xd4, 0x7, 0x0, 0x1, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x4, r6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x20, r7, &(0x7f00000004c0)="04be5b670f3ec4f8577f121020bd28061c83c6b12b95d6c67a49f069b7f894508cb285a7f41ec7c7d86aa716cc1d1235bb8d7bb9d0f262037ca6d3f16ff756085a46d430d991a9e6e0de2d1cbe5515de77b5b3dafd42c2ca744459d93c5641e53effc3ff028e64efcf5a53da13b24748b2d2d6ba6a26ef9a", 0x78, 0x10000, 0x0, 0x2, r8}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5f5616000fab13f7, 0x55a4, r9, &(0x7f0000000400)="65651ad516bac7a416d71450c9ccf25fc3a52290e4b1e07c124f7eb8383cb1fdcba3d742eefd9542bc6a68763f0e840df8f5fa27ab18cb0bd5", 0x39, 0xfff, 0x0, 0x2, r12}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000640)="f03a5023d7af25251ce63da463dfa1d290c94db47719bb11bd6397f9a71803c1c26c67925541157e25e62b6df973e674d8ebfe9626ba7a0eb242a2f691c74b645dcbe9f9da08dd9bc193eae1d091699b6319d3b6316e292f742bf4ad3f9dc8d52dff3c7bcf46ba5214b49ebe2febbe8b261ceca083f9cce3bba26c592fb9f26dff8da051dbd054f10622ba85080295aa86e5219bc054c399a98d5be98f9f72b640d3ddb38f741b81c07c29b609748a493f509f40eb49612e10450863184bd0698c09dac77112c78fe51e8496dfe3c27fef1fef2461b3", 0xd6, 0x2, 0x0, 0x0, r1}]) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000000ffe200"/18, @ANYRES32, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32, @ANYBLOB="8014d350d222f2"], 0x38}}, 0x0) 08:19:37 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:37 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:37 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:37 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:37 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x0, 0x0) ptrace$peek(0x5, 0xffffffffffffffff, &(0x7f0000000140)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x604000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000180), &(0x7f00000001c0)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'rose0\x00', 0x0}) recvfrom$packet(r3, &(0x7f0000000200)=""/82, 0x52, 0x40002020, &(0x7f00000002c0)={0x11, 0x17, r5, 0x1, 0x1, 0x6, @local}, 0x14) sendto(r2, &(0x7f0000000000)="e586532dd5862123475daf96b822f1fcde24db219950fcdb655802a465d481273b1a46fe2b6e66ca999552ca73aa6541309eb347d5749e8e76d04b42795e2b7a", 0x40, 0x400c0e4, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3, {0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x80) ioctl$TIOCGLCKTRMIOS(r0, 0x5437, 0x0) [ 616.204078][T10593] Bluetooth: hci0: command 0x1003 tx timeout [ 616.210209][T13331] Bluetooth: hci0: sending frame failed (-49) [ 616.844138][T10593] Bluetooth: hci1: command 0x1003 tx timeout [ 616.850266][T13331] Bluetooth: hci1: sending frame failed (-49) [ 618.284084][ T3008] Bluetooth: hci0: command 0x1001 tx timeout [ 618.290201][T13331] Bluetooth: hci0: sending frame failed (-49) [ 618.926529][ T3008] Bluetooth: hci1: command 0x1001 tx timeout [ 618.932618][T13331] Bluetooth: hci1: sending frame failed (-49) [ 620.364213][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 621.004240][ T12] Bluetooth: hci1: command 0x1009 tx timeout 08:19:47 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:47 executing program 1: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000007) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') sendfile(r1, r2, 0x0, 0x80000001) 08:19:47 executing program 0: syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc, 0xe7}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x200500, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f00000003c0)=0xe1) shutdown(r3, 0x1) accept4(r3, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) accept4(0xffffffffffffffff, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x80000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x811}, 0xc80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev, @empty}, &(0x7f00000004c0)=0xc) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000200)='.', 0x1}], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x400080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) r7 = dup3(r4, r5, 0x0) dup2(r1, r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002400)=ANY=[@ANYBLOB, @ANYRES32=0xd, @ANYBLOB], 0x3}}, 0x0) getpeername(r7, 0x0, &(0x7f0000000300)) 08:19:47 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140)={0x0, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x28002, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x5, 0x2e, &(0x7f0000000540)="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"}) r4 = socket(0x1f, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendto$inet6(r1, &(0x7f0000002000)="cff13d911d573afaef72faa96e7d226666226b10a2e7348d69a847144747df325a1b252b76fc823461bc5797477a669aa734fcd06b0fa8dffac0ace0a9f2dc41c48bc2170c006d673674990737f8388e91207f50a1bf0e21c6ef60dd17e4cdf43bfedb2a869de6b168479df08db70ea97d1dc61af48d9ea58c4f3051bba195eb831ab209fc879270792f6b94ab81f96d6ae59f92488638dbdb14ef16e0c4c25660c57acf2e7baa28df24b47c40adce9e09973503379e22e77776879b96e93096aee253566a62e3176436220757c91f", 0xcf, 0x0, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @remote, 0x174f}, 0x1c) writev(r8, &(0x7f0000000b80)=[{&(0x7f0000000280)="ca837e26d55635ff51efde407b78207525770f8e82a3d187089a841f8d86649ab8e4394adff79ccd474a40fcd2cf53d3a69c457f9d352bcec6f600130d542a6b25f83efb2e67884e0fd5916cba1482032dc65905692cb3a5612a59afe66aeaabf0f54746", 0x64}, {&(0x7f0000000400)="776a35cb433eb2b7753445e2c448741fa97f891220dbb8df4948ec75c3fce31743ff9c40a48fb804c03962a8c4cfbf70963d140023dec701133e8f2384b098c73fd50f4673bea67694dee8f4f4e70a50ce0e4afa70d3cacbc6c38f225895d36ec94f46bed6354535e8c572ad48d1a5aa2e421a2b0df67e879fbdb05834feb8afd6e2f4b540f22a1e2aa2eaf21448c4c5099cb8fa529213a0f1986e4a778753c25229208e95d3220939", 0xa9}, {&(0x7f0000000940)="95cb82b30eb640ec63d943eee30505372c75d47a230f4492be2d84d213e8b8885da7b2eeab7a1a0340d59151091d3d3c8fde781a3e969612f70900afa9992b1df04b", 0x42}, {&(0x7f00000009c0)="7dd074f814948dfe938c12c5f81e523892033a612c0ecc323271d9beeef9dd553df3667d0f625cb4c9252715ff246dd382322e4f4da9d5674830ed969f11328ff0c1ac85f2ac1fc046b7cbad3b52a1423798c3e75b2e1689a3aadb2910041ab5e5a0cc54aaf33b86b763099bc4449ec1718fcec1354fe1725c1b4eb55f02b779aa8ccacc9115ab1fed86b23a0175677ab86701111d029d299fed1b02fc5f808413b550a8449694499abdae490ff781f621d1f9f80fdc2923925020b4f630adcd310bd09c5ce90c631467c5e17fb6747cf26e14345caa4e7503c11318bb442b", 0xdf}, {&(0x7f0000000ac0)="5f8fa006a20b531a02449f8fe096021f8546bbf97996556197eaacf45b483c0052310b43657a2d1752f24781742bcf5b11f071340ab376a31a9568caa65bd31623c8e791a984166cbcb9b58ac6249f7def394d623603510ea5c54a2bf334ca82463ca47815fa60862b1bfd27604264812d679974b04d87a0bd34daeef7036d9047aa5245da067eebf05afbb97c85ebb1e30b0661696fcb99285110", 0x9b}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000000180)="a6b19c8537f4fa355f8f241542", 0xd}], 0x7) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000100)) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffec4}, 0x48) 08:19:47 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:47 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:47 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @broadcast}) socket$kcm(0x2, 0xa, 0x2) 08:19:47 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 624.995878][T14079] device macsec0 entered promiscuous mode 08:19:48 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000300)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:48 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:48 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x30f}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[], 0x0) r4 = eventfd2(0x9, 0x801) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0500020200000000100f0007e1000c080017", 0x1f) close(r8) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x10000017e) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x2801, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) socket$netlink(0x10, 0x3, 0x0) splice(r6, 0x0, r8, 0x0, 0x4ff60, 0x0) 08:19:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) rmdir(&(0x7f0000000000)='./file0\x00') listen(r0, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x1400, 0x200, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000016c0)='/dev/audio#\x00', 0x1, 0x2002) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001700)={{{@in6=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001800)=0x96) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xa60040, &(0x7f0000000540)={'trans=unix,', {[{@mmap='mmap'}, {@access_uid={'access', 0x3d, r2}}, {@fscache='fscache'}, {@posixacl='posixacl'}], [{@fowner_lt={'fowner<', r4}}, {@smackfsroot={'smackfsroot', 0x3d, 'loppp0-'}}, {@fowner_gt={'fowner>', r6}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, r7}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfshat={'smackfshat', 0x3d, 'em1eth0^'}}, {@obj_type={'obj_type'}}, {@subj_type={'subj_type', 0x3d, '('}}]}}) r9 = semget$private(0x0, 0x2, 0x68) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r11) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000000c0)=0x3) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="cd2e05f82d0fd032971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r14, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r15, 0x0, 0x8000, 0x2) r16 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$TIOCGPGRP(r16, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r15, &(0x7f0000000740)={0x4}) kcmp(r17, 0x0, 0x2, r15, r14) ioctl$DRM_IOCTL_GET_CLIENT(r13, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r17}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r12, 0xc0585609, &(0x7f0000000480)={0x7, 0xb, 0x4, 0x80000, 0x8, {r20, r21/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x4, "21a981fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r14}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r18, @ANYBLOB=',group_id=', @ANYRESDEC=r19, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=user,cachetag=ppp0procA,dfltgid=', @ANYRESHEX=r19, @ANYBLOB=',access=client,posixacl,subj_role=nfs\x00,\x00']) setgid(r19) r22 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) r24 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r24, 0x5423, &(0x7f00000000c0)=0x3) r25 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b8090000000000000050cf3c52c097150c405ea803a4b403c7681bd195001400000000000000024574682383951e42b06b16ca"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r24, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r25, 0x0, 0x8000, 0x2) r26 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r26, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r26, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r26, 0x3, r25, &(0x7f0000000740)={0x4}) kcmp(r27, 0x0, 0x2, r25, r24) ioctl$DRM_IOCTL_GET_CLIENT(r23, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r27}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r22, 0xc0585609, &(0x7f0000000480)={0x6, 0xb, 0x4, 0x80000, 0x8, {r30, r31/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x2, "21a991fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r24}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r28, @ANYBLOB=',group_id=', @ANYRESDEC=r29, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r22}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r29}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r29) r32 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r32, 0x40045567, 0xea72) fstat(r32, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r19, r29, r33) semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000640)={{0x3, r11, r33, r6, r8, 0x90, 0x4}, 0xfffffffffffff800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 625.738796][T14119] 9pnet: Insufficient options for proto=fd [ 625.757598][T14119] 9pnet: Insufficient options for proto=fd [ 625.870871][T14101] nvme_fabrics: unknown parameter or missing value '$' in ctrl creation request [ 627.004171][T10593] Bluetooth: hci0: command 0x1003 tx timeout [ 627.010462][T13331] Bluetooth: hci0: sending frame failed (-49) [ 627.724208][ T12] Bluetooth: hci1: command 0x1003 tx timeout [ 627.730458][T13331] Bluetooth: hci1: sending frame failed (-49) [ 629.084118][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 629.090214][T13331] Bluetooth: hci0: sending frame failed (-49) [ 629.804148][ T12] Bluetooth: hci1: command 0x1001 tx timeout [ 629.810269][T13331] Bluetooth: hci1: sending frame failed (-49) [ 631.164210][T10873] Bluetooth: hci0: command 0x1009 tx timeout [ 631.884180][T10873] Bluetooth: hci1: command 0x1009 tx timeout 08:19:58 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:58 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="5c000000800000006b8927605d1d1770572ecd8ddf37dc5f5f5c0f1055ff9b2e5e50d087d47437671e6319406a7e7f7c52da6f358d56b2ad8cd3c2fef279663b2ce369818b12774102e4dae7694ba1200a55909ce8263a2236e87975"], &(0x7f0000000180), 0x400) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:19:58 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x15f) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:58 executing program 3: write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001c0006000000", 0x24) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xf, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 08:19:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socket$alg(0x26, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x181100, 0xc0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, 0x0, 0xa808) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @generic={0x1, "942e914eb7355d13849826ab2559"}, @ipx={0x4, 0x3d2a, 0x7ff, "0936288b35c2", 0x3a}, @isdn={0x22, 0x9, 0x8, 0x1, 0xff}, 0x401, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9}) 08:19:58 executing program 5: fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 635.699609][T14130] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. 08:19:58 executing program 5: fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:58 executing program 3: clone(0x20081000704, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x340) r1 = gettid() getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000003c0)=0x4) fcntl$getown(0xffffffffffffffff, 0x9) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='-\x00', &(0x7f00000000c0)='bdev-)bdev}selfvboxnet1vmnet0\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pidfd_open(r4, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) pidfd_open(r5, 0x0) pidfd_open(r5, 0x0) tgkill(r1, r3, 0x1c) r6 = dup3(0xffffffffffffffff, r0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r6, 0x4) 08:19:59 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:19:59 executing program 5: fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:19:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) lseek(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x1, 0x10) 08:19:59 executing program 0: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0xa) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x174) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x100, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = accept(r2, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x200, @loopback}, 0x10) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) bind(r5, &(0x7f0000000340)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000200)=r7) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket(0x10, 0x800000000080003, 0x0) [ 636.383572][ T23] audit: type=1804 audit(1583223599.268:109): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/139/file0" dev="sda1" ino=16945 res=1 [ 636.496779][T14181] usb usb7: usbfs: process 14181 (syz-executor.3) did not claim interface 0 before use [ 636.626682][T14192] ptrace attach of "/root/syz-executor.0"[14182] was attempted by "/root/syz-executor.0"[14192] [ 636.652822][ T23] audit: type=1804 audit(1583223599.538:110): pid=14196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/139/file0" dev="sda1" ino=16945 res=1 [ 636.693926][ T23] audit: type=1804 audit(1583223599.538:111): pid=14196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/139/file0" dev="sda1" ino=16945 res=1 [ 636.757717][ T23] audit: type=1804 audit(1583223599.538:112): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/139/file0" dev="sda1" ino=16945 res=1 [ 636.783134][ T23] audit: type=1804 audit(1583223599.538:113): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/139/file0" dev="sda1" ino=16945 res=1 [ 637.804103][T10873] Bluetooth: hci0: command 0x1003 tx timeout [ 637.810241][T13331] Bluetooth: hci0: sending frame failed (-49) [ 638.604157][T10873] Bluetooth: hci1: command 0x1003 tx timeout [ 638.610301][T13331] Bluetooth: hci1: sending frame failed (-49) [ 639.884236][ T3008] Bluetooth: hci0: command 0x1001 tx timeout [ 639.890332][T13331] Bluetooth: hci0: sending frame failed (-49) [ 640.684202][ T3008] Bluetooth: hci1: command 0x1001 tx timeout [ 640.690302][T13331] Bluetooth: hci1: sending frame failed (-49) [ 641.964252][ T9631] Bluetooth: hci0: command 0x1009 tx timeout [ 642.764192][ T3008] Bluetooth: hci1: command 0x1009 tx timeout 08:20:08 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:08 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e22, @multicast1}}) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}]) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0xf5}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/65, 0x41}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 08:20:08 executing program 5: r0 = open(0x0, 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000408090a0200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='time_off\b\x00\x00\x000x0000000000000000,\x00']) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) readlinkat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/4096, 0x1000) 08:20:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x1b2}], 0x4, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fdc587e, 0x6, 0x7, 0x32c, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) inotify_add_watch(r6, &(0x7f00000001c0)='./file0\x00', 0x40000803) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ptrace$cont(0x20, r0, 0x0, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e23, 0x8, @loopback, 0x7}, {0xa, 0x4e23, 0x90000, @remote, 0xfffffffb}, 0x7, [0xc608, 0x5, 0x5, 0x3f, 0x6, 0x80000000, 0x5fcb, 0x4]}, 0x5c) 08:20:08 executing program 5: r0 = open(0x0, 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 645.867393][T14204] FAT-fs (loop3): Unrecognized mount option "time_off" or missing value [ 645.984290][T14220] FAT-fs (loop3): Unrecognized mount option "time_off" or missing value 08:20:09 executing program 3: execve(&(0x7f0000000140)='./bus\x00', &(0x7f0000000440)=[&(0x7f0000000180)='*md5sumuser\x00', &(0x7f00000001c0)='nv\x00', &(0x7f0000000200)='\x95\x00', &(0x7f0000000240)='\x1ev^#vmnet0mime_typenodevcgroupselfbdevwlan0vmnet0\x00', &(0x7f0000000280)='nv\x00', &(0x7f00000002c0)='eth0\\/\x00', &(0x7f0000000340)='nv\x00', &(0x7f0000000380)=',\x00', &(0x7f00000003c0)='^\\system\x00', &(0x7f0000000400)='nv\x00'], &(0x7f0000000600)=[&(0x7f00000004c0)='-\x00', &(0x7f0000000500)='nv\x00', &(0x7f0000000580)='nv\x00', &(0x7f00000005c0)='nv\x00']) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xfffbffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xffffffa8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000100)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000640)='eth1system:\x00', 0x0, r2) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000680)={0x20, 0x0, 0x0, 0x1000, 0xe4d1}) mmap(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x0, 0x12, r3, 0x0) 08:20:09 executing program 5: r0 = open(0x0, 0xb8160, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:10 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:10 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:10 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x3, 0xc, 0x4, 0x1000, 0x10000, {}, {0x5, 0x1, 0x7, 0x40, 0x1, 0x6, "c12cdc4f"}, 0xffff, 0x2, @fd, 0x2, 0x0, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7f, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) close(r3) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x1, r2}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000180)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_emit_ethernet(0x12a5, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x0) 08:20:10 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 648.054220][T10593] Bluetooth: hci0: command 0x1003 tx timeout [ 648.060364][T13331] Bluetooth: hci0: sending frame failed (-49) [ 649.404093][T10593] Bluetooth: hci1: command 0x1003 tx timeout [ 649.410207][T13331] Bluetooth: hci1: sending frame failed (-49) [ 650.124344][ T3008] Bluetooth: hci0: command 0x1001 tx timeout [ 650.130448][T13331] Bluetooth: hci0: sending frame failed (-49) [ 651.484159][ T9631] Bluetooth: hci1: command 0x1001 tx timeout [ 651.490271][T13331] Bluetooth: hci1: sending frame failed (-49) [ 652.204179][ T9631] Bluetooth: hci0: command 0x1009 tx timeout [ 653.564158][T10873] Bluetooth: hci1: command 0x1009 tx timeout 08:20:18 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:18 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x15f) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:18 executing program 3: clone(0x441be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000640), 0x4) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={0x1, 0xfd, &(0x7f0000000680)=""/253}) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x13, 0x19, 0x1a5, &(0x7f0000000240)}) tkill(r1, 0x3c) rt_tgsigqueueinfo(r0, r1, 0x1f00, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fcntl$setown(r3, 0x8, r6) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x402, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000780)=""/4096) 08:20:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400001000000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e00000000040002800a0001000080c20000000000"], 0x40}}, 0x0) 08:20:18 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@local, @empty}, &(0x7f0000000180)=0xc) init_module(&(0x7f00000000c0)='\x83\x00', 0x2, &(0x7f0000000100)='wg1\x00') prctl$PR_GET_TIMERSLACK(0x1e) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0xc302) renameat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') 08:20:19 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:19 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000440)='./file1\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)={[], [], 0xf603000000000000}) ftruncate(0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)="f460a12e5beae70b7edac5df3d10ef730ebaf4a2294b7dd175f8de83a21f7cd3a3506e5a5cde6c19955cd67fe993c6bdae3bb7b9f65250764a0c99c8644618713e", 0x41, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x482, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000540)=@in4={0x21, 0x2, 0x2, 0x3d, {0x2, 0x4e20, @local}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), 0x0) 08:20:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x1, 0x2, 0x0, 0x1, 0x2, 0xcf, 0x7, 0x3, 0x1, 0x9, 0xc0, 0x1, 0xe5ea}, {0x9, 0x20, 0x1f, 0x6, 0x80, 0x96, 0x9d, 0x5, 0x7f, 0x1, 0x3, 0xce, 0x9}, {0x80000001, 0x1, 0x5, 0xa3, 0x9, 0x1, 0x0, 0x81, 0xcd, 0xb5, 0x6, 0x20, 0x3ff}], 0x3}) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="200089a18e399515e8b50179d88cf3310100130a01020000003100000000bc3ea0679f43b1e0935ee91313d99c01000000000000002195e5316f47164df776618f3301342b98f21bc0d67d4f29e425855a6dc35aa2307d370d61"], 0x20}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x20, 0x7, 0x4, 0x9}, {0x8001, 0x27, 0x0, 0x2}, {0xff, 0xff, 0x1, 0x7f}, {0x9, 0x6, 0xc1, 0x5}, {0x3, 0x1, 0x9, 0x2}, {0xfff7, 0x68, 0x4, 0xff}, {0x100, 0x4, 0xff, 0xfffffff8}]}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 656.278557][T14295] overlayfs: missing 'lowerdir' [ 656.338593][T14300] overlayfs: missing 'lowerdir' 08:20:20 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x19e}) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:20 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:20 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fcntl$notify(r0, 0x402, 0x8000001b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r5, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r5, 0x6}}, 0x18) write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18, 0x0, 0x6, {0x8}}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 08:20:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0xfffffff, 0x1c726702, 0x8e1, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9a0917, 0x0, [], @p_u8=&(0x7f0000000140)=0xf8}}) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x2ce3cc660783ac58) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[r3, r4, r5]}, 0x3) bind$rxrpc(r1, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x8) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x63e, &(0x7f0000000400)="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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r6 = inotify_init1(0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x33, 0x6, 0x0, {0x6, 0x1, 0xa, 0x0, 'vboxnet1f['}}, 0x33) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) mmap$binder(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x6) process_vm_readv(r7, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 08:20:20 executing program 0: write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000000c0)={0xd8, 0x0, 0x4, [{0x0, 0xfff, 0x0, 0x8}, {0x4, 0x6, 0xa, 0x20, '$bdevwlan1'}, {0x5, 0x30000000000, 0x1, 0xfffffe69, '$'}, {0x1, 0xffffffffffffffff, 0x0, 0x41}, {0x5, 0xfff, 0x0, 0x7}, {0x1, 0x1000000000000, 0x19, 0x9, ')+posix_acl_accesstrusted'}]}, 0xd8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 08:20:21 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:21 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 658.181618][T14323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:20:21 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:21 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) [ 658.253524][T14316] ptrace attach of "/root/syz-executor.3"[9606] was attempted by " °ÿ àÿ 0 p Ðÿ  ÿ Àÿ ðÿ ÿÿÿÿ hugetlb.2MB.max_usage_in_bytes @     3    \x0a vboxnet1f[ ./file0 ø \x09š @ >  ÿÿÿgrá ÿÿÿÿ €  ÿÿÿÿ  € @ [ 658.300370][T14323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 08:20:21 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 658.421405][T14323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:20:21 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 658.638628][T14364] ptrace attach of "/root/syz-executor.3"[9606] was attempted by " °ÿ àÿ 0 p Ðÿ  ÿ Àÿ ðÿ ÿÿÿÿ hugetlb.2MB.max_usage_in_bytes 3    \x0a vboxnet1f[ ./file0 ø \x09š @ >  ÿÿÿgrá ÿÿÿÿ €  ÿÿÿÿ  € @ [ 658.683276][T14369] cgroup: fork rejected by pids controller in /syz5 [ 660.444956][ T2725] Bluetooth: hci0: command 0x1003 tx timeout [ 660.451069][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 662.525388][ T2725] Bluetooth: hci0: command 0x1001 tx timeout [ 662.531528][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 664.604076][ T3008] Bluetooth: hci0: command 0x1009 tx timeout 08:20:31 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_IFALIAS={0x14, 0x14, 'syzkaller0\x00'}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) 08:20:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x7, 0x1, {{0x4, '+{@\''}, 0xff}}, 0x11) sendmsg$SEG6_CMD_GET_TUNSRC(r2, 0xffffffffffffffff, 0x2000c091) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x130, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd28, 0x70bd2a, 0x4, 0x35, [0x8001, 0xbff8]}}, @replay_esn_val={0x1c}]}, 0x130}}, 0x0) 08:20:31 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:31 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0x0, @in=@empty}}, 0xe8) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="b800000000000000000000000000000000000000000000000000000000000045faf57062195ab7000000000000000063e88d510000009c6d59ecd1226006000000000000000000000000000000000000000000000000000000ffffffff00"/124, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000b0000002d3102360000000000c642a840ed8444acc9818bc43d1ff944ae3fb3c129b948c4daf99077bfbbad00"/83], 0xb8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x3, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100)={0x0, 0x2710}, 0x10) 08:20:31 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 668.995970][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.023057][T14483] BFS-fs: bfs_fill_super(): Inode 0x00000007 corrupted on loop3 08:20:32 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 669.080131][T14493] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 08:20:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x100}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c845}, 0x4000841) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000001c0)={0x5, 0x2, 0x4, 0x2000000, 0x80000001, {0x0, 0x2710}, {0x2, 0x1, 0x7, 0x5, 0x7, 0x1, "e43e5efa"}, 0xfffffff8, 0x4, @userptr=0x20, 0xfff, 0x0, 0xffffffffffffffff}) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f0000000000)) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff810000008100000086dd60ee9a6300442f0000000000000000000000000000000000fe800000000000000000000000000000342081000000000000000800000086dd080088be00000000102dd6000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000300)) [ 669.145868][T14494] BFS-fs: bfs_fill_super(): Inode 0x00000007 corrupted on loop3 08:20:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000040)='L', 0x1, r3}, 0x68) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f0000000280)='9', 0x1}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4000, @dev}, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20a00, 0x0) socket$kcm(0x2, 0x0, 0x0) 08:20:32 executing program 3: getsockname(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_read_part_table(0xe4ffffff, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40580, 0x970edc301dbf57ac) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000280)={0x6, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) 08:20:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb63b47", 0xc}], 0x1) close(r4) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x54e7547e02afa628}, 0x80) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x1, [], "0470976934ba46935ed455d15067a0cc"}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffdc, 0x0) [ 669.538325][T14511] loop3: p1 < > p4 [ 669.578165][T14511] loop3: p4 start 1854537728 is beyond EOD, truncated 08:20:32 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x8a41, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="5ee6c2e3", @ANYRES32=0x0], 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 670.358546][T14535] kvm [14531]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000008b data 0xfffffffc [ 671.084183][T10873] Bluetooth: hci1: command 0x1003 tx timeout [ 671.090309][T13331] Bluetooth: hci1: sending frame failed (-49) [ 671.096921][T10873] Bluetooth: hci0: command 0x1003 tx timeout [ 671.103127][T13331] Bluetooth: hci0: sending frame failed (-49) [ 673.164278][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 673.170330][T10873] Bluetooth: hci1: command 0x1001 tx timeout [ 673.170375][T13331] Bluetooth: hci0: sending frame failed (-49) [ 673.190748][T13331] Bluetooth: hci1: sending frame failed (-49) [ 675.257531][ T3008] Bluetooth: hci1: command 0x1009 tx timeout [ 675.264352][ T3008] Bluetooth: hci0: command 0x1009 tx timeout 08:20:42 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x9}, @llc={@llc={0xd4, 0xaa, "17fc", "c1db65adcdba287c78028423cd4348ace6"}}}, 0x1f) 08:20:42 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800004000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x162}], 0x808480, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000637620003555e5689d91b59672a8a29c14dadc3cab5ed450fe2f2ea21e6a23e220a67d351f7e3e71bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d06a30b65ef3b9726b72d3999f59b85afa20c6e8e6bc42bc9f9fce6123d6cbc43"], 0x5f) socketpair(0x18, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@null=' \x00', 0xe, 'wg2\x00'}) unlink(&(0x7f0000001e00)='./bus\x00') ftruncate(r1, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) 08:20:42 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x8a41, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="5ee6c2e3", @ANYRES32=0x0], 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:20:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:20:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:20:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:20:42 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 679.949142][T14562] kvm [14558]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000008b data 0xfffffffc 08:20:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x8b, 0x7, 0x0, 0x81, 0x0, 0x1, 0x41803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fffffff, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) clock_gettime(0x4, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0)={r1, r2/1000+30000}, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000200)=0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x4000, 0xd001, 0x4], 0x9, 0x40, 0xe6}) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="b0c0028057a771486fb5273334300b3b04a15f61f38bee91e169789ef54793463c4fe4614296ec440cd550a2068e43653fac3644914cc3cf8e140ad6c78b76958c748af9e41d87f764c6fe9fc75ee252d4278b63dea8dae8b1ebf1f8c72801f559d90270983d6c825ec4c2f3b551a5b96afa84f532cdca4a2f04541a61efd92aa4c755156423cf71f3ab372df8d8098538862b3d9f556f26a586f2cb11f52e6af08a051b97b66850072b03c0899049ac6ded2250b7668bce61607147b16ae59e0aea902470f2e51b3932064ce40335e5b441ecd29d72b67c8de8b5dd89e6a4f423f7d60046b737af8a56bd7999756c2dcfc607cc1afb01b6c690c523b9e849c0bcfc1b68ee2dd5da7090"], 0xda00) 08:20:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800004000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x162}], 0x808480, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000637620003555e5689d91b59672a8a29c14dadc3cab5ed450fe2f2ea21e6a23e220a67d351f7e3e71bf8c7784a744eaf295764d3c9f91d5fe01d83d1347d06a30b65ef3b9726b72d3999f59b85afa20c6e8e6bc42bc9f9fce6123d6cbc43"], 0x5f) socketpair(0x18, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@null=' \x00', 0xe, 'wg2\x00'}) unlink(&(0x7f0000001e00)='./bus\x00') ftruncate(r1, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 681.404086][T10873] Bluetooth: hci0: command 0x1003 tx timeout [ 681.411484][T13331] Bluetooth: hci0: sending frame failed (-49) [ 681.884085][ T9602] Bluetooth: hci1: command 0x1003 tx timeout [ 681.890222][T13331] Bluetooth: hci1: sending frame failed (-49) [ 683.484199][ T9602] Bluetooth: hci0: command 0x1001 tx timeout [ 683.490326][T13331] Bluetooth: hci0: sending frame failed (-49) [ 683.964091][ T9602] Bluetooth: hci1: command 0x1001 tx timeout [ 683.970209][T13331] Bluetooth: hci1: sending frame failed (-49) [ 685.564212][ T2725] Bluetooth: hci0: command 0x1009 tx timeout [ 686.044108][ T2725] Bluetooth: hci1: command 0x1009 tx timeout 08:20:52 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:52 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, 0x0) time(0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80000001, 0x200000) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3, r4}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={[], [], @empty}}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x7) 08:20:52 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(0x0, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:52 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYBLOB="ab000000a6d23fa0c908488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e974da678460b0aa7629aed35eb9bb9e096cc3825df10acb8c0df11579ba3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d74831940900775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07349ecad51875cd1e6733aae279ef7d7600000000000000003dff730890f55c97bea2095e06dbd7456f845678b18c"], &(0x7f0000000540)=0x1) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300200000000800000400000000e9ca"], 0x1}}, 0x0) mbind(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x8, 0x81, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x6) r3 = msgget(0x1, 0xe) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000004c0)=""/110) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) 08:20:52 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x6}, 0x1440, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x2, r1, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000200)="0d3a7a4423386e58b11fff61f98a07fb19917cbbcb084dcbb658c8d0ae85b410aeb57796e7eaeeb2c389e4d2643e390ac1ee09fa04fc53ee48e603d0d9ecb6203b7802cf5c7a98ab72c95ae610a7a07cd4c4d7a2bf9c", 0x56) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r4, r2) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x44200, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x4, 0xffffffff, 0x1, 0x401, 0x3, 0x1, 0x0, 0x5}}) 08:20:52 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:20:53 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f00000004c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x10000000000000ff, 0x0, 0x0, 0x10a3009, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = getgid() r4 = socket(0x10, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x204000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000480)={r6}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r7) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x40, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x8e}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@uid_eq={'uid', 0x3d, r7}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@audit='audit'}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f000000c0c0)={0x0, 0x0, &(0x7f000000c000)=[{0x0}, {0x0}], 0x2}, 0x0) 08:20:53 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffe000/0x1000)=nil) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000900)=""/4096) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400"/19, @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x40080) 08:20:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x220480, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="ea0bbbb27b58f8891840511f294f4a827117d6c5f1ffc16e337b878bff66468f24d64afc8da3b1b677fab9fad26eeab4400eadcf96a0dc6e2a3feac4f3951a189f01caac826d863b274b8d8b672bdbc51b88bd194f53e7eb99aa53d203f84c91a5eecbc8accb2c9479bc15d9e346b3c9652925fde0d1272c18a0290f5d226972821391dc3ef8ef280b1939dcd57b49096251ebadb091048495b5522e43b499ba74055d2081000000afb158ba672b97944b2b996cb776f40e58151424c2828d15cb8408a21016874fe9df7d459bff7d44bb9e225c0af831", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000000000000000ff00ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 08:20:53 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(0x0, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:20:53 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) 08:20:53 executing program 0: r0 = msgget(0x1, 0x0) add_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="ad257162cf8720896df7af6b440dff71f46b87f90c003caeaa10728f1e6f638044203600217452be1edcfab06cb3cc30b0221d36c878b5fc26773621a21400caeb0bdb435938debbf2526858864841f2f04eae75e4ffdaa5fe7bc08879df9916221706df7cfb71118990c16cfd53fe6f91da9167e25d1a7590526c350bb02cd838b8174c274378b0ce1b69dd9baf5114a86397488502b912cb15be1981f6ee7eed82feea", 0xa4, 0xfffffffffffffffa) r1 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x37, 0x4000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x84840, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfee5, @local, 0xff}, {0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, [], 0x36}, 0x2}, r4, 0x6}}, 0x48) msgctl$IPC_RMID(r0, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800002a000505d25a80758c63940d0124fc60100003400a000000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000480)=0x800, 0x4) setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0, r6, 0x1000) 08:20:54 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 691.302655][T14761] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 691.364723][T14761] netlink: 'syz-executor.0': attribute type 8 has an invalid length. 08:20:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff39ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x20}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4011) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000001c0)={{0x0, 0x0, @reserved="6b689f714b132405e5daa4f20970065bece25d5391445c42dc424e5fb5f88cd0"}}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000001500)) r4 = geteuid() syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000240)='./file0\x00', 0x1f, 0x2, &(0x7f0000000300)=[{&(0x7f0000000280)="2332f9d07715505e07790865732b8e33dd66065d55fc830ee4f2fa5bbb94fbe60467fc95c33d5b91332e48c54227699dde05bdc42fb42d54de85bb8f835748dfd933e560ffb1f68ff00dfb88584756653125ee95eedea3e0361ed8574ad451b33398cf9d8aa875dbdd96780ce8b2d5b8a3b37b435833", 0x76, 0x2}, {&(0x7f0000001400)="56c1ba6d905598bf34b034c8d744c576468a3ce5a4f1873861612608ae21ea3eeb5b3dc2f42b7c118aeb4cf2101ccac9166cbb271b27da7f360fd182f34305f371dfd51438cb9ba480a186a95d354239785c41ae811af7f1b165e9a9ff6ef4e621a1c6affc949e46025bc86ede7b475526fd932b0c9b737d2e83146f83c3f7ff3f0528b62fe03e233c33e45294698265ce4c2b1e8bfe499246fa7d6aca5557a3a3397f95f915af2005b4733c1ef5508feb3149084db6804f91ce44f9d5681f61f3b06bf9cddd82e05ec9dba2", 0xcc, 0x1}], 0x14000, &(0x7f0000001540)={[{@fault_injection={'fault_injection', 0x3d, 0x5a8}}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}], [{@euid_gt={'euid>', r3}}, {@subj_type={'subj_type', 0x3d, 'lblcr\x00'}}, {@fowner_lt={'fowner<', r4}}, {@smackfshat={'smackfshat', 0x3d, 'selinuxem0trustedGPLppp1M\''}}]}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x807c6406, &(0x7f0000000400)=""/4096) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) [ 691.434474][T14761] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.0'. 08:20:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0xdf}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0}) pipe(0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005b80)={{{@in=@broadcast, @in=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000005c80)=0xe8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r4, r5], 0x2) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1], @ANYRES16=r6, @ANYRES32, @ANYPTR64], 0x5}}, 0x24040040) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f45076465762f6e726430009cea0db772d257"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)='devtmpfs\x00', 0x18000, &(0x7f0000000300)='9p\x00') bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r8}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003f40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ff086b", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000810800010063627100180402000404060003000005003bae10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed48000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008cffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c442781da7ea2f2e3593e0bb95b9616fb01ee7972d37f4a7222dd6f9266000c783f16b9f97abe80fbe29e586ea2fbb40fd6be15179d72caed9e3c9e65d38972642648cb59680f3db7347af07d6805808a84622e12ec0ff5ad46f5f099bee08d9c3b17b0cdd86d443b6c449ddda4e689f6125cf1656691950e2e05d3508a6d7cb79003df77c386146a25670020244e347ef0c336441b46903b1309e79df4508b0089"], 0x444}}, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000006440)) r10 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r10, 0x641f) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000006700)={@dev}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e5f3d7463702c706f72743d38340500303130302c00"/35]) syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') [ 691.573077][T14765] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 691.595452][T14765] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 691.625823][T14765] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.0'. [ 691.771159][T14769] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 692.204080][T10873] Bluetooth: hci0: command 0x1003 tx timeout [ 692.210208][T13331] Bluetooth: hci0: sending frame failed (-49) [ 693.484085][T10873] Bluetooth: hci1: command 0x1003 tx timeout [ 693.490280][T13331] Bluetooth: hci1: sending frame failed (-49) [ 694.284113][T10593] Bluetooth: hci0: command 0x1001 tx timeout [ 694.292123][T13331] Bluetooth: hci0: sending frame failed (-49) [ 695.564223][ T9631] Bluetooth: hci1: command 0x1001 tx timeout [ 695.570321][T13331] Bluetooth: hci1: sending frame failed (-49) [ 696.364101][ T9631] Bluetooth: hci0: command 0x1009 tx timeout [ 697.644172][ T9631] Bluetooth: hci1: command 0x1009 tx timeout 08:21:03 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(0x0, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:03 executing program 0: pipe(0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x7fff, "23e1bb65366fe087680eab3d3a38ea5b475581f5e87d19651c91189acdf6fbd4", 0x2, 0x0, 0x4, 0x10, 0x4}) 08:21:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff39ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x20}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4011) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000001c0)={{0x0, 0x0, @reserved="6b689f714b132405e5daa4f20970065bece25d5391445c42dc424e5fb5f88cd0"}}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000001500)) r4 = geteuid() syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000240)='./file0\x00', 0x1f, 0x2, &(0x7f0000000300)=[{&(0x7f0000000280)="2332f9d07715505e07790865732b8e33dd66065d55fc830ee4f2fa5bbb94fbe60467fc95c33d5b91332e48c54227699dde05bdc42fb42d54de85bb8f835748dfd933e560ffb1f68ff00dfb88584756653125ee95eedea3e0361ed8574ad451b33398cf9d8aa875dbdd96780ce8b2d5b8a3b37b435833", 0x76, 0x2}, {&(0x7f0000001400)="56c1ba6d905598bf34b034c8d744c576468a3ce5a4f1873861612608ae21ea3eeb5b3dc2f42b7c118aeb4cf2101ccac9166cbb271b27da7f360fd182f34305f371dfd51438cb9ba480a186a95d354239785c41ae811af7f1b165e9a9ff6ef4e621a1c6affc949e46025bc86ede7b475526fd932b0c9b737d2e83146f83c3f7ff3f0528b62fe03e233c33e45294698265ce4c2b1e8bfe499246fa7d6aca5557a3a3397f95f915af2005b4733c1ef5508feb3149084db6804f91ce44f9d5681f61f3b06bf9cddd82e05ec9dba2", 0xcc, 0x1}], 0x14000, &(0x7f0000001540)={[{@fault_injection={'fault_injection', 0x3d, 0x5a8}}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}], [{@euid_gt={'euid>', r3}}, {@subj_type={'subj_type', 0x3d, 'lblcr\x00'}}, {@fowner_lt={'fowner<', r4}}, {@smackfshat={'smackfshat', 0x3d, 'selinuxem0trustedGPLppp1M\''}}]}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x807c6406, &(0x7f0000000400)=""/4096) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 08:21:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:03 executing program 1: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020101030000000000000000000200ee94cdad16df00766864640c5574c89300002a3a1458239b807a5b4d2c2820a804849f22016ec32b0569b1c88717c80daaf02a4176f7bda68d0d883f49553742"], 0x14}}, 0x1) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'team0\x00', {0x2, 0x4e22, @local}}) 08:21:03 executing program 1: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) write$cgroup_int(r0, &(0x7f0000000380), 0x12) write$cgroup_int(r2, &(0x7f0000000400), 0xd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 700.616615][T14824] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 700.676825][T14835] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 700.710207][T14835] File: /root/syzkaller-testdir203887071/syzkaller.CfMkk6/121/memory.events PID: 14835 Comm: syz-executor.1 08:21:03 executing program 0: pipe(0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x7fff, "23e1bb65366fe087680eab3d3a38ea5b475581f5e87d19651c91189acdf6fbd4", 0x2, 0x0, 0x4, 0x10, 0x4}) 08:21:03 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pidfd_open(r2, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/netstat\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r5, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r5, 0xfffffe01, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xb9, @empty, 0x2}, @in6={0xa, 0x4e23, 0x7fff, @mcast1, 0x400}}}, 0x118) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) 08:21:04 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:04 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:21:04 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:04 executing program 0: r0 = creat(0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x416a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @ipv4={[], [], @remote}, 0xff, 0x3}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xd8002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0xa, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000240), &(0x7f00000002c0)=0x30) setsockopt$RDS_RECVERR(r3, 0x29, 0x13, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x7, &(0x7f0000000080)="52b310d229a5d3", 0xf, 0x0, &(0x7f0000000100)="1197cb4ecc4e1eb36dc14b91574664"}) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000000a00)=0x1, 0x4) socket$kcm(0x11, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7400000010000507000000000008000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800e67f0400130005000600ff000000060011004e22000006001100000000000500060000000000050009000400000006000f00000000000a0005001400000000000000"], 0x74}}, 0x0) 08:21:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff39ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x20}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4011) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000001c0)={{0x0, 0x0, @reserved="6b689f714b132405e5daa4f20970065bece25d5391445c42dc424e5fb5f88cd0"}}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000001500)) r4 = geteuid() syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000240)='./file0\x00', 0x1f, 0x2, &(0x7f0000000300)=[{&(0x7f0000000280)="2332f9d07715505e07790865732b8e33dd66065d55fc830ee4f2fa5bbb94fbe60467fc95c33d5b91332e48c54227699dde05bdc42fb42d54de85bb8f835748dfd933e560ffb1f68ff00dfb88584756653125ee95eedea3e0361ed8574ad451b33398cf9d8aa875dbdd96780ce8b2d5b8a3b37b435833", 0x76, 0x2}, {&(0x7f0000001400)="56c1ba6d905598bf34b034c8d744c576468a3ce5a4f1873861612608ae21ea3eeb5b3dc2f42b7c118aeb4cf2101ccac9166cbb271b27da7f360fd182f34305f371dfd51438cb9ba480a186a95d354239785c41ae811af7f1b165e9a9ff6ef4e621a1c6affc949e46025bc86ede7b475526fd932b0c9b737d2e83146f83c3f7ff3f0528b62fe03e233c33e45294698265ce4c2b1e8bfe499246fa7d6aca5557a3a3397f95f915af2005b4733c1ef5508feb3149084db6804f91ce44f9d5681f61f3b06bf9cddd82e05ec9dba2", 0xcc, 0x1}], 0x14000, &(0x7f0000001540)={[{@fault_injection={'fault_injection', 0x3d, 0x5a8}}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}], [{@euid_gt={'euid>', r3}}, {@subj_type={'subj_type', 0x3d, 'lblcr\x00'}}, {@fowner_lt={'fowner<', r4}}, {@smackfshat={'smackfshat', 0x3d, 'selinuxem0trustedGPLppp1M\''}}]}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x807c6406, &(0x7f0000000400)=""/4096) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 08:21:04 executing program 1: accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="8da4363ac0ed02000a0000000001004d010000000000000000007a000000000001f60180000048aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d14acf3c5ea02f279b02f9c6f85e60b3c711f03cced8438c22a1fddd4bcc13add400a4f551cdf796cab8809c60c12b5b2b4915dc04f46d202e2b7dc13506258942eb919b0ddf30a36c9a328e20e1cab31ea8520303aee6af12ab7458456eb8f22ab68797dc26c08cd44e0f58d06388c1f72bff7b5e6ab9a1ed69fbd6cda880dd6227c", 0xca, 0x10000}], 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000200)={0x3b, @broadcast, 0x4e23, 0x2, 'nq\x00', 0xc, 0x7e7b, 0xd}, 0x2c) 08:21:04 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) [ 701.779679][T14868] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 701.985361][T14866] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 702.073010][T14887] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 702.524109][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 702.530236][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 704.604144][T14698] Bluetooth: hci0: command 0x1001 tx timeout [ 704.610249][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 706.684202][ T12] Bluetooth: hci0: command 0x1009 tx timeout 08:21:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:14 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:14 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x6, &(0x7f0000000000)=""/85, 0x55) write(r1, &(0x7f0000000600)="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", 0xe00) sendfile(r1, r2, 0x0, 0x12000) 08:21:14 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:21:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x1000000000000003, 0x29) ioperm(0x639b, 0x7fff, 0x9) r2 = socket$inet(0x2, 0x3, 0x19) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0x48, "4d908bc2f5fa4f5fd03eb707f8e64bb9c21348645b144dbfa5f5179756907c66", 0x3, 0x20, 0x7, 0x5, 0x2, 0x3, 0x7, 0x54}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c5811030400000000000000fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000069740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800030a00000000800000000000000008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7, @ANYBLOB], 0x5}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', r7}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x198, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x89}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x430f2213}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8001}, 0x40080) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000e000000500006b1e589dd9d6a4e97b309033e51000aa32de5008c7894ca528f906c0de98ad1d6c954c42cb483e5a4252beb5b83ebb7134dfea237ab25fd2260843431d648313bc77c9be0652b5b52c26b47e443899e4bd31496f6d70c798426fcbe428a107f3dcd6da2a713087a346032ae18a"], 0x18) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) r11 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fchdir(r11) 08:21:14 executing program 0: semget(0x1, 0x0, 0x160) fcntl$getown(0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioprio_set$pid(0x1, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = dup(r0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0xcce}, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x6000000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000060601080000000000000000000000000900020073797a30000000000500010007004b29cfb0035a62c3af30c388b7cea01e70492cd1576c27a21e00b16548a0f906145fdd9d6d61a05b365744a5e967c5f49d0ca1b3f1c0cc52d09a167b5f4c8467ea801adafda63028a1710af0e0a3179b4cc4aa29ecc5da9e628db4edd2529a98711a07f2670cfab4e7314c62d0a95b30e03005dc14baf9e8c96ebdf754"], 0x28}}, 0x0) syz_genetlink_get_family_id$net_dm(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20000051) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 711.224955][T14898] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 711.264890][T14898] tipc: Enabling of bearer rejected, illegal name 08:21:14 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)) [ 711.297015][ T23] audit: type=1800 audit(1583223674.188:114): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16635 res=0 08:21:14 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x0) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 711.459478][ T23] audit: type=1804 audit(1583223674.298:115): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir203887071/syzkaller.CfMkk6/124/file0" dev="sda1" ino=16635 res=1 08:21:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0)='B', 0x1) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x12f}]) [ 711.579358][T14898] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 08:21:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 711.656381][T14898] tipc: Enabling of bearer rejected, illegal name 08:21:14 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x0) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'veth0_to_bond\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'veth0_to_bond\x00', r3}) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x40, @empty, 'veth0_macvtap\x00'}}, 0x1e) 08:21:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:15 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x202a00, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x100c}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c9, &(0x7f0000000600)={0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="e9dc35cc0a80be86d8fbf66028bc34359abbbd22720e8c0402c8c8cc05c8b33893f4d11a9f1a8869440d55e0f7132af3e858261e8f42d917cc252b0b90cc62ef8ae8871a4efc3471669dd713c0cf530f824f05a305fe7bbf", @ANYBLOB="0000008d71cd362202d45c99c7cbb08d9a4b65f109d9b7a1cab4389f69776ea64fade31b987c8f21992e2338e8bec4b747cd5d4e8cb8fb7199de14167ae5da1ca4bbbf47412991f3edb7b261d0bd0e8e32f7142bd4a98d6b838084a6e63a8c8b3c0848", @ANYRESDEC, @ANYRES64, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248fb5ab67015362d7e1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x7, 0x1) r4 = socket(0xa, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[]}}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) dup2(r5, r6) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES32=r1, @ANYRES64], 0xe}}, 0x20044852) syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0xc) 08:21:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendto$unix(r1, &(0x7f0000000140)="8b5992e3b3c63cdda7cc5b7427028978ed4dabdec8f27679ddf218e6a1b33eed7a912fe8c78328b4944cc984a236a67c4ac39cdd4af7a54f0d501ad30b487c00472eefd2ce1f06aac1fc3988e6493969c1a851d9ac203b136537b1375dbbebac603661cd3d07fd02fd8ff7c66b2c232872790dc02cf55b406fc3", 0x7a, 0x20, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0}, 0x78) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f01c92e0f00106626dd7e0066b88c000f00d0c4c301688079670000bdb97b080000b8b1bae9baba000000000f304366b881008ed00f01c966b807018ec0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 08:21:15 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x0) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 712.633654][T14970] input: syz0 as /devices/virtual/input/input12 [ 713.160434][T14970] input: syz0 as /devices/virtual/input/input14 [ 713.564163][T10873] Bluetooth: hci0: command 0x1003 tx timeout [ 713.570307][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 715.644826][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 715.650944][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 717.734119][T10873] Bluetooth: hci0: command 0x1009 tx timeout 08:21:24 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:24 executing program 3: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) dup(0xffffffffffffffff) r1 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r1}, 0x0) getpgid(0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) fsetxattr$system_posix_acl(r3, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="00eb800000", @ANYRES32, @ANYRES32=0x0], 0x3, 0x1) r4 = socket(0xa, 0x3, 0x8) r5 = accept4$unix(r3, 0x0, &(0x7f0000000540), 0x80000) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'batadv_slave_0\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200e3000000000000"], 0x9}}, 0x0) waitid(0x83b895581628fca4, 0x0, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r4, 0x0, 0xc054) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, 0x0, 0x0, 0x77c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x6, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r6, r7, 0x0, 0x102000004) 08:21:24 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:24 executing program 0: r0 = socket$kcm(0x29, 0x200000002, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 08:21:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000080000002600ffff0000000056000000000000009500000000000000472816bff8ddc4c4f36c4fe6025292f3975cc6928002f886ae17d82e0bae1299761b2b29ae876f43d3ed1bdd0bfce5c8ba2010992796e77127022b63abed6ac8bc80e2aa755ed0f56ab2a859d4274c57627d306fe086845c32b9ebe7dd2dc5cc8e984adffc6776da452d95b31f3b4d8798ef70d0a8caf3dd1d7e052e1585d4f157af07cb46137a5261ada8380821a01b9224b840bad0a4855d157c03ff722720e481acb988888abdd11a0729ff14a9b2fe3101d44e4386a5fc73ed4a0e08f19c805b3dc83ac284cb1c67125bda78"], &(0x7f0000000140)='GPL\x00', 0x5, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, [0x0, 0x0, 0x8], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 08:21:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xffc00}], 0x1, 0x0) writev(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = open(0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r3, 0xc0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0, 0x0, &(0x7f0000001440)={0x0, 0x2}, 0x0, 0x0, &(0x7f0000001480)={0x1, 0x6, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001640)={0x0, r0, 0x0, 0xc, &(0x7f00000000c0)='/dev/nullb0\x00', r4}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) prctl$PR_GET_TIMERSLACK(0x1e) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfdef) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 08:21:25 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_SRC_IF={0x8, 0x9, r8}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x88, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x88}}, 0x8000) accept4$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x332, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) r11 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x80000) r12 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r12, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r12, 0xc058565d, &(0x7f0000000400)={0xd0, 0x1, 0x4, 0x20000000, 0x2, {0x77359400}, {0x1, 0x0, 0x20, 0xb5, 0x81, 0x8, "67ec94eb"}, 0x5, 0x2, @offset=0x1000, 0xff, 0x0, r5}) ioctl$VHOST_NET_SET_BACKEND(r13, 0x4008af30, &(0x7f0000000480)={0x3}) ioctl$KVM_KVMCLOCK_CTRL(r11, 0xaead) write$FUSE_NOTIFY_POLL(r11, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x6}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r16 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r16, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0xfffffffffffffe7f) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0100000004030000600012800e00010069703665727370616e0000004c000280060010004e240000060011004e2100000400120008000c0007000000060010004e22000014000700ff0200000000000000000000000000010500160002000000050008000200000008000a00", @ANYRES32=r17, @ANYBLOB="9441fc1e92c7374eec62ce305217fc00917c3c385d5ed64f5c1bac0ea93bba4dd3838d2f7eae5878dc14d0988b5081fdad82b4d79f1c810f19e999c600"/73], 0x88}}, 0x0) 08:21:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x9) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @multicast2}, &(0x7f00000002c0)=0xc) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000180)) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x280c81, 0x0) fchmodat(r7, &(0x7f0000000240)='./file0\x00', 0x91) 08:21:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 724.284103][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 724.290239][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 726.364067][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 726.370164][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 728.444237][ T12] Bluetooth: hci0: command 0x1009 tx timeout 08:21:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:35 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:35 executing program 1: perf_event_open(&(0x7f0000000640)={0xcff42cf8c579976c, 0x70, 0x3e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x91dd7106ca8f533b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x388, 0x0, @perf_config_ext={0x10001, 0x4}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000007, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677c2f0df82826fffb34124021bd36a2ecfabd5a22c3664f8520508a4248fb0fb3c7874ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e884e945892d9251a511906843275989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r1, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$kcm(0x11, 0x7, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r7, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r10 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r10, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40)}}, r10, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r13 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3a, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa3000000000000070300000095cebd573e43ddb2301502feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e24ef60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a745f801ff110026e6d2efe31ab7ea0e64f17e3ad6ef3bb62203099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7eaa49c62ba0fe52fa65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b802000000000000ea334d8323893c5337669dd27080e76dbd9f05b64d8547c8310a1247579e99e44128b2fdc7223b9dbc2898aa742a871179eb48b34db8253cd5da5576b16f07845bee4d180539694a4d2a48a3f875d1b437fb39ac66d64445f46fdcf156debad069d9d0f85ecdb0d4befcbcce15276e21d8a20f0b5a4b1a1b85ca0f82"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r14 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r14) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x89a1, &(0x7f0000000680)='&@[\x00') r15 = getpid() sched_setscheduler(r15, 0x5, &(0x7f00000002c0)) syz_open_procfs(r15, &(0x7f00000001c0)='net/netstat\x00') r16 = getpgrp(r15) r17 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x20a0, 0x0, 0x0, 0x0, 0x0, 0x6}, r16, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r17, 0x89a0, &(0x7f0000000000)='&@[\x00') socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r18, 0x0, 0x0) r19 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)={r8, r19}) socketpair(0x0, 0x800, 0x4, 0x0) 08:21:35 executing program 0: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ca5efb1e4bf5a5099fcdb05deb00983a98aa1cc0e6a2"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x209, [{0x0, 0x2, 0x2}]}, @enum]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000080)=""/225, 0x42, 0xe1, 0x1}, 0x20) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) 08:21:35 executing program 3: clone(0x24000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='$.6/\xc5\x9d\xf5\xc4set]\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r1) write$P9_RGETATTR(r2, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x2f8cdce9c0199e30, {}, 0xc3}}, 0xa0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2202, 0x0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0xfe}, @ipv4={[0x0, 0x0, 0x8], [], @local}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r11}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xed6c}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8048000}, 0x4000) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r16 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup(r17) getpeername$packet(r18, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r16, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r19}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup(r20) getpeername$packet(r21, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r23 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2202, 0x0) ioctl$sock_inet6_SIOCADDRT(r23, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0xfe}, @ipv4={[0x0, 0x0, 0x8], [], @local}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r22}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r15, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r22}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r24}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xed6c}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8048000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r14, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r15, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4040) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r15, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x4c0c0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0xbaa3b5fa230434ab, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4048001) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r25 = socket$inet_udplite(0x2, 0x2, 0x88) r26 = dup(r25) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') 08:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:21:36 executing program 3: r0 = getpid() syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x7, 0x420900) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpgrp(0x0) capget(0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x400400, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000180)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r3, r1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) [ 733.148310][T15033] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.172414][T15033] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 08:21:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x705, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}, @IFLA_EVENT={0x8, 0x2c, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x10, 0x1, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x8, @dev}, @IFA_ADDRESS={0x8, 0x4, @multicast2=0x10000000}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x40000000) 08:21:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 733.778062][T15033] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.817152][T15033] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 734.108280][ T23] audit: type=1800 audit(1583223696.998:116): pid=15058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16680 res=0 [ 735.164081][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 735.170295][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 737.254142][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 737.260248][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 739.324175][T10873] Bluetooth: hci0: command 0x1009 tx timeout 08:21:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0xac8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0xd}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xa98, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_ACT={0x1d8, 0x6, [@m_skbedit={0xbc, 0x2, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x2, 0x1, 0x6, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x87, 0x6, "c90494d93fe3947d95b895439d3657ecf049b7074d0856779fdfe0827b5a6443a5746062008f602718acad8f6c0bd3c5f625b03f8fded4be618e31f82cc2cbbd282b2cc79ff239ab5d05afa8cb14678814ed5814b070d2b0f3315a57f5e047850613251e799b5ab4a2c2311f4a19e9a080afe5658986a336a9fcaced455b61dfe29a69"}}}, @m_bpf={0x118, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x12, 0x2, {0xa9e9, 0x1, 0x10000000, 0x1, 0x3}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa7c3, 0x54, 0x7f, 0x4}, {0xbe, 0xd8, 0x7, 0x3092e811}, {0x200, 0x8d, 0x6, 0x81}, {0x7, 0x1, 0xf2, 0x5}, {0x5, 0xf8, 0xff, 0x1}]}]}, {0x91, 0x6, "e2e5b8f6b3889d0b420e3feb8f02539e10d7a6bd9d1d6a8c732ea5b0e34c40d688cc45f88796600ce3557bf8cd8dda0a75953386873479930e6331f34ca9fdf50c2237ff2153acf25700cd5cb9a932d11473988a2e2ae562be180a8c86f2a6f2d4b540d1da42a6b49b00d3e575ef1de3847c00bbac326c0c2814589560025586f9610867d3d728cf04889f195a"}}}]}, @TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4f, 0x8000, 0x9cf, 0x4, 0x3, 0x8, 0xffffffc0, 0x0, 0x1, 0x7, 0x96dc, 0x0, 0x8, 0x3f, 0x6, 0x3, 0x600, 0x800, 0xffff8069, 0x7, 0xec1, 0x9, 0x5, 0x53fd, 0x5, 0x1f, 0x2, 0x3, 0x2, 0x7ff, 0x8, 0xffff8001, 0x77b, 0xff, 0x40, 0xfff, 0x0, 0x2, 0x2, 0xbd7, 0x1f, 0x5, 0x80, 0x8e2f, 0x20, 0x80, 0xffffffff, 0x0, 0x6, 0x4d, 0x1, 0x6, 0x4, 0x3, 0x6765, 0xfffffff9, 0x4, 0x9, 0x400, 0x2, 0x80000000, 0x4, 0x3, 0xd3d, 0x617b, 0x5, 0x1, 0x330, 0x1db, 0x7, 0xeb0, 0x1f, 0x9, 0x11d1, 0xa5, 0x3bc9, 0x81, 0x1ff, 0x0, 0x1, 0x7, 0x40007f, 0x3, 0x1, 0x9, 0x41, 0x7, 0x8, 0x3b6, 0x3, 0x7, 0x7, 0x6d5, 0x3ff, 0x0, 0x6, 0x7c, 0x4, 0x9, 0x0, 0x8, 0x2, 0x9, 0x5, 0x93f, 0xde25, 0x5, 0x6, 0x9, 0x1, 0x3, 0x96c, 0x5, 0x5, 0x401, 0x1f, 0x5, 0x20, 0x4, 0x2, 0x9, 0x6, 0x8, 0x200, 0x9, 0x27, 0x4, 0x3, 0x5, 0x62b5, 0x4, 0x9, 0x1, 0x7, 0x8, 0x3, 0x3, 0x6, 0x2, 0x7, 0x673, 0x1, 0x80000001, 0x81, 0x5, 0x8, 0x6, 0xffff8000, 0x0, 0x5, 0x1, 0x8001, 0x1, 0x1, 0x9, 0x8, 0x8, 0x200, 0xb4, 0x7fff, 0x5, 0x400, 0x2, 0x0, 0x935d, 0x7fffffff, 0x0, 0x9b19, 0xaae, 0x4118, 0x1ff, 0x77, 0xffff, 0x800000, 0x800, 0x0, 0x42, 0x0, 0x2, 0x8, 0x9, 0x0, 0x400, 0x4, 0x4eb, 0x6, 0x1, 0xa, 0x8, 0x1, 0x3, 0x4, 0x6, 0x80, 0x2, 0x2b, 0x401, 0x6, 0x1, 0x7, 0xfffffff7, 0x0, 0x301d, 0x7fffffff, 0x72, 0x6, 0x700, 0x5, 0x0, 0x0, 0x6, 0x101, 0x4, 0xfff, 0x1, 0x10001, 0x21e, 0x9, 0xd24e, 0x80000001, 0x4, 0x7, 0x7, 0x3f1, 0x2, 0x9, 0x9, 0x8, 0x2, 0x7fd, 0x4d167320, 0x6, 0x1, 0xe1, 0x3, 0x7fffffff, 0x0, 0x8, 0x3, 0x10001, 0x7, 0x6, 0x6, 0x4, 0xfff, 0x4, 0x885e, 0x2, 0x178, 0x5, 0x2, 0xfff, 0xffff, 0x3fee, 0x2]}]}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xf}}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_RSVP_POLICE={0x450, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x40, 0xfffffffe, 0x7, 0x9, 0x2, 0x7f, 0x8, 0x200, 0x8000, 0x3ff, 0x80d4, 0xfffffff7, 0x1000, 0x1c, 0x400, 0x5, 0x10000000, 0x2, 0x3, 0x6, 0x401, 0x0, 0x0, 0x100, 0x7, 0xfffff5aa, 0x80000000, 0x605b, 0x4, 0x2, 0x9, 0xfffffff9, 0x5, 0x401, 0x0, 0x6, 0x401, 0x5, 0x6, 0x4, 0xff, 0x7fffffff, 0x7fffffff, 0x7, 0x7, 0xc9, 0xffff, 0xdebc, 0x8001, 0x0, 0x2, 0x6, 0x7, 0x6, 0x4, 0xaef, 0x3a8, 0xd28c, 0xff, 0x6, 0x7, 0x7, 0x1000, 0xa8, 0x5, 0x5, 0x80000000, 0x8, 0x4, 0x10001, 0x80000001, 0x0, 0x6, 0x5, 0x7, 0x1248, 0x7, 0x1, 0x7, 0xffffffff, 0x2, 0x5, 0x401, 0x3, 0x4, 0x7d, 0x0, 0x40, 0x4, 0x7, 0x1, 0x7f, 0x5, 0x9, 0x1, 0x1, 0x8e4, 0x3, 0x401, 0x9, 0x64e2, 0x1, 0x3f, 0x7ff, 0x6, 0x0, 0xc9e, 0x7fff, 0x94, 0x4, 0x5, 0x7, 0x7ff, 0x9, 0x1000, 0x9, 0x6, 0x3, 0x0, 0x81, 0x6, 0xe9e, 0x83ca, 0x400, 0x7, 0x7ff, 0x5, 0x82dd, 0x8880000, 0x2, 0x1ff, 0x3, 0x0, 0x6, 0xb655, 0x7, 0x5ce, 0x8001, 0x1ff, 0xf5, 0x4, 0xffffff80, 0x80000001, 0x5, 0x7e, 0xe44, 0x4, 0x9, 0x94a, 0x9, 0x8, 0x800, 0xffff, 0xa6d, 0x0, 0x8, 0x2, 0x9, 0xa78, 0x8, 0x9, 0x80000001, 0x10001, 0x4, 0x7ff, 0xfff, 0x2, 0x6, 0x800, 0x1, 0x2, 0xffff, 0x101, 0x0, 0x0, 0x44, 0x3f, 0x4, 0xfffff800, 0x3, 0x28000000, 0x4, 0x8, 0x23, 0x33, 0x7f, 0x1, 0x7f, 0x10001, 0x9, 0xfff, 0x4, 0x9, 0x17, 0x3, 0x2c9, 0x0, 0x3, 0x5, 0x3f, 0x100, 0x10000, 0xd, 0x66, 0x0, 0x1, 0x9, 0x9, 0x6, 0x0, 0x1, 0xfffffff9, 0x3, 0x1, 0x9, 0x4, 0x2, 0x171, 0xff, 0x8000002d, 0x7, 0x200, 0x8, 0x4, 0x8, 0x4, 0x5, 0x1, 0x4, 0x1, 0xe2, 0x6, 0x101, 0x46d7800, 0x20, 0x4, 0x800, 0x40, 0x0, 0x6, 0x10001, 0x7, 0x2, 0x1ff, 0x400, 0xffff0001, 0x8204, 0x61457098, 0x1f, 0x80, 0x101, 0x5, 0x5, 0x7, 0x0, 0xfffffff7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0x80000001, 0x8, {0x1, 0x1, 0x0, 0x9d29, 0x9, 0xffffffff}, {0x5, 0x2, 0x1, 0x7ff, 0xfff, 0x4}, 0x43f, 0x6, 0xfffffff9}}]}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0xb7, 0x9}, {0x10001, 0xfffffffe, 0x652a}, 0x5e, 0x3f, 0x7f}}]}}]}, 0xac8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000002ffffa6fffff7", @ANYRES32=r6, @ANYBLOB="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"], 0x8d0}}, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x800) 08:21:46 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:46 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x14) 08:21:46 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @mss, @mss={0x2, 0x3ff}], 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x3e, 0x0, "141b1c061ea394fc2f2b623e36b2c38d25d1a56daec68d00c34bbc806fa7e2ec39be1609246681c13053ec306159f560afb7f5608d7058a2d5dd753a4cf761c0655c0fa951a069a48e09286ef624038b"}, 0xd8) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "bf10140dafd505a0", "e40eabf1da2dbe5a6edde7c3dfcbc21bcb8c4f7f8248982442fd2535a5267f71", "73e27570", "e58bc100a347cd14"}, 0x38) 08:21:46 executing program 1: r0 = socket(0x2, 0x3, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6, 0x2000}, 0x4) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x5}]}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) 08:21:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:46 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, @perf_config_ext, 0x4840, 0x0, 0x0, 0x0, 0x100000000000000, 0xfffffffc}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x4a8880, 0x54) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x4, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x40, 0x400000) socket$pptp(0x18, 0x1, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = accept4(r1, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="4def931067b1b2c776d27fc70f6aa6cd7c795998667fff0e1fd2c2d2b5b1496609d7782288ab3b519c1cbeab1fb562b8389ab9858100f76ec09dc5dca377d67778e58c7f47754a41832709c8fa9c354782a9d5964f33463058d74193bbb5f728538cbd6223af9d4d173f5bd87d43f11450b970ce453d7ee2b26e869850e10822975cb0a8ec85d3", @ANYRES16, @ANYBLOB="a6ab1cecad4dd837cade3176902ed137e51c032f3fc4330a58ec406ead424f9a4ce58263ba349477f7910d3ccd97dd8e44625ba1244788d3a51da4791d2ab95ab358b4744eca8936ff0100007e9cf20c48bb84664c26e2e6a9c72131b46ebb7a8a6cc8215d769ceaa12244492c08474f2c2227de31f311d60bdc98629327b3549ff22f90580892e811131f968cfbd86a662193d09d54821399d360672fc3a22af327d63352208b30258138169beab080996e012dce"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)}, 0x40080) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x50, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000014c0)={r5}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000004) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 08:21:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 744.079460][T15104] mmap: syz-executor.3 (15104) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 08:21:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 744.213619][T15110] Bluetooth: hci0: Frame reassembly failed (-84) [ 744.220891][ T270] Bluetooth: hci0: Frame reassembly failed (-84) 08:21:47 executing program 1: r0 = semget(0x1, 0x4, 0x609) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000240)=""/209) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000080)=""/88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={[], [], @empty}}, 0x1c) 08:21:47 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="58010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000032000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000860000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170001000000000000000000000000000000000000000300000000000000"], 0x158}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x40010, r2, 0x5a7) [ 744.423168][T15124] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 744.453480][T15126] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 08:21:47 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:47 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x80) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00'}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), 0x0) preadv(r4, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x84, 0x0, 0x1}, 0x3c) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 08:21:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000032000305000000000000000000000079000000001000010009000100766c616e00000000"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 08:21:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000010000085000000590000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 744.701905][T15137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 744.744324][T15137] tc_dump_action: action bad kind 08:21:47 executing program 0: pipe(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='\x00', 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) timer_create(0x5, 0x0, &(0x7f0000000200)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcsa\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x4, @remote}}}, 0x30) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000400)={0x8, 0x6, 0x40, 0x5ef5, 0x9a7e38af381b1a3, 0x1}) syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80000, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf4) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xc7, 0x2, 0x7ff, 0x9}, 0x8) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110600}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r9}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x7, 0x0, @mcast2}, r9}}, 0x30) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r11 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r11, 0x80000006) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x636) sendto$inet6(r12, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) dup(r12) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8000, 0x800080) r13 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r13) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r14, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110600}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r13, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1) r15 = socket(0x100000000011, 0x0, 0x0) bind(r15, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r16 = socket(0x10, 0x2, 0x0) write(r16, &(0x7f00000003c0)="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", 0xfc) getsockname$packet(r16, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0xa) setsockopt$packet_add_memb(r15, 0x107, 0x1, &(0x7f0000000100)={r17, 0x1, 0x6, @local}, 0x10) 08:21:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = dup2(r1, r0) close(r2) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000540)=""/4096}, &(0x7f0000000080)=0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00'}) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) timer_gettime(0x0, 0x0) getpeername$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r7, 0x200006) sendfile(r0, r7, 0x0, 0x8000fffffffe) [ 745.627003][T15189] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 745.895710][T15189] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 746.284138][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 746.290366][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 748.364118][ T9616] Bluetooth: hci0: command 0x1001 tx timeout [ 748.370231][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 750.444168][ T12] Bluetooth: hci0: command 0x1009 tx timeout 08:21:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:57 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) io_setup(0x3, &(0x7f00000001c0)=0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x6) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 08:21:57 executing program 3: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) getpgid(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(0x0, r2, 0x4, r0, 0x5) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7ff) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000000)=0x2007ff, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0) open(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x579842, 0x1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r6, 0x7fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) 08:21:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x85, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000480)=0x100000001, 0x7f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000400)={0x4, 0x5, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x980919, 0x3f, [], @string=&(0x7f0000000380)=0x2}}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={&(0x7f0000000000)="afafe87c44de495dbba308e4186c291d3e5a3fe25277a526ccb69411c74a886b71", &(0x7f0000000040)=""/210, &(0x7f0000000240)="c1111ee39e9f81217782d6fb116b0551819e3ecf3d53c9f1f66535847a15f3ce68ea4b534681d07b509d032d07bf7172863aa69d61e4a5fe4bf7da1955ca002321b6234319624aef5ef5712bab016f6d2be60b77bffe7f2b97367ab6977af190a7068388c71512e9829224309c0dd4d055536c0d90d5b91cf03ebefe886c63e9e2", &(0x7f0000000340)='^kk\f', 0x7c0, r3, 0x4}, 0x38) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) [ 754.712980][T15279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:21:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:21:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 754.863886][T10514] Bluetooth: hci0: Frame reassembly failed (-84) [ 754.865112][T15298] Bluetooth: hci0: Frame reassembly failed (-84) 08:21:57 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) chmod(&(0x7f0000000000)='./file0\x00', 0x147) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x20}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 08:21:57 executing program 1: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000000, 0x428082) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x5000, &(0x7f0000000000), 0x4, r3, 0x9}) 08:21:57 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:21:58 executing program 3: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getegid() sendfile(r1, 0xffffffffffffffff, 0x0, 0xa808) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400900) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000080)={0xff, @multicast}) [ 756.924161][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 756.931609][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 759.004080][ T9616] Bluetooth: hci0: command 0x1001 tx timeout [ 759.010816][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 761.084064][ T12] Bluetooth: hci0: command 0x1009 tx timeout 08:22:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:22:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:22:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r6 = socket$inet6(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r7, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100026bd7000fcdbdf25b92ab7fee09aa1e3009cba0000000000", @ANYRES32=0x0, @ANYBLOB="0600280003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c080}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r5, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r5, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x1c}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x101, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc001) 08:22:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) socketpair(0x29, 0x4, 0x3, &(0x7f0000000300)={0xffffffffffffffff}) r9 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000380)={0x0, 0xfffd}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x47}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00deca0895838e00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000a680)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_mirred={0x18, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 08:22:08 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(0x0, 0x0) 08:22:08 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x480, 0x0) r3 = accept4$llc(r2, 0x0, &(0x7f0000000200), 0x80000) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000000000000020000008fbb00000900000041b49ad8b93f02b32078f1be640900000004000000230000000100008000100000030000000180000038f300000000000000000080ff010000008000", @ANYRES32=r3, @ANYRESHEX, @ANYRESDEC, @ANYRES16=r0]) recvmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0xb7, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) bind$llc(r1, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="9e298e1ab449"}, 0x10) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) openat$cgroup_int(r5, &(0x7f0000000240)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f00000000c0)) sendmmsg(r1, &(0x7f00000001c0), 0x400000000000150, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400001, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) fstatfs(r6, &(0x7f0000000000)=""/46) 08:22:08 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(0x0, 0x0) 08:22:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 765.683221][T15530] Bluetooth: hci0: Frame reassembly failed (-84) [ 765.689925][ T9634] Bluetooth: hci0: Frame reassembly failed (-84) 08:22:08 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(0x0, 0x0) 08:22:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 765.820801][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:22:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r9 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r12}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2202, 0x0) ioctl$sock_inet6_SIOCADDRT(r16, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0xfe}, @ipv4={[0x0, 0x0, 0x8], [], @local}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r15}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xed6c}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8048000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4040) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r18}}, 0x20}}, 0x0) [ 765.950571][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:22:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 765.990905][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 767.734164][ T9616] Bluetooth: hci0: command 0x1003 tx timeout [ 767.740335][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 769.804261][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 769.810380][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 771.894167][ T12] Bluetooth: hci0: command 0x1009 tx timeout 08:22:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:22:18 executing program 3: rt_sigaction(0x17, &(0x7f0000000300)={&(0x7f0000000140)="f3430f180fd8fdc441c95d8f02000000c4a3ed7b33000f911d030000002e3ed9ee646664660f3a63dcce0fc658001700000f3808f7", 0x10000003, &(0x7f00000002c0)="c4a241ad623ad9fc0f38cc5b06c4e26906dcdae96766450feab74c660000c4e2d108fd2e26660f38097a09c40195e8ddc4e2c138a8be0b0000"}, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000480)) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f0000000000)=0x1) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000001801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cc1af3d000000000000000000000000000000000000000000000000000000000000ebff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee00000000"]) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000000000443) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc1105511, 0xffffffffffffffff) r4 = creat(0x0, 0x42) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000040)) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x4) 08:22:18 executing program 5 (fault-call:7 fault-nth:0): r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:22:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:22:18 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000002c0)=0x7) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d757765722c616363de42733d61ee667363616368652c70726976706f72742c00"]) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x70b982, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd24f24b3ac273c81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a4fa21e76fc4d05e107ac82d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d08b26f5521b1ac0543978e05e200f2ef4214efd76167e74735bfeb92974cfcaadd589f252c8b00b693479bfe5d85dc391a000000000000000000"], 0x9d) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000080)=""/155, 0x9b}], 0x2, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r4, 0xd7000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x428000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) socket$inet_udplite(0x2, 0x2, 0x88) statx(0xffffffffffffffff, &(0x7f0000001340)='./file0\x00', 0x4000, 0x80, &(0x7f0000001380)) 08:22:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self\x00', 0x1, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000400)={0x6, 0x3, 0x95fb, 0x3f, 0xe, "fc2353115296a464"}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000045bae10010008506000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100040061585c5a4c77b16a200000"], 0x3c}}, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x98200, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x64, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r8, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r9 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r10 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r10, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000480)={r1}) personality(0x400000d) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x15, 0xa, 0x901, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x48000) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000004c0)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0\x00', 0x8, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff45, &(0x7f00000005c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xe3b, 0x70bd26, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x3c}}, 0x0) r12 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r12, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r12, 0xc0385720, &(0x7f0000000240)={0x1}) r13 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x840, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r13, 0xc0045006, &(0x7f0000000140)=0xff) [ 775.869363][T15571] FAULT_INJECTION: forcing a failure. [ 775.869363][T15571] name failslab, interval 1, probability 0, space 0, times 1 [ 775.899453][T15573] 9p: Unknown access argument uwer [ 775.948213][T15576] 9p: Unknown access argument uwer [ 775.964290][T15571] CPU: 1 PID: 15571 Comm: syz-executor.5 Not tainted 5.6.0-rc3-syzkaller #0 [ 775.972962][T15571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.983017][T15571] Call Trace: [ 775.986345][T15571] dump_stack+0x197/0x210 [ 775.990766][T15571] should_fail.cold+0x5/0xd [ 775.995288][T15571] ? fault_create_debugfs_attr+0x140/0x140 [ 776.001178][T15571] ? ___might_sleep+0x163/0x2c0 [ 776.006055][T15571] __should_failslab+0xb7/0x100 [ 776.010969][T15571] should_failslab+0x9/0x14 [ 776.015492][T15571] kmem_cache_alloc+0x2aa/0x710 [ 776.020412][T15571] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 776.025715][T15571] ? wait_for_completion+0x440/0x440 [ 776.031016][T15571] getname_flags+0xd6/0x5b0 [ 776.035534][T15571] user_path_at_empty+0x2f/0x50 [ 776.040413][T15571] do_sys_truncate.part.0+0x92/0x150 [ 776.045707][T15571] ? vfs_truncate+0x710/0x710 [ 776.050398][T15571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.055866][T15571] ? do_syscall_64+0x26/0x790 [ 776.060549][T15571] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.066625][T15571] ? do_syscall_64+0x26/0x790 [ 776.071319][T15571] __x64_sys_truncate+0x6e/0xa0 [ 776.076182][T15571] do_syscall_64+0xfa/0x790 [ 776.080702][T15571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.086595][T15571] RIP: 0033:0x45c479 [ 776.090496][T15571] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.110101][T15571] RSP: 002b:00007f88364a9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 776.118517][T15571] RAX: ffffffffffffffda RBX: 00007f88364aa6d4 RCX: 000000000045c479 [ 776.126498][T15571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 776.134475][T15571] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 08:22:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41850, 0x0, 0x0, 0x0, 0x1f, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xa}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 08:22:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:22:18 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80601, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0xfffffffffffffff7, 0x3, 0x0, [{0x3224, 0x5, 0x3, 0x80, 0x62, 0x1f, 0x6}, {0x12, 0x80, 0x2, 0xf9, 0x3f, 0x2b, 0x2}, {0x8, 0x7, 0x1, 0x1, 0x0, 0x6, 0x9}]}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') msgget$private(0x0, 0x0) [ 776.142456][T15571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 776.150431][T15571] R13: 0000000000000c39 R14: 00000000004c32ea R15: 0000000000000000 08:22:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:22:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$9p(r1, &(0x7f0000001400), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x2, 0x0) accept$ax25(r2, 0x0, &(0x7f0000002b00)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x240000, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="0594e0ec", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000440)={r6, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000003c0)={r6, 0x81}, &(0x7f0000000400)=0x8) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000180)={0x8120, 0xffff8001, 0x800}, 0xc) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x98) write$P9_RREMOVE(r9, &(0x7f0000000280), 0x1033b) r10 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2, 0x0) sendfile(r10, r8, 0x0, 0x10000) [ 776.481088][T15593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:22:19 executing program 5 (fault-call:7 fault-nth:1): r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 776.547136][T15593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 776.598635][T15593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 776.616901][ T23] audit: type=1804 audit(1583223739.508:117): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir146451629/syzkaller.FyXD2N/159/file0/file0" dev="loop3" ino=48 res=1 [ 776.754889][T15607] FAULT_INJECTION: forcing a failure. [ 776.754889][T15607] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 776.768135][T15607] CPU: 0 PID: 15607 Comm: syz-executor.5 Not tainted 5.6.0-rc3-syzkaller #0 [ 776.776811][T15607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.786870][T15607] Call Trace: [ 776.790181][T15607] dump_stack+0x197/0x210 [ 776.794541][T15607] should_fail.cold+0x5/0xd [ 776.799070][T15607] ? fault_create_debugfs_attr+0x140/0x140 [ 776.804887][T15607] ? __kasan_check_read+0x11/0x20 [ 776.809917][T15607] ? __lock_acquire+0x16f2/0x4a00 [ 776.815024][T15607] should_fail_alloc_page+0x50/0x60 [ 776.820237][T15607] __alloc_pages_nodemask+0x1a1/0x910 [ 776.825623][T15607] ? fs_reclaim_release+0xf/0x30 [ 776.830580][T15607] ? __alloc_pages_slowpath+0x2900/0x2900 [ 776.836312][T15607] ? fs_reclaim_release+0xf/0x30 [ 776.841282][T15607] cache_grow_begin+0x90/0xc60 [ 776.846149][T15607] ? trace_hardirqs_off+0x62/0x240 [ 776.851289][T15607] kmem_cache_alloc+0x64e/0x710 [ 776.856152][T15607] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 776.861456][T15607] getname_flags+0xd6/0x5b0 [ 776.865979][T15607] user_path_at_empty+0x2f/0x50 [ 776.870848][T15607] do_sys_truncate.part.0+0x92/0x150 [ 776.876142][T15607] ? vfs_truncate+0x710/0x710 [ 776.880827][T15607] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.886291][T15607] ? do_syscall_64+0x26/0x790 [ 776.890964][T15607] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.897031][T15607] ? do_syscall_64+0x26/0x790 [ 776.901728][T15607] __x64_sys_truncate+0x6e/0xa0 [ 776.906596][T15607] do_syscall_64+0xfa/0x790 [ 776.910780][ T23] audit: type=1800 audit(1583223739.508:118): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=48 res=0 [ 776.911110][T15607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.937188][T15607] RIP: 0033:0x45c479 [ 776.941092][T15607] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.960697][T15607] RSP: 002b:00007f88364a9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 776.960714][T15607] RAX: ffffffffffffffda RBX: 00007f88364aa6d4 RCX: 000000000045c479 [ 776.960723][T15607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 776.960731][T15607] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 776.960738][T15607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 776.960746][T15607] R13: 0000000000000c39 R14: 00000000004c32ea R15: 0000000000000001 [ 776.974066][ T23] audit: type=1804 audit(1583223739.508:119): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir146451629/syzkaller.FyXD2N/159/file0/file0" dev="loop3" ino=48 res=1 [ 777.126423][ T23] audit: type=1800 audit(1583223739.508:120): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=48 res=0 [ 777.167080][ T23] audit: type=1804 audit(1583223739.518:121): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir146451629/syzkaller.FyXD2N/159/file0/file0" dev="loop3" ino=48 res=1 [ 777.235513][ T23] audit: type=1804 audit(1583223739.578:122): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir146451629/syzkaller.FyXD2N/159/file0/file0" dev="loop3" ino=48 res=1 [ 778.364076][T10873] Bluetooth: hci0: command 0x1003 tx timeout [ 778.371646][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 780.444114][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 780.450213][ T9860] Bluetooth: hci0: sending frame failed (-49) [ 782.524257][T10873] Bluetooth: hci0: command 0x1009 tx timeout 08:22:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:22:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:22:29 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) r1 = getpgrp(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20, 0x100000001, 0x0, 0x8}) setpriority(0x0, r1, 0xffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=""/116, 0x74}, 0x6b6f813045782d10) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x0, 0x1}, 0xd8) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "688d6a5993cabbb8", "3eea1202ffdbd6a7f401f0f5c77e5ba3a273719387b6e2c0dabcbdffd353fb44", "072497c4", "00001600"}, 0x38) sendto$inet6(r4, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r4) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bind$packet(r7, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000080)="030400306c00573a00000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xfd82, 0x4000002, 0x0, 0x2ff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x204480, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000140)={0x6, 0x6, 0x8, 0x5, 0x2, 0x3, 0x6}) socket$isdn(0x22, 0x3, 0x25) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = dup(r9) recvfrom$rxrpc(r10, &(0x7f00000002c0)=""/144, 0x90, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r10, 0xc028564e, &(0x7f00000001c0)={0x2, 0x2, [0x0, 0x0, 0x1000, 0x242, 0x4, 0x3, 0x2, 0x4]}) dup(0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:22:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x206e, 0x60010}}, 0x20}}, 0x0) 08:22:29 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:22:29 executing program 3: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5311778945effd9100036800000000cf", 0x10, 0xfffffffffffffffe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='.', 0x1}], 0x1}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x4) delete_module(&(0x7f0000000040)='procGPLselinux\x00', 0xa00) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 786.750177][T15622] Bluetooth: hci0: Frame reassembly failed (-84) [ 786.753211][ T9623] Bluetooth: hci0: Frame reassembly failed (-84) 08:22:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x0, @broadcast}], 0x20) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000040)) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) 08:22:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x4435, 0xc2) r2 = getuid() r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="cd2e05f82d0fd032971513405ea80199b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r6, 0x0, 0x8000, 0x2) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000740)={0x4}) kcmp(r8, 0x0, 0x2, r6, r5) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r8}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000480)={0x7, 0xb, 0x4, 0x80000, 0x8, {r11, r12/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x4, "21a981fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r5}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f0000001200)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r10}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nf\x05\x00'}}]}}) setgid(r10) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000000c0)=0x3) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b8090000000000000050cf3c52c097150c405ea803a4b403c7681bd195001400000000000000024574682383951e42b06b16ca"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r15, 0x5418, &(0x7f0000000540)=0xffffa221) fadvise64(r16, 0x0, 0x8000, 0x2) r17 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r17, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r17, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r17, 0x3, r16, &(0x7f0000000740)={0x4}) kcmp(r18, 0x0, 0x2, r16, r15) ioctl$DRM_IOCTL_GET_CLIENT(r14, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r18}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) clock_gettime(0x5, &(0x7f0000000440)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r13, 0xc0585609, &(0x7f0000000480)={0x6, 0xb, 0x4, 0x80000, 0x8, {r21, r22/1000+10000}, {0x4, 0x0, 0xff, 0x46, 0x39, 0x2, "21a991fb"}, 0x4, 0x1, @offset=0x9, 0x0, 0x0, r15}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r19, @ANYBLOB=',group_id=', @ANYRESDEC=r20, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno'}, 0x2c, {[{@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'ppp0proc*'}}, {@dfltgid={'dfltgid', 0x3d, r20}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}]}}) setgid(r20) r23 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r23, 0x40045567, 0xea72) fstat(r23, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r10, r20, r24) write$FUSE_ATTR(r1, &(0x7f0000000140)={0x78, 0x2f, 0x7, {0x2, 0x4, 0x0, {0x0, 0xffffffff, 0x1, 0x7fffffff, 0xc4d, 0x6, 0x4000800, 0x7, 0x8, 0x400, 0x7, r2, r10, 0x8, 0x1}}}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:22:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x59, 0xf}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x5608, 0x8, 0x2}, 0x8) 08:22:30 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x3c) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000540)={0x4, 0x8, &(0x7f00000004c0)="bc70f532dd2ad723364c51e383e5827659b30cfcaff565987d22bff9feca5361f1ca21db90a62bff7a428df731f9206ce25fae81d0aa689b49dcca7c27f0a9c4c9ad1a1cf125afe2e55d4ba56202cf8bcfdfc6cd94cb7d516ddcca30e3896d8dd8734a43d603ee278b18", {0x4, 0x1, 0x3031334d, 0x3, 0x1f, 0x101, 0x8}}) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8, 0x90) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) close(r3) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = signalfd4(r0, &(0x7f00000002c0)={[0x1]}, 0x8, 0x800) dup3(r4, r5, 0x80000) r6 = accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) read(r6, &(0x7f0000000200)=""/90, 0x5a) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, @perf_config_ext={0x1000, 0x5}, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x400000000000, 0xffffffffffffffff, 0x8) close(r7) 08:22:30 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x88) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pidfd_open(r2, 0x0) getpgrp(r2) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r3, r1) gettid() syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000a40), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{r7, r8+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(r9) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 08:22:30 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) r1 = getpgrp(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20, 0x100000001, 0x0, 0x8}) setpriority(0x0, r1, 0xffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=""/116, 0x74}, 0x6b6f813045782d10) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x0, 0x1}, 0xd8) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "688d6a5993cabbb8", "3eea1202ffdbd6a7f401f0f5c77e5ba3a273719387b6e2c0dabcbdffd353fb44", "072497c4", "00001600"}, 0x38) sendto$inet6(r4, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r4) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bind$packet(r7, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000080)="030400306c00573a00000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xfd82, 0x4000002, 0x0, 0x2ff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x204480, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000140)={0x6, 0x6, 0x8, 0x5, 0x2, 0x3, 0x6}) socket$isdn(0x22, 0x3, 0x25) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = dup(r9) recvfrom$rxrpc(r10, &(0x7f00000002c0)=""/144, 0x90, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r10, 0xc028564e, &(0x7f00000001c0)={0x2, 0x2, [0x0, 0x0, 0x1000, 0x242, 0x4, 0x3, 0x2, 0x4]}) dup(0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 788.764196][ T9631] Bluetooth: hci0: command 0x1003 tx timeout [ 788.770500][T13331] Bluetooth: hci0: sending frame failed (-49) [ 788.924075][T10873] Bluetooth: hci1: command 0x1003 tx timeout [ 788.930198][T13331] Bluetooth: hci1: sending frame failed (-49) [ 790.844180][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 790.850275][T13331] Bluetooth: hci0: sending frame failed (-49) [ 791.004166][ T3008] Bluetooth: hci1: command 0x1001 tx timeout [ 791.010308][T13331] Bluetooth: hci1: sending frame failed (-49) [ 792.924171][ T9631] Bluetooth: hci0: command 0x1009 tx timeout [ 793.084350][ T3008] Bluetooth: hci1: command 0x1009 tx timeout 08:22:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:22:40 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x2) 08:22:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @broadcast}, 0x0, 0xfffffffc}}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x0) 08:22:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) getpid() r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = dup2(r2, r3) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f00000002c0)) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1b8939885ccbb3c3aeead2e22c90fef072256e00e638290f5bb3b5d2fcf887ffa7f0e5b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e507cafa89021a7503a9fc0b01542ab5b1ad23e04b258634bd754c9d2488ad379fadccbfda227bd28f64dff4f39b07fb8286b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd515a22febb495bb16aa5918341ce8a3d50"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 08:22:40 executing program 1: r0 = getpid() getpriority(0x2, r0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xffffffff, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="c8", 0x1}], 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2c0000, 0x80) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0x63, 0x9, 0x8, 0x20, 0x101, 0x7}) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000300)=@ng={0x4, 0x12, "626288fa6381642e45f4ddef3b95"}, 0x10, 0x3) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000280)) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) fcntl$setlease(r1, 0x400, 0x0) 08:22:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) [ 797.633835][T10514] Bluetooth: hci0: Frame reassembly failed (-84) [ 797.645737][T15674] Bluetooth: hci0: Frame reassembly failed (-84) 08:22:40 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="fd6c653000000000"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x3, 0x30200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f00000000c0)="7ac4e1b6df175ecd1eb641b8503d45482e7a0cccfe750834f1ef66c92239b90fddcc9457f9de4bc2c7bc81e3782a8fe6569075034b637a6be534f465ede3018c9696a8a506554b36c4f19a98eba2b1d58abb1ebca49d61402a1114eeb26071a42e0e8b0f971baf1af04393e56fbbffcdc32bb1c96e396f3d50b932d0784afba429113f3c5d3096f2284b8c7603c24b0f187627e38994c3bce6a655b8468861ddfd82631e911c03034c90e20b5a5d6c0ce1844e1a53a472e1b3f753207fea4548bf367a631884362470672191eaaa841a811694f72eed34d84e8e5c4300a3ffef223d1444824a76d093b8d69a2c3ef6299338ff22262c76", &(0x7f00000001c0)=""/23, &(0x7f0000000240)="3775ee6d28e6ec16aeb181584aaef3a8d68f29ac9bdac825bdb59c20ecd70e6fa6f3aa7af21eeac0b8772a5f5df4d542f4c355520e4c7f3e40e455e20baabff991ee271f84a91a32bc", &(0x7f00000002c0)="9e1f29088eeac97c8759a2d64ba7346adc78a35377fc5d21112ceb95f3a4", 0x7, r0}, 0x38) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x8, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000480)="6537493f8c1fa17570ccc646baba07d10e5e861c78bdc2d6836a75094b2026903343bd1fa5f283f9b0d4cd644694d0d226b845100456193d95e74bf86fc41040f1372d", 0x43, 0x7}, {&(0x7f0000000500)="b2a31a0e40bca3d48b305ed2095300"/25, 0x19}, {&(0x7f0000000540)="27c0f1ac7e13dc86ba98eccfc121aed35a1e4ee46652310a12f263555ddb3210bb8b3f9c22d58e885fe808e15a1dd8d02215ee618faba86ad5408b98624134d5ac0361b9dc753f54e1d96d6b1e374783e59206da3cc3026b174b73ad8b59464a47be3209f053c17ccd1c8f996315ee03a17c903fef5a24e4ccb33ec8aa99bc2e788497c9e9384055c2fe1d3b539372179f1c47b4dda569d9acaed4d06f50fc206e35d898355f0d1862902b2b687f0c632ba0dd58b67d76cfdbe8079929fe8b03a509006e4774a6dbf652c7963c5b54277ec5f239b2494dcb125d37952ec2bc2d1d7c7ad3cf7f57fb3020f73165d6fd4cd30e0d003bf4799fe5456e97f73ab533420185e65feba2b6b8b5602377aaa9da9982cdd6e40fc6710b2aa692502821eea5672183e5f907dd8d1c484a51212b03c45dc5b44193445a16d22eb088185ea51cb3807ebe0008000000000000f643f3561bd753333c6f578bdf825c09db89ae250027804389edd0646e9b14e363cd4d87f7f7f85a713fc1be8211ad7211bdb475ee62a930e3f0bb14af5afcf870f7f60676932704ab0c1086c6def30492b888e8c433a5852e0a61d41ef79005ac25d70210bd7818c0070ac753c036e557c268f6b68a004e89307172bcd368482d6e9f6ff1146d4d774f124535f8d8a91fcd23e0215441981bc545fb0fee0dc962ed8521dd38695199df6ddb66c771d426910c1d8ee5ffce843c829c2d6ee77dfb5e800762ee5ff2fcdf5a2c54f4cc855b243ff6b686976942dc4f1f2a9e40e3313fe21f830bc2e701", 0x236}, {&(0x7f0000000b40)="1b3f095dfffdcabc51bb6216f279d8eaf0c0b6f9c0828336c76758e08db1e400c5d5fc0884daa58457cd878896da7c3deab48f2754604ef6bbb02b86fedc64a32fe6afbdc3d542399ef285e135679aa8cac80ab40697502d6afe31f5951de92ddb4728f998f209d65672c28826a40af359581e1fa15f4a05477ef079d2e081d23a5f07fc9d765143de42ad016b4daf85f78cb7bdb581b846703cbffcb37afd2d01c13202667adcb9bcf523115b9e1301679db8", 0xb3, 0xe5}, {&(0x7f0000000c40)="8eca098d821745e7f6c4ca5ae698f4ce65b5b6b4c06b1a7589a9b1509b435cc9a8a3c5ccde179a2421d69868a4eb70c97ef4a0bdb811a5049091173fe6e66ea52740592e3d4d4bc70f3ea11280008794cec2c21db8ff32c09543ecc611c1f294016e946e1a198cea88ac1738dfda793f7944625f477b168a360c9a", 0x7b, 0x401}, {&(0x7f0000000cc0)="fe11c12521a6a7c94f371821a5690eefd3fe71c3badb13f00dda60354948b2df11a525720dd3e22edfb7683f7a6c20e2460b5eba3822a8e44aabd9cf266dfc8484fb3c724e414b1e82d0f2bbefd8449d786fc5fcdf4c2867cf7b440684604d8d2e194f521126988563cc5c26cfe9866ea87bd443446aad75f000597a559cfb998576b6990e8789bc99dc96335dccd94a4a26ecd1175597d4aed2f18845712e2430125af574a899716dc3fab8220df724a43c075fce8136ae5f5f0a87df28ca69ff66dbf938ad8c622f135880ae58c0e63abdda3773874bfb", 0xd8, 0xf6ef}, {&(0x7f0000000dc0)="0cc22d8b921d1665482033eb66fce31a906c6f1db07fc88d957f82a1615c1238674698228c6a9daa6a5fbfa094", 0xffffffffffffff24}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',dmode=0x0000000000000000,\x00']) [ 797.919652][T15692] overlayfs: missing 'lowerdir' 08:22:40 executing program 1: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4068080, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000080)="9b26080000000000002922b030a08aff07f6fe09", 0x5b4, 0x0, 0x0, 0x0) [ 797.961826][T15695] overlayfs: missing 'lowerdir' 08:22:40 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x40, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000001700)={0x184, r2, 0x20, 0x70bd21, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff0001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x18}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20}, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000180)="8f53d39e0fd1255843cf19ba11c4f845e3fda9c92de22950aa19ddc857d0ba217e179876d3510240ad186723340e8d3f9ed8b8580d96050867f9ab4e83b2bb8704fcd92e1a58096fca58284de0c9e9624d1b97b86028cae724076cc4fc75f9881cfb33ca984af33fb6295bc2b8d52ee102526c84f0b3562cbae97e5412cacf505a73adaf6cb00428a9e8540690c968b37c3448524091bf400c46197d4247ba13908d6e154a2a7b89f0d5c77e1e667236", 0xb0, 0x0}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000016c0)={0x1, &(0x7f0000001580)=""/92, &(0x7f0000001680)=[{0xdfcd, 0x64, 0x7, &(0x7f0000001600)=""/100}]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r3, 0x1000, &(0x7f0000000240)=""/4096}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001240)={0x0, 0x8}, &(0x7f0000001280)=0x8) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000013c0), &(0x7f0000001400)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000012c0)={0x9bb7, 0x8b24, 0x0, 0x9, 0x6, 0x0, 0x6, 0x4, r4}, &(0x7f0000001300)=0x20) 08:22:41 executing program 3: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget(0x1, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000100)={0x0, @adiantum}) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 08:22:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='mft_zone_multiplier=0x0000000000000000,gid=', @ANYRESHEX=0x0]) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x82100, 0x0) 08:22:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r13}, @CGW_SRC_IF={0x8, 0x9, r12}]}, 0x24}}, 0x0) r14 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r14, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getpeername$packet(r14, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@getstats={0x1c, 0x5e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r15, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20040080) [ 798.294140][T15706] dns_resolver: Unsupported server list version (0) [ 798.606523][T15683] ceph: No mds server is up or the cluster is laggy [ 798.631246][T15724] ceph: No mds server is up or the cluster is laggy [ 799.644110][ T3008] Bluetooth: hci0: command 0x1003 tx timeout [ 799.650620][T13331] Bluetooth: hci0: sending frame failed (-49) [ 799.724284][ T12] Bluetooth: hci1: command 0x1003 tx timeout [ 799.730422][T13331] Bluetooth: hci1: sending frame failed (-49) [ 801.724147][T10873] Bluetooth: hci0: command 0x1001 tx timeout [ 801.730257][T13331] Bluetooth: hci0: sending frame failed (-49) [ 801.814049][T10873] Bluetooth: hci1: command 0x1001 tx timeout [ 801.820288][T13331] Bluetooth: hci1: sending frame failed (-49) [ 803.804145][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 803.884144][ T12] Bluetooth: hci1: command 0x1009 tx timeout 08:22:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000197000/0x2000)=nil, 0x2000, 0x0, 0x28013, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10000, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xc07, 0x8032, 0xffffffffffffffff, 0x0) 08:22:50 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 08:22:50 executing program 0: sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) open_by_handle_at(r0, &(0x7f0000000080)={0xa0, 0x4, "fe49cc8a1b2c5df5d6017d0bec39bc5f4c68044dbd7fb8b8af3050ad475975a341ae9f22f9ff4b98d93fbc824a398a8190e0fa5229f95091d5a85abafdbbdbd6d697afc87621189f3e1acbc008368c49e57f272621f0d22f13480113a07523a886bd6d7429bd48b3d7a9aee57555326fa748726fea58fa7f379a25ad55c09dba3de6eceeca6c3318d9e2b8aaeadf931d0f3b0f7bae7db241"}, 0x10000) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000140)=0x3f, 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}, 0x1, 0xf000}, 0x0) 08:22:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 08:22:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8002, &(0x7f0000000180)=0x9, 0x6) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xff2, 0x20200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x4) socket$netlink(0x10, 0x3, 0x4) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000003c0)=""/216) 08:22:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:22:51 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x40) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0x80) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) syz_genetlink_get_family_id$l2tp(0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) openat$snapshot(0xffffffffffffff9c, 0x0, 0x300, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) dup2(r2, r1) 08:22:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x324}, 0x9c) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pwritev(r1, &(0x7f0000001500)=[{&(0x7f0000000300)="e5dc9d6f0f3da760c1d751de13913048a466bfe6fb0df5d701ae427a434445fdf65ec3471e88f15589c162bf134eb52474ffe103a8bb2ff2ed8129983336f340a737d6ef7316ee18f0c7fc0536fad1620b9f8b064daa044744c334e58291c933256cba5d0bc211ed660bb61937df8079a61e77a29ffd68d9f292eb6ff887b654cc178189e7419ea27ce39fc3cc6584c63a47911ee30b7c119230ce8d6370efc851026a40dfdf9bbd9e000dcee9e3294b634defc8bf83f4672f8d0f0c3ccb7ac62e2a", 0xc2}, {&(0x7f0000000200)="8e", 0x1}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="0c017dff135b9c3284aa90006db7eff00404b86490de6317473e86acd26393edb90716997f0dd961eb63bae0e60edec340dc056a26e4f97900758cc145b9da5e9879034e09ce0db9ca60a35291ccaf4aa21b50d53022439620d13e39b6605266c780b16316b5e2e2eda5caef244a390884523108ec0e7e94d501b57f087fdcb032414e45858077c545f62cc57d5153d497c44a4046f0715b9783cda25d816295997eb54d28", 0xa5}, {&(0x7f00000014c0)="73509e7fe060c7e8830a2bd057f43d323f7ea6446fcb4aec7c5e5b77ef2a1fc897025d96a019d9f9d1173353312073ec2df4b9554b8150a4ea2e", 0x3a}], 0x5, 0x79e8) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000180)={0x2, [0xfffff1ee, 0x2], 0x3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$P9_RLERRORu(r4, &(0x7f0000001580)={0x2c, 0x7, 0x1, {{0x1f, 'hugetlb.2MB.max_usage_in_bytes\x00'}, 0x2}}, 0x2c) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000001c0)=0x7de1) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) [ 808.116886][ T9623] Bluetooth: hci1: Frame reassembly failed (-84) [ 808.138541][T15754] Bluetooth: hci1: Frame reassembly failed (-84) 08:22:51 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x3, &(0x7f00000027c0)={&(0x7f0000002780)}) io_setup(0x0, &(0x7f0000000280)) getpid() r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r3) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xb4d5, 0xc002) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x3, 0x7, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 808.534885][T15764] IPVS: ftp: loaded support on port[0] = 21 [ 808.742387][T15827] IPVS: ftp: loaded support on port[0] = 21 08:22:51 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x2000000) 08:22:51 executing program 1: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x101, 0x3, {}, {0xee00}, 0x2}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0xa) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffec2, 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) getpgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24010008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffd}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) write$P9_RCLUNK(r5, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) sendfile(r4, r5, 0x0, 0x8000fffffffe) 08:22:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x3, 0x6, 0x4, 0x100000, 0x0, {}, {0x4, 0x0, 0x80, 0x2, 0x7, 0x2, '$P;b'}, 0x35, 0x2, @userptr, 0x4, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0x8, 0xe79c}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000100)={0x0, 0x1000, 0x6}) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 808.934990][ T9623] tipc: TX() has been purged, node left! 08:22:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x2}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x68}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x10000, 0x2, {r1, r2/1000+10000}, {0x5, 0x8, 0x81, 0x3, 0x8, 0x8, "c06484bb"}, 0x81, 0x3, @fd, 0x3ff, 0x0, r3}) ioctl$SIOCRSACCEPT(r4, 0x89e3) [ 809.020622][T15886] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 809.117230][T15892] device geneve3 entered promiscuous mode 08:22:52 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000810d0068d548a18190ad92007ac442b940d34537a15d71331bdc15d455c0da49c4c94b600e5314561cf347710031d96a9bc056d4aac30266f8578463e50f6f6dffc9e8a91b4062517c812addf8feb842186a878f8203526245d57f7fd03bee27cd59b24cb9b39c73b4f1cac80ed121f37bbcbda83db5b6002c809e8ea15897f26fa98e1f168925087f1b4c4c82156a10088909b6d1f7b84524bf7293b0db429a59d74049874deb7aab1004e4bfc7e514a89a68b39cac42944376a9ce61573c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c0002800500060000000000"], 0x3c}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x42, 0x0) [ 809.298139][T15901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.317334][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 08:22:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_msfilter(r0, 0x0, 0x31, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000100)) [ 810.044328][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 810.058387][T13331] Bluetooth: hci0: sending frame failed (-49) [ 810.124127][ T12] Bluetooth: hci1: command 0x1003 tx timeout [ 810.132631][T13331] Bluetooth: hci1: sending frame failed (-49) [ 812.124130][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 812.130328][T13331] Bluetooth: hci0: sending frame failed (-49) [ 812.204705][ T9631] Bluetooth: hci1: command 0x1001 tx timeout [ 812.210810][T13331] Bluetooth: hci1: sending frame failed (-49) [ 813.104086][ T270] tipc: TX() has been purged, node left! [ 814.204153][ T9631] Bluetooth: hci0: command 0x1009 tx timeout [ 814.284252][ T9631] Bluetooth: hci1: command 0x1009 tx timeout 08:23:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 08:23:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="680000001000010425bd70000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000001e000040001280080001006772650034000280060010004e23000008000700ffffffff0600110000000000050009000100000006000f0014000000080004000200000008000a00", @ANYRES32, @ANYBLOB], 0x68}}, 0x0) 08:23:01 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) open(&(0x7f0000000140)='\x00', 0x410400, 0xff02) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="00fb10000039af7d5bc4c3988f5183320a730b0a6b017accee0ad857ff2dbf80d3b3b5577214503f42b267040138b18ebe160ff47ca09bb835d4fcc82a615eee47550b8e0eee505e48da22f3cacf0b544b097f6589903037ac19ce97f3f415edb435a74f4182a778f9d2442284fb266c6e497ac66518659f46a12fdf439699a665d58499392b8bddf9cf17840ecc149628860ffd7c2f3bccce496bcf50b3020eec6205ed4c2556c5cd0c0fd9cb687a0f75997f086931bb86b9298ef479db0881f63b61d973000000000000054a4a83ef0f78da226fca4a26fd915c1729eb4461e308ca3cc9c6e28b05977b4abcd94ac8498bc3744335f4781a351427311e16ce6c0f84b0ff03294fc08e9d778b98b407c21bea15b98e7bab716fdc00000000993e826b35a325e8b27dc229ca66339e9afd3d8f9957b4595d94bca68378a9ad4aa793605ebb6c9db71753ac8c2bb3279116e6f89c2dcb9f3b88bdebcaa5a35e175fa8edef20c8ad8e2f5b14ec048d9c5084505369b0dec1abf4630c7bcd3990785909d3a667082996884744acc1a9a940c55e0abe2951cc82e7f97e71dc8d324a6f09f682c0531dbcc8a18a6f84df4792d5fb4946a2d0af5072604a3ea144bdde004ff496aae2ff24a4bebfd5d6fdc9e483931de3d5e3750bd1e98dfe2ae38306bc86c6411b390f41509c805a48ad798dcbced50b472f960fc65a454a074a3c375052d1250460cce12dabba4d0366eac1d2d5024509577f29bd198660c0a840a7a876de0fa7b160754e002261fa1dee8efec2ef1d2f4802a46120bb589537727183820449d453e1326e22f5292ca4eccfde1a2b924e97875b44db94b82959a3ff7a"], 0x110, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 08:23:01 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x8cffffff) 08:23:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) fsync(0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(0x0, 0x0) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x9, 0x377, 0xff, 0x101}, 0x10) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f00000000c0)}) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="7a83c03ace39", 'vcan0\x00'}}, 0x1e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, r1) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8045) 08:23:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:23:01 executing program 3: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @descriptor="cc58a8b0f343dfd8"}}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0xfffffffd, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000001c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x990000, 0x1ff, 0xfffffff9, r0, 0x0, &(0x7f0000000100)={0xa30001, 0x9, [], @p_u32=&(0x7f00000000c0)=0x4}}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x20) 08:23:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x246cc0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(0x0, 0x800000000006) dup2(0xffffffffffffffff, r1) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000300)=0x7, 0x4) finit_module(r1, &(0x7f00000001c0)='nodev+\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x41070, 0x100000000, 0x2, 0x0, 0x200000, 0xfffffffd}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0b") sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x40080) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000540)="a21c52b789e0c9deadcba214d4ba892ba25257da24b123c9a1c76da6b5ac9a1b0e76f6e1d82332a8d3739a59a181f88126c5ac1333f7341cdb9e532ed5b9177b07799a1a04085f5ff1587bc5b022cd2965bb076d5a0e56a700a83cbfd2ec7687439db770d6090f247f97abc6e30d1afeb98ddb015e44c783ce293a3edce0e18a1cb2ee4a7566258a8f71e923152b8c5bdef45ce10af8bb0edbbae994fd5925abf07694b3ecc604b1f532854966ed0d87cbbcb2c16520f5fdd84f65e4cab4cb09675f5fa22222e4fee3b482f0576770936334c5806519cb6083d9ae8c52d7c79a", 0xe0}, {&(0x7f0000000640)="39622389a9e3ed714346e64818ca8ce4896a5f4580df08b1b244b84c6bb4cba3853fdd1280790af81245109c1ce26be825fb2961c07f11033eae7a9fa2f91696e48312d2b430a5628fa3d8df1d8c9f29ae5cfbd548aedf535bbc0dfe943a4888b4697bf2694395262aacf609e9402ed294efd8e9cacaa9af52c8c2628ef6fdd4aa1906756a22fdfb9e4101f3e7008235a4e7b781c30a926b2b823fa0dbed2db4ac8cc8e90052ac87899541f3202afa289e429cdefedb6b32e92358b4a50867c38309fac22b9c86a0b97c335b142d46d209180b6ef21e3e99f7ff5d681d4032e18670622f19c21f819fec2954ed706067da63cc8079a499a45dd0209f83e62fe8fa77fe0eef51c0a3814b33fa7e290aee696337ab60d106d335d8fb934e1ca1adb00ff34214b1d0dbdba0aab6c76c706df6f01d04d2bd40d001e707094b9083e604f31a2159fff28c1cf43ea22560b391ee96ce32e5f832e5f9b6aba65282f852ab081a75f70241bf498ea8ffc8edaf58fdb3c594ec9b505635f47ed6ab0593e65c74b9b796956cbd830d52ee05e14dd7f85c3dd0173190a4b14bdc1d015ef6630dc7195f5536a4ec0cad7ac1c6a09a41e8a3c1e4c49ea5da5c43acbdfb9ac5142da7a2fccf575731e20cf08119610fd41e9160a2c2d4d94572a5f3bb9eb2e5b7a9132730ee8aca057d05195b21ab1b343fca38e6fe42fd5d5d7fceb4719f5faadd4088560feb8dbcba885d7b7e774311f3f2320ceaa93a54a1da71dfeaf4bdbddb3067e9a093574f3923e5825e0bcf6312d005f01a6416b4a68f6bb41e27cc128f19d41ce7873f302869579a6c7f56044b1ebe7ba533ad7edff3bcd9a33365ecf312207815d369752bdfffc471de6781bd0a4d9a5500b3f40402da14b493903498dbc5450ef794639b46909bb917edb8e185d67936a899ab6bfeadf4e71b77315b0b2ef200bd942047892bfaa9a088a5c0089c620d348a00a819ab0ffb0f294faa63962a285ac4d087534c96fd296c590406916cc77807a9f9a46e7f781735baed2507cac4c0cf78877498dabb21e7899e6094eb3a80f5f687bda6f5494f60c8c108b33838aac986f29f72efdf6bc8fded7a1f86327b1d77df123c0383e53bc61beeb45ea9704af4d1d435860d30c6c7d6e69e5a07df2d4f4f968b03c391ed55d475001eb339e5b5a1d0e459257f8fa6755b994ec0812b9c014808da819c68507c492cadcc65d62ec912ed3a02ae22cf502bbd80491ca69f4e27734ee0128c1791b04d624b25dc8f95aeb9a28124008625b5df98034ec7954aa24fdc2c3dfdf2acfca630792835b6a0aaa0d2559aac65c82a3e14ea33a28ed6f3307e7ca1f233adda7e93654ff4d38e511974fcab6826026ff882c678b0fac40529f89b900fc9cebdbd280233358ab74b937460c6ee2d162bf51efc546480c364929a39b285f550b8c0e921df6d01a3017e6d95e390486c82ec77d7de8526ca9f5c6d89a580f6a58f76eede89acff83d094566493b959577b90773283b5bd9ac490d438f2e770dafe178ce4d1e4aa5469f2adaedec62c1f0c5bfe60b09743346f8555f9842a6ce7fdb2a9394e3de5255ec38752c5ae5c42af56165707ba77093af2d82fc06cfeffb8145e14a16cdfc333aad159af769fe896a168c662da831f0162d7c94d36909ff9d2c71f427feffea23dbc5b824148106b784b6326a614aa5c834306ba86a077e9a254e754a9ce6ed5b7a15ce322af3efb75d3941844f8d56965cd078ce00001c7b506795adc4b4155a1e20f8949f14ea537f4d09cdfa18964407a90d8f84a38441df6db9074ac0aef5e3b3ac25746fdec1bce1eacdf151b4f107a7dbe333aac02ac14d29cae0c7916355a97f6ff85fd36fc3e67e533a5a4f24f0d6d994da77e5e45553701fb3d31339f4bf6207b86d06fe9510dd9c76c67fb5e3bfd0fa78735d24594a82a378ae2a75e65c1c18117e60684e42557c51df86261476c8d8bc94af70d0086a1fc8c4c3ec00008f68742e49d121b3d41f0bc764e376d6347044a15e8b455a1ab177b53035a875759f3aceb394892484bdf8038077cbf59c4d2be923c1944b139557027989785f12889d7cb3569ec708df3f7f5e12398b3e9fbb4608c5dc1f970a8d9a78e0be6f1081305b6e160b85541ef27ee9031cd1f0c7bf6eef5d6b01c05537f4c293696143c3dc174765807297d1e4b9f3a6ddbdd2df605217c80801d127f6e6634c30d25e5e435aaa485738d82977312a20fd1eba7bfce42ba5eff719d70eaf13766b0d45bc664d2747c41aa9c82bfa1c4cdd8fd7b15cc3f91580b317adb6a6ee568f41f8d571309214a1c732d5001293f15e70b41b827a75df5636ed15648ed8db8c5da26e7e345da6f3f833c5e9650dc13f9f3f0666241fc2af6ed22eb452568fce64b2973235670e7150539ee4cebd959530c81c5daaa9de381e1853105dffc8ecf840720156de953704c6cb15eab1970c6455e26888fdf937e8ddc6db62b9fb37d482a88e34a02f42323d4f3c7da0966d5342898b2ff88a87ffbd431edc92c4d8d5061558c61664139d7c319fddbd06c3c509bddb5aa16ca405bd34c8d2157dbcabf00dd350096501499620a55d7cc02ca9906e6e6fd5fabfecd6aced8c8b3851e5a35990d7379ae2e9b513ef94e32b1f688cda5ffa9f06a58d21e488caeffff079b55c213b85a5f77b71190f6b97f60e5b252c70415b6361cb9213aca185f9aadde0ac6b55da49b5c49a177fb3a3d9b255e28ce65418a30a6417e7990c9ef2809196f7737d12b4e37d0b48e534184a4f9f5f2b0a9f69b058f403dc3d1f4493f1a158e98ace12f8208d8a7a32a674043fb5c10d16b0d7be9d91248f8fd9d6c1a79bccda00b26a2fbd1bf7e98e305620c16c44c749dccff5796cf3a5047cb3591bd2e27d583ec471bf0cadb5569f546eba6512320e8c87aaaf2732c34409672565e65da72a9ea14033bcd4fca416e44ef8fb3bab43dc15e574984413bb2e4e3b3f3d2ac0b9dc75d170040bc91bc69f981a52bd62b87034a2acb33efd08b2385c8c633c68f1a7502f794d5f16ae8c71bdadc35925ae38f38da7c89377ff62b7d8c86cb978871a89a29c49f50944c6d273185549dd80970bba30df9b98c6932a1ed7081258ca1d9beccda43c43d1b5496c826852e3bb6c82a367fb2ac1ffc39a978c4874d05baca40b878bd913fed1009314a5ccdb5400ad692f1da2fef90b81f051e2143f316457cbb6d1571df48d9b0650d6a222fe2075199e8f3aac4be4c0249583f3870cb0eb3155dcfbd873b2125889d3ef4027f21cfc9fd76fbe03465831570ad72388dd11cebf75f258bdf5a07389cbc8c6302887e9291183b06f5e121c238b93b9dfe40b6817b1e780916bb4ab8e71c6b5f0a266fdd13d571aa5be8b687d10780628ced4484018f4dedac5b8fc11861107b393140425367217e8b40a2e699dc12c75b79df4c73df948c57c22d47258cb27d85d15499f72e6d285dfff2468bbaedab4c831eea3f5e37b3da9be497753d2724369144169ff98b50ec1a549e637b4742f31027a1ee9142a2d97b998f2b164f511b71015c719af85b574caab60f54238312e4a632dc93512a2acd53456446f0a935a17623fdeb8f02a83802b97f7ce25a010d56886a9c82fd0543f0fc3e4bf0e167671443559a938e7b8560409e2bd7a1e3afa4d8a2a419254774a97f72807edd4508bbf5fe405822284b7480f5695d988aa5844f520fb01e0b58ee3887852dd969fe974c51b66ec0d54c4d08e70ef1ee4c524160a7ee2bdaa0a1d45dd9f427692b079737f72ec38e831eb1ee27f3d4b9664e347b10a23263edd030319954915089bad129d1b51b46703a75211ad2974f45e3e955d9b4c029915781987262e674ae96adea1d2e2fc3d65f63aacb3bcd419a3888d9ec9163741808f531d3f6d62ad12ceba42b251039ce56081f5bc29fc1fab69bc5fcc12f44c87f7d300bad2d2df3ce88b42b961fba5dcbbbc4c689d39183f46d5066c129aa573f00283fadb798222b44d53b16bc7f37afbcb4838b51abaca71f8d01e6d9809f85b6aa9c6ce118acba4295b2d194aade667ac7a1b6749523c2c4280b701fa1fcd9b182eb18993fa0db3f6c42fcd46f6a0ea14678c0f6f8e81d13f41c0e3daae1fad5eb47dc1171101c1b3fd7a3ce5f4023b7440b4b2db53a47f28f961cb9a3e98a574dabb457d742e4e1c5934ba927450f9268ebd5f29090403b4c4749be3102bbf25c3d8532a275b5c0fc2b4a5e1b1248de53a0f3c57262f21aaf7a6b1bdb1e66217c0cdcb70772da7adc410e0feeb4baee8f0ee6bd32a4b1785f83bfb267fbfb9d2dab0d4024924e4f92f469ea8d44bbc609ebf95879b012b8c7136349f95641633002eeae0922c80b0d49f21215c5acdd64a386efaba949cc32677db995fad03ee7cbd2dd6c1dae049128f94131cd4a3bc6ffc0eff3fd53ec1e2804fcbf7831abdf0e9160aa3699e5c1149b72c7d9fe9330fecd729a4cf664a909c5fad9b35b0bdf9269a25d60fc60688eaf9db82f413a73171f7ef520b4f4bde3f0c915d4e9a32ac58a2973bef63df0cfee3fe2ee5e0b4db6084ce17dc73433d5446ab57f33471aed18ae5c8e288d8c03b609947e50c3da6b2f747ef4b71568eb5625febde6a5b748c85cf07afa2912dd3dfa9ffad055496fe1961e55a7568a7f7372fdbee4ec87e39f3647ec76da4a149e0623a1711cb800435c85087ba42946b4927ce4c553386cd16e070f5dfdd6f642262059b9ec2e6ccf304841aba1f89eac662a1dbbddb15a7ab0c1d795eef75877b687eb02ef99aa6a93d723b8730053573d09b14b7b47732cede3c1850718b447bf598a33f57269e122e39ea4ea4b823d46ca07d926d2ddb66695c590cc9fc0c54431886f108e6be3144e047f8a614f68303d3ee6ecd7e0f8372aaf624aa78f789ba77c4fb044e03a1f4c35821e4960ee903bbc9fe0f7654f48ecbcbc347730a9b4d5c3207ac0dae3119779a21ca99b4060eb8f533c0ab67da0859b10f6ec0cb9b56622752ab002757d96386c89c02f97e0e329511d00fdc6b9d802366cead6289bb70c514cd75cd62fc78828c32294d3d009de94ce5a3e33e6d23ac878cf74a5d0a4c4c219f42c3144d0fa2a0d7741121e45877b35f80a23d6a222bc87e306ae9b1be40b4aec9718ac557250f471b70adfb28389309ba7eb8f2626724b68693de482c478546640cca59df5794d1b7cfe41159bee63f86017eb44aba9b1333d94530b76e43eca59cd6110de92c3331d795b3f02c757dc61495031fd0911b25a909afd8879adeb97cfec357d9c8073ab8c3713d9282ebed541e455e61a4333e4d3b6693a50cfdfc4d8e994e320663d3c2b826830ce000c297c407193d90bab5939f98f2cc9c6542a3472c13a8fcedaddd5cf8a4fc59ff03b2ce93c8d765d58af6e7acf42359fd4094aa836a0376a412f40dd1aeb546c3af00b32beef15b5c6d89e674e59a26e3a89b3b2da8a503063259aa48e8a6a7961bc8822bfca243ceab43bb11815ddc5a5daa0412b4a7946075679ac59ffd1932e8bce6098cb4d9a0810be2e8124a04131df037097a1ca9c911dfcbac84818b0c138aed4b5fbf24f445da31f9bce871dd0c7905f2cf04da150e0a4bf70c753969844098f38a5cc8a1babd4014641f2610246f52073ea71096409989a4b4803c1201785b3aebb85b435bb6be6c146cf9a98a0f82483f9d066c6702b9dbd436022ad952b6daf25afc02603805d0bd7415d6cef3dcb45f11d3b5a148976377619a1a64c615f2123", 0x1000}], 0x2, 0x8) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0)) 08:23:02 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) 08:23:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:23:02 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x4) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 08:23:02 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xf6ffffff) [ 820.844308][ T9631] Bluetooth: hci0: command 0x1003 tx timeout [ 820.850831][T16034] Bluetooth: hci0: sending frame failed (-49) [ 820.924195][T16011] Bluetooth: hci1: command 0x1003 tx timeout [ 820.930488][T16034] Bluetooth: hci1: sending frame failed (-49) [ 822.924102][T10593] Bluetooth: hci0: command 0x1001 tx timeout [ 822.930197][T16034] Bluetooth: hci0: sending frame failed (-49) [ 823.004175][T10593] Bluetooth: hci1: command 0x1001 tx timeout [ 823.010274][T16034] Bluetooth: hci1: sending frame failed (-49) [ 825.004196][ T9631] Bluetooth: hci0: command 0x1009 tx timeout [ 825.084357][ T9631] Bluetooth: hci1: command 0x1009 tx timeout 08:23:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 08:23:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x3c}}}, 0xe8) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x75, 0x7, {}, {0xee01}, 0x2, 0x6}) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r4}) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x7000000}], 0x400000000000014, 0x0) 08:23:12 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000005c0)={0x0, 0x0, @ioapic}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='ufs\x00', 0x2002000, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000400)='\a'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, &(0x7f00000000c0)=""/147}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x28}, 0x10) 08:23:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x6c6102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="00004000034eed6b49c198c7509e4bff952ebafefa6640715c9334ba29f7d004c5a272aa2967921b73956b2447c01862bb0b9b83a572fbc1620239d260e33edd060281a00920b77281610d7fdb7d8604dd", @ANYRES16=r6, @ANYBLOB="080029bd7000fbdbdf250800000008000400e0000002050001000000000008000400e0000001050001000100000005000100010000001400030019149205e13065befc310ddc0008093994000300ff010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800c) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="8248a6c573127648e5924b3bdeefaedd6b1aa937dcca2993dffcc461ba23d0d09d706adb4f759c72986c047d47324c1e91a25345a5292ee7fe388dc2f86f104a56147bb9e2f773e6330f6f0558011149899f9d", @ANYRES16=r6, @ANYBLOB="00022dbd7000fcdbdf2508000000080004000000007f08000500e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x4000080) syz_open_dev$ttys(0xc, 0x2, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x2, 0x40}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x835}], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4c910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x9}, r0, 0x0, 0xffffffffffffffff, 0xa) unshare(0x20000) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r7, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000840), 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x6) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x12b4, 0x0, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x80000000}, 0x1, 0x4, 0x8c84, 0x9, 0x7, 'syz0\x00', "230079db0c7096e354f00dca5b11736a065d145cbcd3043a705bdb8da1e1bfeb", "0eba404d1f534a0f2a62380767188cce1d09cae67f295d315257ce05f2580318", [{0x3485, 0x3f, {0x0, 0x4}}, {0x401, 0x7, {0x2, 0x7ff}}, {0xfff, 0x5, {0x2, 0x2}}, {0x2, 0x101, {0x2, 0x7}}, {0x7ff, 0x8001, {0x3, 0xfffffffc}}, {0x5, 0x9, {0x6, 0x10001}}, {0x0, 0x0, {0x2, 0x8001}}, {0x400, 0x1, {0x2, 0x5}}, {0x40, 0x73, {0x2, 0x7fff}}, {0x92af, 0x80, {0x1, 0x7da2}}, {0x81, 0x200, {0x2, 0x80000001}}, {0x7, 0x2, {0x2}}, {0x101, 0x1ff, {0x2, 0x5406}}, {0xfeff, 0x3f, {0x1, 0x2}}, {0x1, 0x8, {0x1, 0x565e}}, {0x800, 0x4, {0x1, 0x9}}, {0x2, 0x80, {0x2, 0x80000001}}, {0xe89a, 0x20, {0x3, 0x1}}, {0x2, 0x3f, {0x0, 0x1000}}, {0x5, 0x9, {0x1}}, {0xa461, 0x4, {0x1, 0x1}}, {0x1, 0xfffc, {0x1, 0xff}}, {0x4, 0x3, {0x2, 0x5d6fd02f}}, {0x800, 0x5, {0x1, 0x3}}, {0x0, 0x1f, {0x1, 0xffff}}, {0x0, 0xfffb, {0x3, 0xfff}}, {0x3f, 0x0, {0x1, 0x7}}, {0x5, 0x5, {0x2, 0x2}}, {0x400, 0x80, {0x3, 0xff}}, {0x5, 0x9, {0x2, 0x9}}, {0x6, 0xff, {0x0, 0xe71}}, {0x7f, 0x6, {0x3, 0x1ba}}, {0x1, 0x3, {0x3, 0xbf}}, {0x401, 0x0, {0x3, 0xf55}}, {0xfff7, 0x3, {0x3, 0xffffff00}}, {0x7, 0x0, {0x0, 0x4}}, {0x5, 0xfffd, {0x2, 0x6}}, {0x6, 0x6, {0x3, 0x1}}, {0x2, 0x8, {0x3, 0x7fffffff}}, {0xfff9, 0x580, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x7ff}, 0x4, 0x3, 0x3, 0x7f, 0x17, 'syz1\x00', "e99aee682bc0c61135d6665fd5d34b0041150a6a9e228f0c45b586b2870949ea", "0d7ae3b943b852bda72745c78c04229dc78886d752ab035b2ed84e06bc2ef91a", [{0x3f, 0x268, {0x1, 0xfffffffe}}, {0x5, 0x2, {0x1, 0x3}}, {0x3, 0x1f, {0x2, 0x9}}, {0x6, 0x4, {0x1, 0x7}}, {0xffff, 0x4, {0x3, 0x7fff}}, {0x5, 0x4, {0x3, 0x5114aac1}}, {0x7, 0x9, {0x0, 0x99c8}}, {0x7, 0x53bc, {0x2, 0xdc46}}, {0x100, 0x1f, {0x428b3dc84e56f65f}}, {0x1ff, 0x81, {0x1, 0x80000001}}, {0x4, 0x2, {0x0, 0xffffff01}}, {0x7, 0x2, {0x2, 0x77f7f2db}}, {0xfffc, 0x9, {0x0, 0x4}}, {0x3ff, 0xffff, {0x3, 0x1ff}}, {0x3f, 0x803, {0x1}}, {0x5, 0x0, {0x3, 0x2}}, {0x3843, 0x66de, {0x1, 0x8000}}, {0x5, 0x401, {0x3, 0xa608}}, {0x0, 0x3, {0x1, 0x6}}, {0x7, 0x6, {0x2, 0x3}}, {0x9, 0xe7, {0x1, 0x80000001}}, {0xde7, 0x280, {0x2}}, {0x7, 0x16bb, {0x1, 0x1}}, {0x3, 0xb8, {0x1, 0x4}}, {0x8f95, 0x5, {0x2}}, {0xb483, 0x49, {0x2, 0x91}}, {0x20, 0x3, {0x0, 0x401}}, {0x100, 0x74b, {0x2, 0x6fe}}, {0x7, 0x1ff, {0x0, 0xffffff01}}, {0x0, 0x3, {0x3, 0xcda}}, {0x7, 0xfff7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x40}}, {0x2, 0x8, {0x2, 0xffffffe0}}, {0x3, 0xfff, {0x3, 0x3}}, {0x9, 0x800, {0x0, 0x4}}, {0x9, 0x100, {0x1, 0x2800}}, {0x800, 0x8000, {0x1, 0x80000000}}, {0x400, 0xc14, {0x3}}, {0x9, 0x7, {0x2, 0x60b}}, {0x4, 0x5, {0x2, 0x3ff}}]}}}, {{0x254, 0x1, {{0x1, 0x101}, 0x9c, 0x9, 0x1, 0x8, 0x16, 'syz1\x00', "8b57ad60d0fa7594f0c02bb2517a2331da1ffd75345107015aad9bad3849b64f", "8d131962ee37b73a13abb40083999d11fc5d099daedd7dba67795516e69d5a24", [{0xc3, 0x2, {0x1, 0x6}}, {0x101, 0x6, {0x2, 0xff}}, {0x3, 0x1, {0x1, 0x4}}, {0xc51, 0x1, {0x2, 0x4}}, {0x8, 0x1, {0x2, 0xc77}}, {0x7fff, 0x1, {0x2, 0x1}}, {0x6, 0x3, {0x0, 0xa0a}}, {0x5, 0x81, {0x1, 0x81}}, {0x0, 0x1, {0x3}}, {0x5, 0x400, {0x2, 0x6}}, {0x1, 0x7, {0x0, 0xe8}}, {0xc9, 0x4, {0x2, 0x8}}, {0x5, 0x0, {0x1, 0x1c0}}, {0x4, 0xa6, {0x3, 0x4}}, {0x91ec, 0x5, {0x1, 0x17}}, {0x7ff, 0xf000, {0x2}}, {0x0, 0x401, {0x1}}, {0x7ff, 0x50, {0x2, 0x2}}, {0x1, 0x1ff, {0x0, 0x3}}, {0x2, 0x9, {0x2, 0x9}}, {0x2, 0x5, {0x0, 0x800000}}, {0x6, 0x3, {0x1, 0xd9}}, {0x7, 0x3, {0x1}}, {0xed, 0x7fff, {0x0, 0x3}}, {0x1, 0x0, {0x3, 0x40}}, {0x3, 0x5, {0x0, 0x8000}}, {0x4, 0x8, {0x2, 0x2}}, {0x8, 0x9, {0x3, 0x1}}, {0x4, 0x101, {0x1, 0xff}}, {0x100, 0x2, {0x1, 0x10001}}, {0x81, 0x1, {0x0, 0x5}}, {0x0, 0xfff, {0x3, 0x4}}, {0x2, 0x0, {0x2, 0x6}}, {0x4, 0x70f1, {0x0, 0x42553293}}, {0x1ff, 0x200, {0x0, 0x2f96e881}}, {0x5, 0x8000, {0x1, 0x2}}, {0x6, 0x4, {0x3, 0xbf}}, {0x0, 0xfa1c, {0x0, 0x7}}, {0x0, 0x80, {0x1, 0x4}}, {0x5, 0x4, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x9, 0x6, 0x3, 0x6, 0x14, 'syz0\x00', "178ee070429e7f2495bf50131da87daeb288c239d9fa7b1b324e70ec31a5d46c", "c54ec6331d2dd58adb5122d7a8fea1a3f69a2e6fb8014f239115c8a1990dffad", [{0x287, 0x3ff, {0x1, 0x10000}}, {0x4, 0x0, {0x2, 0x4}}, {0x2, 0x3, {0x3, 0x8}}, {0x8, 0x0, {0x3, 0x2}}, {0xcae5, 0x1, {0x3, 0x1}}, {0x4, 0x4, {0x3, 0x4}}, {0x4, 0x7, {0x3, 0x400}}, {0x59, 0x1f, {0x2, 0xffff}}, {0x3f, 0x2, {0x3, 0x7}}, {0x6716, 0x7, {0x0, 0x6}}, {0x6, 0x4, {0x1, 0x400}}, {0xfff, 0xffff, {0x2, 0xdd}}, {0x52, 0xf06, {0x0, 0xf96}}, {0x4, 0x9, {0x1, 0x1}}, {0x3ff, 0x7, {0x3, 0xffffffd1}}, {0xeeaa, 0x1, {0x0, 0x5}}, {0x4, 0x9b3c, {0x2, 0x7f}}, {0x9, 0x1f, {0x0, 0xc1f}}, {0x0, 0x5e, {0x1, 0x8000}}, {0x20, 0x4, {0x3}}, {0x3, 0x7f, {0x3, 0x78c3}}, {0x2, 0x1, {0x2, 0x2}}, {0x8001, 0x81, {0x1, 0xffff8cdb}}, {0x0, 0x1ff, {0x2, 0x9}}, {0x3, 0x1ff, {0x3, 0x7}}, {0x62, 0x8000, {0x3, 0x9}}, {0x54, 0x81, {0x1}}, {0x9, 0x9, {0x0, 0x7}}, {0x0, 0x6, {0x0, 0x5}}, {0x22d, 0x3, {0x1, 0x7}}, {0x8, 0x4, {0x0, 0xffffffff}}, {0x9, 0x7f, {0x1, 0x15e8}}, {0x575, 0x3f, {0x2, 0x9}}, {0x1, 0x3, {0x1, 0x50}}, {0x5b, 0x0, {0x0, 0x2df0d528}}, {0xbcc, 0x6, {0x1}}, {0x9, 0x5, {0x3, 0x401}}, {0x7, 0x3, {0x0, 0xfff}}, {0x401, 0x800, {0x3, 0xfff}}, {0x0, 0xff, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{}, 0x5, 0x9, 0x7ff, 0x7ff, 0x28, 'syz1\x00', "d02bad84ed65b5ff88dfb8b0928b958eb9d746c50410670e70a0e224949f45b2", "54794d7bb38fb9ce53a56ba2eb8222b2a87b38a90cf47293b7e3e0dd15b35a2d", [{0x0, 0x8, {0x3, 0x9}}, {0x2, 0x1, {0x1, 0xfffffffa}}, {0x2e9e, 0x400, {0x0, 0x80000001}}, {0x8001, 0x2, {0x1, 0x7}}, {0x4, 0x2, {0x2, 0x80000000}}, {0x2, 0x972a, {0x3}}, {0x20, 0x1, {0x3, 0x2}}, {0xffff, 0x7, {0x0, 0x2}}, {0x40, 0x1, {0x0, 0xb}}, {0xfff, 0x4, {0x1, 0x5}}, {0x7f, 0x0, {0x3, 0x6}}, {0x7, 0x2, {0x1, 0xd265}}, {0x0, 0x6a77, {0x0, 0x101}}, {0x4, 0x2, {0x3, 0x8001}}, {0xfff9, 0x401, {0x0, 0x7}}, {0x100, 0x80, {0x0, 0x80000000}}, {0x8001, 0x4, {0x3, 0xac}}, {0xffff, 0x3, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x6c1}}, {0x40, 0x81, {0x2, 0x1}}, {0x800, 0x1, {0x1, 0x100}}, {0x5, 0xff, {0x1, 0x80000001}}, {0x8001, 0x7, {0x3, 0xfffffff9}}, {0x3f, 0xfffc, {0x1, 0x3}}, {0x7b, 0x109, {0x3, 0xffffffff}}, {0x0, 0x0, {0x0, 0x81}}, {0x48, 0xfe01, {0x0, 0x2}}, {0x5}, {0x3, 0x7fff, {0x0, 0x80000000}}, {0x5, 0x1000, {0x0, 0x200}}, {0x1000, 0x401, {0x1, 0x20}}, {0x7fff, 0xf5cb, {0x2, 0xfffffffc}}, {0x0, 0x3, {0x3, 0x9797}}, {0x7, 0xfffc, {0x0, 0x9}}, {0x6, 0x1, {0x3, 0x3}}, {0x0, 0xff7f, {0x2, 0x2}}, {0x1, 0x1, {0x2, 0x424}}, {0x5, 0x6, {0x2, 0xfffffc01}}, {0x81, 0x95e6, {0x2, 0x1}}, {0x6, 0x81, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x3ff}, 0x4, 0x1, 0x6, 0xffb6, 0x1d, 'syz1\x00', "691d4e4abfac008384fab08c2d45d0da2dfd53215956aa1dfd164124427e65a4", "d54e6f613dacd74222bb558c0ced671eeb1042ff723a847183f906b9f6d9e0c5", [{0x9, 0x0, {0x3, 0x3}}, {0x7, 0x9, {0x0, 0x400}}, {0x2, 0xffff, {0x2, 0x4}}, {0x2, 0x10, {0x2, 0xb732}}, {0xbbe, 0x63, {0x0, 0x9}}, {0x8, 0x5, {0x3, 0x5}}, {0x80, 0x5, {0x2, 0xff}}, {0x9, 0x800, {0x3, 0x6}}, {0xf000, 0x800, {0x1}}, {0x5, 0x1222, {0x0, 0x4}}, {0x700f, 0x0, {0x2, 0x81}}, {0x0, 0x53, {0x3, 0x800}}, {0x4, 0x7, {0x3, 0x800}}, {0xff, 0xff, {0x2, 0x7ba}}, {0x7, 0x0, {0x1, 0x3ff}}, {0x1, 0x8001, {0x2, 0x8}}, {0x1, 0x8, {0x2, 0x5}}, {0x1, 0x81, {0x0, 0x3}}, {0xffff, 0x98, {0x0, 0x6}}, {0xfffa, 0x8001, {0x3, 0x8}}, {0x7, 0x81, {0x3, 0x281}}, {0xffce, 0x6, {0x1, 0x100}}, {0x8bb5, 0x4706, {0x1, 0x10001}}, {0xffff, 0x0, {0x1, 0x6}}, {0x81, 0xdc, {0x1, 0x8}}, {0x147c, 0x75, {0x2}}, {0x7f, 0x20, {0x1, 0x1}}, {0x22, 0x600, {0x0, 0x80000000}}, {0x9, 0x5, {0x2, 0x1}}, {0x3, 0x8001, {0x3, 0x6}}, {0xfe01, 0xffe0, {0x0, 0x8}}, {0x8000, 0x9, {0x3, 0x8}}, {0x3, 0x37, {0x2, 0x1}}, {0x3, 0x7ff, {0x2, 0x83dd}}, {0x0, 0x9, {0x0, 0x8}}, {0x3, 0x2, {0x0, 0x100000}}, {0xfc00, 0x8d, {0x2, 0x4ded}}, {0x6, 0x400, {0x2, 0x3}}, {0xd78, 0x8, {0x1, 0xf6}}, {0x5, 0x8000, {0x1, 0x7ae}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x2, 0x6, 0x3, 0xc8, 0x11, 'syz1\x00', "be89b939220f540710bd954c9d9151e6064c06c388f02fbae5904e542fafe526", "29030ea1a045888fb97339657eff8546e08bdad5f320cca53392225aa261720d", [{0x1000, 0x8, {0x2, 0x3}}, {0x5b58, 0x4, {0x3, 0x4}}, {0x1, 0xff, {0x1, 0x2}}, {0x400, 0x4, {0x3, 0xfffffc00}}, {0x510f, 0x20, {0x2, 0x4}}, {0x0, 0x5, {0x2, 0x614b98c2}}, {0x3, 0x7ff, {0x1}}, {0x0, 0x5f, {0x1, 0x6}}, {0x9, 0x8, {0x1, 0xfffffbff}}, {0x3, 0x5e, {0x2, 0x9}}, {0xff, 0x0, {0x1, 0x8}}, {0x9, 0x7ff, {0x3, 0x1}}, {0xfa96, 0x5, {0x2, 0xe15}}, {0x8, 0x1, {0x0, 0x10001}}, {0x8, 0x3, {0x3, 0x2400}}, {0x8000, 0xd34, {0x0, 0xfffff21c}}, {0x1, 0x8, {0x0, 0xc885}}, {0x800, 0x101, {0x0, 0x2}}, {0x8, 0x9, {0xf9a9e3fa2159a78d, 0x91}}, {0x3fe1, 0xf8de, {0x0, 0x8}}, {0x8, 0x7, {0x1, 0x1}}, {0x3, 0x7, {0x1, 0x3}}, {0x6, 0x9, {0x0, 0x9}}, {0x8, 0x6, {0x1, 0x3}}, {0x4, 0x800, {0x1, 0x3f}}, {0x1, 0x8, {0x0, 0x4}}, {0x101, 0xff, {0x3, 0x80000001}}, {0x8, 0x401, {0x0, 0x85e}}, {0x0, 0x7, {0x0, 0x5}}, {0x4c87, 0xfe00, {0x1, 0x401}}, {0x3dcf, 0x5, {0x0, 0x7f}}, {0x5, 0xfffb, {0x3, 0x5}}, {0xffff, 0x1, {0x2, 0x7}}, {0x4, 0x9, {0x3, 0x40}}, {0x4, 0x84, {0x2, 0xffffffff}}, {0x2, 0x800, {0x3, 0xaa}}, {0x7f, 0x6, {0x1, 0x1}}, {0x1756, 0x1, {0x1, 0x5}}, {0x836, 0x200, {0x0, 0x80}}, {0x8, 0x2880, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x5, 0x0, 0x7ff, 0x2, 0x13, 'syz1\x00', "e4b5305c2279128f5cd0bf60c5b74841e443528be46732bfabac8d45b9a5df01", "40f521531c98f832a962108b59556658ca248a89050b5528d78605bfa449c360", [{0x6, 0x5, {0x2, 0x35a}}, {0x2, 0xb27, {0x3, 0x7f}}, {0x9, 0x1000, {0x0, 0x4}}, {0x0, 0x1000, {0x0, 0x3}}, {0x9, 0x8000, {0x0, 0x3}}, {0x8, 0x401, {0x0, 0x1}}, {0x7f, 0x9, {0x0, 0x401}}, {0x1f, 0x0, {0x0, 0x5}}, {0x6, 0x800, {0x2, 0x5}}, {0x80, 0xff, {0x3, 0x6}}, {0x8001, 0x428, {0x0, 0x5}}, {0x9, 0x8, {0x3, 0x3}}, {0x3, 0xff00, {0x1, 0xfffffffb}}, {0x7ff, 0x4, {0x0, 0x7fffffff}}, {0x7, 0x9, {0x1, 0xce8}}, {0x7fff, 0x8, {0x0, 0x5f8}}, {0x6, 0x3, {0x2, 0xffff}}, {0xfff, 0xfffb, {0x1, 0xffffffff}}, {0x1, 0x8, {0x3, 0x9}}, {0x9, 0x8000, {0x1, 0x200}}, {0x9, 0x40, {0x1, 0x5}}, {0x9064, 0x0, {0x3, 0x200}}, {0xbe5, 0x6, {0x3, 0x5000000}}, {0x9, 0x63ce, {0x3, 0x7}}, {0xf05f, 0x0, {0x2, 0x653d}}, {0x7f, 0x8001, {0x0, 0x5}}, {0x1f, 0x2, {0x1, 0x6}}, {0x8, 0x9, {0x3, 0x1}}, {0x8d, 0x2, {0x1, 0x3}}, {0x5, 0x7ff, {0x1, 0xffffffff}}, {0x3ff, 0x0, {0x1, 0x6}}, {0xf801, 0x140, {0x3693b96de5f36516, 0x3f}}, {0x7, 0xe92, {0x0, 0x4}}, {0x9, 0x3, {0x3, 0x8}}, {0xff0b, 0x7, {0x2, 0x2}}, {0x0, 0xffff, {0x1, 0x80000001}}, {0xe, 0x3, {0x0, 0x7fffffff}}, {0x3f, 0x6ff, {0x3, 0x8}}, {0xff, 0xaf, {0x2, 0x10000}}, {0x7fff, 0x9, {0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x100}, 0x4008000) 08:23:12 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xfeffffff) 08:23:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) 08:23:12 executing program 1: openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0}, 0x78) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x44) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x18) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="ca431c42c3a7daebf9825537a37a22a5c3071c1bb7d9b2ae16f6e3f0848939b85cb5ba5716c2ce19c8273bafba657f0f1606578b8d45f07b2243a338e72fb547cc8228ba441e88303d2b9bd9aa60fadf", 0x50}, {&(0x7f0000000140)="92a0ad9fe11046201835a3e2877f0227382009db743858122b583f0306e7e7176e5eadb3e7b28f2796eb7b51a3a7b541b14208047e8ce6de7d86f83658d5c7565b9b19cf601a23dd6fea129d2b75c2425779546f9311164671446d9d6ed224b8b7466fc9659f058d6f0de28e9e2b0e042b88cff75eb809439142c5f44b57f2982b76d363ddbf416ac9f7981c0893443ba072e13a184ffe5435004715a8a8b251d99b947c7cd15e8d8df509c4350bcbf814607f510832515bd508b2b262c155df31b25a6aab05a805cc4f2b442de1a0afaa18c81233432dbd", 0xd8}, {&(0x7f0000000240)="909a6c", 0x3}, {&(0x7f0000000280)="701af02349ad7c36a04ce871abeb7a4a1f7c95d9235d63b2d84fc46312c3baf0107435395cc4c841b5241b82be3f3823b0b8fdb7939aee74c208c7b98744bfddee716b0486850901c38b962596930f826108665f5684fbb40609ef2eaa32f969cb5419f9513a25e1bf15a3ad2669059849c82bbd959f98769312f2b7f036f7cdc9d7f6344fbf490d82aed47df120651c7fb58742d237ae03aa5161d19e7128df6e3673f70a834b5f62ef093581244cd96d60b91d2259d1e11e30f377f45120e48c04d4c4d194cc9d3ab4a477f48e9e7b3a353f5c0eb5af8686028ee182", 0xdd}], 0x4, &(0x7f0000003bc0)}}], 0x1, 0x20000000) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'U+', 0x3}, 0x16, 0x0) [ 829.927023][T16085] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 829.983897][T16085] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 830.008286][T16085] F2FS-fs (loop3): Fix alignment : done, start(5120) end(13312) block(7168) [ 830.040941][T16085] attempt to access beyond end of device [ 830.046946][T16085] loop3: rw=12288, want=8200, limit=20 [ 830.063367][T16085] attempt to access beyond end of device [ 830.069579][T16085] loop3: rw=12288, want=12296, limit=20 [ 830.083183][T16085] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 830.236892][T16093] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 08:23:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x4, 0x9, 0x17, 0x0, "35dc74b507a091af92d146117d79c8e874baf987205463f746744f0c622abb0249598f8ce1aad5081be86aeaabad8f6cdf5664154638197bcd5957784dbb5bb3", "58b519ed449f33631020b6ded4c19d6e7713950a469c7f79b6a8077c673d5b0f", [0x8dc1, 0x7fffffff]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r8) sendmsg$nl_netfilter(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x210, 0x5, 0x8, 0x801, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0xa}, [@nested={0xeb, 0x96, 0x0, 0x1, [@generic="a9903bf0063a8b6da9e7827720efc184de5d919cadfb080c15050e84317dfb4ab09dbbbe055f15a1b05ec7bad7391a069f87415426a7424947ae973822c894c6b3476dff3b149a597e6200c85bc123c074a8d68052a5b3a0f466b953a5a3373c2d43366fbef97d7b837aa4e4af07b65e16ced02f37fd6f34b2dc69d7275e83223544e2479f5deeb43c51384661b8e5e235b0a377bf500de9d8881d8eb54218d1ced33835bdf6f6933da46619710006e34bad9616c07ac7e9f33dff23c3a363672dceea3b38a8ce9162da4c2aabb7cc77c0be83429c72cbce05", @generic="36d4d981441a081dd71ddbcf2af3"]}, @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x91, 0x0, 0x0, @uid=r8}, @typed={0xf6, 0x21, 0x0, 0x0, @binary="c4d333332ead29701622bac47783d26b66f05b90978888400fe5236a32b175e482c0d16441a98c6f61fd6e685aaba22ddaa448f0b8669300aed337d3ed9a34a4e45edc3f83ea507e4e75d3b14fc08ccd9264fb1097dd6cb747d2ccd18dd6b1df5922307f06cd655f4c82952ffa0bd85eec572fe95f5225df93d9a2c0ad50c766d7bb4f299d0961627a94299de24483799e906ec079155bcc769d06b70c788635504621cacb1c2f35e4df246389b22640285d7908e36ec1c048fe9153f4d1b66dc64b33fbfcafa51a78ce576ee8ca6aaac27626315303f5a70e641a9ce897f4159afb428b181f3670928692e321d4883c6302"}, @generic="b1f65e937524aa"]}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$9p(r1, &(0x7f0000001400)="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", 0x101) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) r9 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$FITRIM(r9, 0x40047211, &(0x7f0000000040)={0x1719, 0x0, 0x1}) sendfile(r1, r5, 0x0, 0x10000) [ 830.313431][T16093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 08:23:13 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xffffff8c) [ 830.410435][ T23] audit: type=1804 audit(1583223793.298:123): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/185/file0" dev="sda1" ino=16829 res=1 [ 830.437789][T16093] F2FS-fs (loop3): Fix alignment : done, start(5120) end(13312) block(7168) [ 830.503737][T16093] attempt to access beyond end of device [ 830.534153][T16093] loop3: rw=12288, want=8200, limit=20 [ 830.541733][T16093] attempt to access beyond end of device 08:23:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000001080)={'filter\x00'}, &(0x7f0000001100)=0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1000, 0x1000}, 0x8) write$tun(r2, &(0x7f0000000540)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x18, 0x3a, 0x0, @empty, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr="ac83265ae6590cf38aa8dd82e03c4a9b"}}}}}, 0xfdef) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, &(0x7f0000000280)=0x14) [ 830.551105][ T23] audit: type=1804 audit(1583223793.428:124): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir769468830/syzkaller.IGVv41/185/file0" dev="sda1" ino=16829 res=1 [ 830.576198][T16093] loop3: rw=12288, want=12296, limit=20 [ 830.582148][T16093] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 08:23:13 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[]}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xd0a00040}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x318, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44cf2d73}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44f3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x969b}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x200}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9408}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xde}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1010}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e7162af}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xee}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x20084040}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth1_to_bond\x00', {0x1}, 0x5}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendto$rose(r4, &(0x7f0000000180)="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", 0xff, 0x8000, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:23:13 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8fdffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002d0c45911e3b10e687ee8fc4d42dabb1bfa4f9d0c8aa5d5054e8c4d74c580daff8041a244891233cbd3b2038f940932198bb97c198fd027fb4f9ceaad9b90302415f89fd8455400f06cf38887d70e3f0ea2cfb1da567098715641e6ea892ce2175223f58db222f8c84a8c256"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff088641fffffe100004000638877fbac14140be0000001be3e7d2a0007ff", 0x0, 0x104, 0x6000000000000000}, 0x28) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000280)=0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0xa860}, 0x16, 0x4) socket$kcm(0x10, 0x0, 0x0) [ 831.724219][T16012] Bluetooth: hci1: command 0x1003 tx timeout [ 831.731608][T16034] Bluetooth: hci1: sending frame failed (-49) [ 831.738245][T16012] Bluetooth: hci0: command 0x1003 tx timeout [ 831.765211][T16034] Bluetooth: hci0: sending frame failed (-49) [ 833.804095][T10593] Bluetooth: hci0: command 0x1001 tx timeout [ 833.810185][T10593] Bluetooth: hci1: command 0x1001 tx timeout [ 833.810223][T16034] Bluetooth: hci0: sending frame failed (-49) [ 833.824111][T16034] Bluetooth: hci1: sending frame failed (-49) [ 835.884116][ T3008] Bluetooth: hci1: command 0x1009 tx timeout [ 835.894414][ T3008] Bluetooth: hci0: command 0x1009 tx timeout 08:23:22 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000001080)={'filter\x00'}, &(0x7f0000001100)=0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1000, 0x1000}, 0x8) write$tun(r2, &(0x7f0000000540)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x18, 0x3a, 0x0, @empty, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr="ac83265ae6590cf38aa8dd82e03c4a9b"}}}}}, 0xfdef) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, &(0x7f0000000280)=0x14) 08:23:22 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pidfd_open(r1, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r3], 0x1) dup(r2) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@local}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) pidfd_open(r6, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r9 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$nl_generic(r8, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f37d085a18d1dc9ed0e2101feda11790e54ff9319c94f384ff2d204d6e63ae96e16c02774b", @ANYBLOB="5683d3dd51c4aefb834158e08ed6b45152065f6441c8c49e5713b27312d3e0ac8d123cd7c7a86763", @ANYRES64=r9], 0x3}, 0x1, 0x0, 0x0, 0x14}, 0x4000081) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r12 = dup3(r10, r11, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133003, 0x0) ioctl$IMHOLD_L1(r15, 0x80044948, &(0x7f00000003c0)=0x4) dup2(r12, 0xffffffffffffffff) r16 = io_uring_setup(0xa4, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r17 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r17, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r16, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r17], 0x2) r18 = dup3(r16, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r18, 0xc04c5349, &(0x7f0000000080)={0x7, 0x3, 0xff}) 08:23:22 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:23:22 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x20000000}, 0xd4) socket(0x2, 0x803, 0xff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x9}, 0x0, 0x0, 0x8000000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000001c80)={0x0, 0x70, 0x1, 0xff, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20101, 0x0, 0x20, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000040), 0xc, &(0x7f0000001bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="000200000000fcdbdf251900000005001e000000000005001e007f"], 0x1}}, 0x814) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) getpid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) getitimer(0x2, &(0x7f00000000c0)) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x1400000000) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000001d40)={0x7}, 0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20000c, 0x0, 0x0, 0x0) 08:23:22 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xfffffff6) 08:23:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) [ 840.113457][T16168] FAULT_INJECTION: forcing a failure. [ 840.113457][T16168] name failslab, interval 1, probability 0, space 0, times 0 [ 840.174298][T16168] CPU: 0 PID: 16168 Comm: syz-executor.2 Not tainted 5.6.0-rc3-syzkaller #0 [ 840.183010][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.193073][T16168] Call Trace: [ 840.196389][T16168] dump_stack+0x197/0x210 [ 840.200741][T16168] should_fail.cold+0x5/0xd [ 840.205380][T16168] ? fault_create_debugfs_attr+0x140/0x140 [ 840.211207][T16168] ? ___might_sleep+0x163/0x2c0 [ 840.216081][T16168] __should_failslab+0xb7/0x100 [ 840.220945][T16168] should_failslab+0x9/0x14 [ 840.225461][T16168] __kmalloc+0x2e0/0x770 [ 840.229713][T16168] ? mark_held_locks+0xf0/0xf0 [ 840.234593][T16168] ? mark_lock+0xc2/0x1220 [ 840.239087][T16168] ? _parse_integer+0x190/0x190 [ 840.244033][T16168] ? tomoyo_realpath_from_path+0xc5/0x660 [ 840.249774][T16168] tomoyo_realpath_from_path+0xc5/0x660 [ 840.255331][T16168] ? tomoyo_path_number_perm+0x193/0x520 [ 840.260988][T16168] tomoyo_path_number_perm+0x1dd/0x520 [ 840.266450][T16168] ? tomoyo_path_number_perm+0x193/0x520 [ 840.272094][T16168] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 840.278009][T16168] ? __f_unlock_pos+0x19/0x20 [ 840.282756][T16168] ? __fget_files+0x359/0x520 [ 840.287458][T16168] ? ksys_dup3+0x3e0/0x3e0 [ 840.291892][T16168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 840.298207][T16168] ? fput_many+0x12c/0x1a0 [ 840.302656][T16168] tomoyo_file_ioctl+0x23/0x30 [ 840.307501][T16168] security_file_ioctl+0x77/0xc0 [ 840.312464][T16168] ksys_ioctl+0x56/0x180 [ 840.316726][T16168] __x64_sys_ioctl+0x73/0xb0 [ 840.321334][T16168] do_syscall_64+0xfa/0x790 [ 840.325862][T16168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 840.331756][T16168] RIP: 0033:0x45c479 [ 840.335659][T16168] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 840.355265][T16168] RSP: 002b:00007f76d89bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.363680][T16168] RAX: ffffffffffffffda RBX: 00007f76d89bf6d4 RCX: 000000000045c479 [ 840.371680][T16168] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 840.379659][T16168] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 840.387638][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 840.395619][T16168] R13: 0000000000000583 R14: 00000000004c7d91 R15: 0000000000000000 [ 840.416124][ T9634] Bluetooth: Error in BCSP hdr checksum [ 840.544669][T16168] ERROR: Out of memory at tomoyo_realpath_from_path. 08:23:23 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xfffffffe) 08:23:23 executing program 3: getpid() r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000240)={0x18, 0xd, 0x2, {{0x80, 0x3}, 0xf7b}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x5, 0x21}) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x8, 0x0, 0x7}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r5}, 0x0) r6 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r6}, 0x0) r7 = socket(0xa, 0x0, 0x8) sendmsg$key(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea431812b6500000e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e38032a8343881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c494034127de79f40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e535312501918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa200500"/647], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r8, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = getpgrp(0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/659], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r10, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mount(&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES64=r3, @ANYRES16=0x0, @ANYRESHEX=r6, @ANYRES16, @ANYRESHEX, @ANYPTR64], @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRES64=r7, @ANYBLOB="258f62f47382aa0834fafb9415b9e642110755311bb6e8190b50e09f834b7187b01370a558630db6b6b0ba25e2d9cd6f53689e9ccc072dde50cdcc73de67c7b370a0af1ec04c388c46b7fdd5a5f16cc93ca45795a1b20e0c6301558742d9c1cae8ff46e6a078b567f82c842be6cccf2e495911248d594b683d4301506f6c25f40e958f775e3e899775598f720147f584e9ec392377c54b129807862a64d122f5cef72cd12b760cc8bb8de1919e79", @ANYRESHEX=r3, @ANYRES32, @ANYPTR, @ANYRESOCT=r4, @ANYRES16], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESHEX=r4, @ANYRES64=r3, @ANYRESDEC, @ANYRES64=r8, @ANYBLOB="b9fd604224223311ce55200c96f1f0deb0ae46b5ac599cd7dabddc66b8a96a078348d2d738f3718f36cdd0cce40a03ea88465383f88af5b8db1c", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYBLOB="aed800000000300e330500", @ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRES32], @ANYRESHEX, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYPTR64, @ANYRES16, @ANYRESHEX=0x0], @ANYPTR64, @ANYBLOB="dae442bf3677ee74932ad81558fe1cbc0ff3e496bf601eeae842eba317b17438a1416ca4b21cfd137fd801464dae5983ec422424d20220a959"], @ANYRESHEX], @ANYBLOB="860614", @ANYRESOCT=0x0, @ANYRES16, @ANYRESOCT=r7], @ANYRES32=r9], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x900000, &(0x7f0000000040)='\xbb\xc0tB\x807g\x90\xc5\xc1sa\x03\x88\x8fO\xb5%(\xa9\xad\x94\xf4,\xd8!E\r5\xb0\a\x00\x00\x00\x00\x00\x00\x00\x01\xdd\xb3S\x85.B\x00\x81;\b\xe9\x9b\x1b\xd7\x8f\xda\x11\xb9?Z\xac\xffV\x92\xcbr7') ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x6b, 'syz0\x00', @bcast, 0x0, 0x5, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x8}) 08:23:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x10000, 0x2, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x80000000, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56], 0x6000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 08:23:24 executing program 1: setns(0xffffffffffffffff, 0x0) getpgid(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) syz_read_part_table(0x100000000e30, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200d7a08ea72f057d97ea5f2ebbb2fc6beeffffff010000d7a44c2e8c62eba14c85b5bb65098fc400ff0700060000000000000000000000000cc4bd3f8091db", 0x40, 0xfffffffffffff001}]) 08:23:24 executing program 3: getpid() r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000240)={0x18, 0xd, 0x2, {{0x80, 0x3}, 0xf7b}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x5, 0x21}) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x8, 0x0, 0x7}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r5}, 0x0) r6 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r6}, 0x0) r7 = socket(0xa, 0x0, 0x8) sendmsg$key(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/647], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r8, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = getpgrp(0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e38032a8343881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c494034127de79f40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa200500"/659], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r10, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mount(&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES64=r3, @ANYRES16=0x0, @ANYRESHEX=r6, @ANYRES16, @ANYRESHEX, @ANYPTR64], @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRES64=r7, @ANYBLOB="258f62f47382aa0834fafb9415b9e642110755311bb6e8190b50e09f834b7187b01370a558630db6b6b0ba25e2d9cd6f53689e9ccc072dde50cdcc73de67c7b370a0af1ec04c388c46b7fdd5a5f16cc93ca45795a1b20e0c6301558742d9c1cae8ff46e6a078b567f82c842be6cccf2e495911248d594b683d4301506f6c25f40e958f775e3e899775598f720147f584e9ec392377c54b129807862a64d122f5cef72cd12b760cc8bb8de1919e79", @ANYRESHEX=r3, @ANYRES32, @ANYPTR, @ANYRESOCT=r4, @ANYRES16], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESHEX=r4, @ANYRES64=r3, @ANYRESDEC, @ANYRES64=r8, @ANYBLOB="b9fd604224223311ce55200c96f1f0deb0ae46b5ac599cd7dabddc66b8a96a078348d2d738f3718f36cdd0cce40a03ea88465383f88af5b8db1c", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYBLOB="aed800000000300e330500", @ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRES32], @ANYRESHEX, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYPTR64, @ANYRES16, @ANYRESHEX=0x0], @ANYPTR64, @ANYBLOB="dae442bf3677ee74932ad81558fe1cbc0ff3e496bf601eeae842eba317b17438a1416ca4b21cfd137fd801464dae5983ec422424d20220a959"], @ANYRESHEX], @ANYBLOB="860614", @ANYRESOCT=0x0, @ANYRES16, @ANYRESOCT=r7], @ANYRES32=r9], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x900000, &(0x7f0000000040)='\xbb\xc0tB\x807g\x90\xc5\xc1sa\x03\x88\x8fO\xb5%(\xa9\xad\x94\xf4,\xd8!E\r5\xb0\a\x00\x00\x00\x00\x00\x00\x00\x01\xdd\xb3S\x85.B\x00\x81;\b\xe9\x9b\x1b\xd7\x8f\xda\x11\xb9?Z\xac\xffV\x92\xcbr7') ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x6b, 'syz0\x00', @bcast, 0x0, 0x5, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x8}) 08:23:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000300)={0xffffffff, 0x7, 0x4, 0x1, 0x10, 0x3ff}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x2, @loopback, 0x2}, 0x1c) listen(r4, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) socket$inet(0x2, 0x800, 0x40) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000040)=0x54) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_256={{0x304}, "6967ad4ea73e9bef", "97761677f962914ad07fcea7e5254f363b3163ca177949c6007aedc085dbc071", "672ec281", "4808f27486ddb8e7"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 08:23:24 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x100000000000000) 08:23:24 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) [ 842.124117][ T3008] Bluetooth: hci1: command 0x1003 tx timeout [ 842.124137][T16012] Bluetooth: hci0: command 0x1003 tx timeout [ 842.130238][T16034] Bluetooth: hci1: sending frame failed (-49) [ 842.144179][T16034] Bluetooth: hci0: sending frame failed (-49) [ 844.224641][ T3008] Bluetooth: hci0: command 0x1001 tx timeout [ 844.230724][ T3008] Bluetooth: hci1: command 0x1001 tx timeout [ 844.237053][T16034] Bluetooth: hci0: sending frame failed (-49) [ 844.243431][T16034] Bluetooth: hci1: sending frame failed (-49) [ 846.284231][T14698] Bluetooth: hci1: command 0x1009 tx timeout [ 846.290289][T14698] Bluetooth: hci0: command 0x1009 tx timeout 08:23:33 executing program 2 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:23:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x40, 0x80000000, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20, 0xfffffffffffffffe, 0x2, {0x7bc, 0x0, 0x2, 0x5034}}, 0x20) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) splice(r3, 0x0, r1, 0x0, 0x10000, 0x0) bind$isdn(r0, &(0x7f00000000c0)={0x22, 0x20, 0x8, 0x40, 0x79}, 0x6) 08:23:33 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffc60, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x78, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x9}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_UDP_CSUM, @IFLA_GENEVE_DF={0x0, 0xd, 0x8f}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr="e9a123cb05a2e51bf659f3c257699457"}, @IFLA_GENEVE_DF={0x5, 0xd, 0x45}]}}}]}, 0x78}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 08:23:33 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x50d, 0x41c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x8000, 0x6}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x141004, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000002c0)=0x7) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0xc000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r6, @ANYBLOB=',wfdno=', @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYRESOCT=r4, @ANYBLOB="a208e27fe7d7d53c68ff550b99c780745218f94c67dc5808b17a123cd5baa46b87e9c9511e0df8f7e22bf9b529826786c99a1838e312ae3830a026df67e98d4d76b0c319b087dbae0e687ebe66c538894ddd8e55179cc17bbf5cd512d64553fed371fe8fd1529edf18068f4a889e4b38c4585e4561651a4828deee99f66feb269ca2e60dc331ae0ed00541dd7d6c359ee727c2678e5902a0ef2762a1e7720d8c", @ANYRES64=r1, @ANYRES64=r7, @ANYPTR64=&(0x7f00000009c0)=ANY=[@ANYBLOB="3d2d1e8372598034f2afc1ade21bb7fcb6a42bc3388bbd46e70e4d03cded9f3c5d8f7b5e3708c0fd3b91d348e20187841533ca38fb04856be701247e3acda657bcefd9ee015ba1b233385f358491bb69996423d2ff07f0ab537376a24691f668b264b439d0902dca6e41a638eb663850a0cb36f4d326c38716d335903908e9272f05b4a41e8bf4b8af7813cd3d49d505b6fcc6cbba1b5fa4a4c57f42588e7031d47942", @ANYRESOCT, @ANYPTR64, @ANYPTR64, @ANYRESHEX=r2], @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRESOCT, @ANYBLOB="c555728ab524306469b5d15e68bad5fbda5de503bf31", @ANYPTR64, @ANYRES16], @ANYRESOCT], @ANYBLOB='\x00\x00any,\x00'/21]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ptmx\x00', 0x2001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) process_vm_writev(r8, &(0x7f0000000300)=[{&(0x7f00000008c0)=""/247, 0xf7}, {&(0x7f0000000480)=""/125, 0x7d}], 0x2, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000740)=""/100, 0x64}], 0x5, 0x0) r9 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r9, 0xc0487c04, &(0x7f0000000000)=""/226) pipe2(&(0x7f0000000200), 0x80800) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x8a000, 0x0) ioctl$RTC_WIE_ON(r10, 0x700f) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r12 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r12, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000380)={0x10}) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) r14 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r14, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fcntl$setflags(r14, 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 08:23:33 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x200000000000000) 08:23:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 850.865342][T16263] 9pnet: Insufficient options for proto=fd [ 850.894874][T16273] FAULT_INJECTION: forcing a failure. [ 850.894874][T16273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 850.908117][T16273] CPU: 0 PID: 16273 Comm: syz-executor.2 Not tainted 5.6.0-rc3-syzkaller #0 [ 850.916798][T16273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.926859][T16273] Call Trace: [ 850.930161][T16273] dump_stack+0x197/0x210 [ 850.934515][T16273] should_fail.cold+0x5/0xd [ 850.939042][T16273] ? fault_create_debugfs_attr+0x140/0x140 [ 850.944861][T16273] ? __kasan_check_read+0x11/0x20 [ 850.949888][T16273] ? mark_lock+0xc2/0x1220 [ 850.954366][T16273] ? kernel_text_address+0xe9/0x110 [ 850.959588][T16273] should_fail_alloc_page+0x50/0x60 [ 850.964798][T16273] __alloc_pages_nodemask+0x1a1/0x910 [ 850.970193][T16273] ? __alloc_pages_slowpath+0x2900/0x2900 [ 850.975928][T16273] ? __kasan_check_read+0x11/0x20 [ 850.980999][T16273] cache_grow_begin+0x90/0xc60 [ 850.985784][T16273] ? trace_hardirqs_off+0x62/0x240 [ 850.990912][T16273] __kmalloc+0x6b2/0x770 [ 850.995162][T16273] ? mark_held_locks+0xf0/0xf0 [ 850.999938][T16273] ? mark_lock+0xc2/0x1220 [ 851.004373][T16273] ? tomoyo_realpath_from_path+0xc5/0x660 [ 851.010123][T16273] tomoyo_realpath_from_path+0xc5/0x660 [ 851.015678][T16273] ? tomoyo_path_number_perm+0x193/0x520 [ 851.021341][T16273] tomoyo_path_number_perm+0x1dd/0x520 [ 851.026810][T16273] ? tomoyo_path_number_perm+0x193/0x520 [ 851.032466][T16273] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 851.038284][T16273] ? __f_unlock_pos+0x19/0x20 [ 851.043038][T16273] ? __fget_files+0x359/0x520 [ 851.047741][T16273] ? ksys_dup3+0x3e0/0x3e0 [ 851.052170][T16273] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 851.058419][T16273] ? fput_many+0x12c/0x1a0 [ 851.062857][T16273] tomoyo_file_ioctl+0x23/0x30 [ 851.067637][T16273] security_file_ioctl+0x77/0xc0 [ 851.072598][T16273] ksys_ioctl+0x56/0x180 [ 851.076863][T16273] __x64_sys_ioctl+0x73/0xb0 [ 851.081465][T16273] do_syscall_64+0xfa/0x790 [ 851.085990][T16273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 851.091884][T16273] RIP: 0033:0x45c479 [ 851.095785][T16273] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.115389][T16273] RSP: 002b:00007f76d89bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.123831][T16273] RAX: ffffffffffffffda RBX: 00007f76d89bf6d4 RCX: 000000000045c479 [ 851.131809][T16273] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 851.139787][T16273] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 851.145660][ T390] Bluetooth: Error in BCSP hdr checksum [ 851.147769][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 851.147796][T16273] R13: 0000000000000583 R14: 00000000004c7d91 R15: 0000000000000001 08:23:34 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0xffff, &(0x7f0000000200)="6ec90bef2b47a9f159230d2037fd9321abc090ecf3cec6949bb09dc813a672"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000001c0)={0x5}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x15, 0x3, 0x2, "d056c2fd55c82c3f1a20fad7dcf997bb"}, 0x15, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2010000088045001f000001000000119078ac1414bbac1414aa00000010000000000000020000000000ef0d4f2a69a19fc64fd574114846071093cafe6256c662eeab64831622168fa90b460f9f8bedc70f67e9d0266ef76acbc43ed6f584ba3087bc179117a28783bf762f39127c802f82e51da482d10da9633644b75204488be2f3e0c0b07092ef785bac817ba11936319b82f3faa3c465526a27eea933510406591bcf5f66580115ff35b5bda4a5469d6f8054"], 0x0) 08:23:34 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000010000000000000009e2206642ea8354c01000000000004060000009dd24639ef471e0aaaaeffe1b1d4e9cc573ce45a6fbc"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x100000004e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0xff, 0x4, 0x4, 0x20000, 0x8001, {0x0, 0x2710}, {0x2, 0xc, 0x7, 0xff, 0x40, 0xc3, 'ah\f|'}, 0x7, 0x0, @offset=0x1000, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 08:23:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 08:23:34 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0xcff42cf8c579976c, 0x70, 0x3e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x91dd7106ca8f533b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x388, 0x0, @perf_config_ext={0x10001, 0x4}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000007, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677cfabd5a22c3664f8520508a4248fb0fb3c7874ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e75989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a"], &(0x7f0000000000)='GPL\x00', 0x0, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, 0xffffffffffffffff, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r11, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r12 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x1f, "4bc80c3bd55387360c25a6442784bfcf376523e113dd4a564df785b842c6acdc2e5ac21fc7ea852671c7eae8a490cd6c1b099834277a28e15f15f6b420ed4c481067d437811180858a0523ffab95dc37affc0b1cae5738b3fe19f6799d57f246b257bd727f694ed026ced9d4c6805d94a8a4a8d50b46a1ffb2202360419d"}, 0x80, 0x0, 0x1ed}, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r14 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r11, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r12, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r17 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r17, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40)}}, r17, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r18 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r18, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r20 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r20, 0x1, 0x3e, &(0x7f00000002c0)=r19, 0x4) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r21, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) r22 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r22) ioctl$PERF_EVENT_IOC_SET_FILTER(r22, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r22, 0x89a1, &(0x7f0000000680)='&@[\x00') close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r23, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)='l', 0x1}], 0x1}, 0x0) r24 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000001a80)=ANY=[@ANYRES16=r23, @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYPTR64, @ANYRESOCT=r16, @ANYRES16=r22, @ANYRESHEX=r13, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES64=r19, @ANYRES32, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRES16=r4, @ANYPTR, @ANYRESHEX=0x0], @ANYBLOB="00d5a8d5e7e1d0789c75ef05dafc3d8c4a2403186499f59fc4ec6565413272c7c25f6a5b8a27f25a56f42400000000cacc0700000000000000b6515b648a99ed88f8da33bb592b32726dbc9eb2c992450d45c0c6dbc6cfd01d8f2dd10980629eec8bdc73bfc729c4b4339cf2cab23848a7525cf6fa71a747b1b019ca3ad74a75a45d67a3f569a24e8f227fa368eaa401000d0f56a07f34e6c8a3ae7a5122260b5a9cd500000000000000fd01099afc3a8a7a9b54cd01493d7a478a9050445efdfe72e1ad"], @ANYRESOCT=r19], @ANYPTR64=&(0x7f0000000740)=ANY=[]], @ANYRESOCT=r10, @ANYRES32=r14], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r16, 0x89e0, &(0x7f0000000500)={r14, r24}) socketpair(0x0, 0x800, 0x4, 0x0) [ 851.512329][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:23:34 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x8cffffff00000000) 08:23:34 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000) [ 851.998271][T16305] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.136479][T16305] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 852.479603][T16305] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.520852][T16305] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 852.924363][ T9631] Bluetooth: hci0: command 0x1003 tx timeout [ 852.930686][T10906] Bluetooth: hci0: sending frame failed (-49) [ 852.937409][ T9631] Bluetooth: hci1: command 0x1003 tx timeout [ 852.964196][T10906] Bluetooth: hci1: sending frame failed (-49) [ 855.004410][ T9631] Bluetooth: hci1: command 0x1001 tx timeout [ 855.010479][ T9631] Bluetooth: hci0: command 0x1001 tx timeout [ 855.010531][T10906] Bluetooth: hci1: sending frame failed (-49) [ 855.024662][T10906] Bluetooth: hci0: sending frame failed (-49) [ 857.084147][T16011] Bluetooth: hci0: command 0x1009 tx timeout [ 857.090269][T16011] Bluetooth: hci1: command 0x1009 tx timeout 08:23:44 executing program 2 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:23:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 08:23:44 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xfeffffff00000000) 08:23:44 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000010000000000000009e2206642ea8354c01000000000004060000009dd24639ef471e0aaaaeffe1b1d4e9cc573ce45a6fbc"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x100000004e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0xff, 0x4, 0x4, 0x20000, 0x8001, {0x0, 0x2710}, {0x2, 0xc, 0x7, 0xff, 0x40, 0xc3, 'ah\f|'}, 0x7, 0x0, @offset=0x1000, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 08:23:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r2, &(0x7f00000027c0)=[{&(0x7f0000001700)=""/4111, 0x100f}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0xed, @rand_addr="a59ea4b4faa63d45daa16cad9bdd0ca2", 0x3}, @in6={0xa, 0x4e21, 0x7, @remote}, @in6={0xa, 0x4e21, 0x1, @mcast2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x4, @ipv4, 0x2}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @remote}], 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f0000000300)=0x7, 0x4) finit_module(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$ax25_int(r8, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 08:23:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 861.755492][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 861.849038][T16643] FAULT_INJECTION: forcing a failure. [ 861.849038][T16643] name failslab, interval 1, probability 0, space 0, times 0 08:23:44 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0xffffffff00000000) 08:23:44 executing program 0: read$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, r3, 0x605}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x6, 0x0) [ 861.984288][T16643] CPU: 1 PID: 16643 Comm: syz-executor.2 Not tainted 5.6.0-rc3-syzkaller #0 [ 861.993014][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.003074][T16643] Call Trace: [ 862.006382][T16643] dump_stack+0x197/0x210 [ 862.010742][T16643] should_fail.cold+0x5/0xd [ 862.015261][T16643] ? fault_create_debugfs_attr+0x140/0x140 [ 862.021086][T16643] ? ___might_sleep+0x163/0x2c0 [ 862.025951][T16643] __should_failslab+0xb7/0x100 [ 862.030817][T16643] should_failslab+0x9/0x14 [ 862.035330][T16643] __kmalloc+0x2e0/0x770 [ 862.039591][T16643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 862.045908][T16643] ? d_absolute_path+0x11b/0x170 [ 862.050897][T16643] ? __d_path+0x140/0x140 [ 862.055248][T16643] ? tomoyo_encode2.part.0+0xf5/0x400 [ 862.060642][T16643] tomoyo_encode2.part.0+0xf5/0x400 [ 862.065858][T16643] tomoyo_encode+0x2b/0x50 [ 862.070290][T16643] tomoyo_realpath_from_path+0x19c/0x660 [ 862.075953][T16643] tomoyo_path_number_perm+0x1dd/0x520 [ 862.081422][T16643] ? tomoyo_path_number_perm+0x193/0x520 [ 862.087071][T16643] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 862.092889][T16643] ? __f_unlock_pos+0x19/0x20 [ 862.097640][T16643] ? __fget_files+0x359/0x520 [ 862.102353][T16643] ? ksys_dup3+0x3e0/0x3e0 [ 862.106781][T16643] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 862.113033][T16643] ? fput_many+0x12c/0x1a0 [ 862.117474][T16643] tomoyo_file_ioctl+0x23/0x30 [ 862.122252][T16643] security_file_ioctl+0x77/0xc0 [ 862.127210][T16643] ksys_ioctl+0x56/0x180 [ 862.131479][T16643] __x64_sys_ioctl+0x73/0xb0 [ 862.136089][T16643] do_syscall_64+0xfa/0x790 [ 862.140613][T16643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.146510][T16643] RIP: 0033:0x45c479 [ 862.150412][T16643] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 862.170018][T16643] RSP: 002b:00007f76d899dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:23:45 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x81, 0x0) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 862.178436][T16643] RAX: ffffffffffffffda RBX: 00007f76d899e6d4 RCX: 000000000045c479 [ 862.186415][T16643] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 862.194395][T16643] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 862.202371][T16643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 862.210348][T16643] R13: 0000000000000583 R14: 00000000004c7d91 R15: 0000000000000002 [ 862.227764][ T390] Bluetooth: Error in BCSP hdr checksum 08:23:45 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x20000000008007f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 08:23:45 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000000000000290000003900000000000000000000001800000000000000290000003f00"/48], 0x30}}], 0x2, 0x0) [ 862.449329][T16643] ERROR: Out of memory at tomoyo_realpath_from_path. 08:23:45 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) rt_sigreturn() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f00000000c0)) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 863.884524][T16012] Bluetooth: hci1: command 0x1003 tx timeout [ 863.890656][T10906] Bluetooth: hci1: sending frame failed (-49) [ 863.914192][T16012] Bluetooth: hci0: command 0x1003 tx timeout [ 863.920298][T10906] Bluetooth: hci0: sending frame failed (-49) [ 865.964323][ T9631] Bluetooth: hci0: command 0x1001 tx timeout [ 865.964478][T16011] Bluetooth: hci1: command 0x1001 tx timeout [ 865.970414][T10906] Bluetooth: hci0: sending frame failed (-49) [ 865.986453][T10906] Bluetooth: hci1: sending frame failed (-49) [ 868.044354][ T9631] Bluetooth: hci1: command 0x1009 tx timeout [ 868.050616][ T9631] Bluetooth: hci0: command 0x1009 tx timeout 08:23:55 executing program 2 (fault-call:3 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 08:23:55 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0xc80, 0x137) fcntl$setsig(r0, 0xa, 0x11) pidfd_open(0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) 08:23:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in], 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080)={0x77359400}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00009baffc), 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000000)=0xffe4) 08:23:55 executing program 1: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000440)=""/141, 0x8d) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2000000, &(0x7f0000000040)=ANY=[]) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file1\x00', 0x8, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x200041, 0x25) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x10) ftruncate(r2, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000200)={0x7, 0x0, 0x1ff, 0x2, '\x00', 0x5}) 08:23:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000002800)=""/102400, 0x28000, 0x1000, 0x400, 0x1}, 0x50) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x3, &(0x7f00000027c0)={&(0x7f0000002780)}) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = socket$l2tp(0x2, 0x2, 0x73) connect(r8, &(0x7f0000001400)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x80) pkey_alloc(0x0, 0x2) 08:23:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 872.560852][T16896] overlayfs: missing 'lowerdir' [ 872.572638][T16893] FAULT_INJECTION: forcing a failure. [ 872.572638][T16893] name failslab, interval 1, probability 0, space 0, times 0 [ 872.640377][T10906] Bluetooth: hci1: sending frame failed (-49) [ 872.640409][T16893] CPU: 0 PID: 16893 Comm: syz-executor.2 Not tainted 5.6.0-rc3-syzkaller #0 [ 872.640420][T16893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.640433][T16893] Call Trace: [ 872.640462][T16893] dump_stack+0x197/0x210 [ 872.673049][T16893] should_fail.cold+0x5/0xd [ 872.677577][T16893] ? fault_create_debugfs_attr+0x140/0x140 [ 872.683396][T16893] ? mark_held_locks+0xf0/0xf0 [ 872.688176][T16893] ? __kasan_check_read+0x11/0x20 [ 872.693214][T16893] __should_failslab+0xb7/0x100 [ 872.698077][T16893] should_failslab+0x9/0x14 [ 872.702592][T16893] kmem_cache_alloc_node+0x56/0x740 [ 872.707901][T16893] __alloc_skb+0xd5/0x5e0 [ 872.712259][T16893] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 872.717823][T16893] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 872.724086][T16893] bcsp_recv+0x91f/0x1430 [ 872.728445][T16893] hci_uart_tty_receive+0x279/0x6d0 [ 872.733658][T16893] ? hci_uart_write_work+0x870/0x870 [ 872.739029][T16893] tty_ioctl+0x949/0x14f0 [ 872.743382][T16893] ? tty_vhangup+0x30/0x30 [ 872.747807][T16893] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 872.754055][T16893] ? do_vfs_ioctl+0x568/0x13b0 [ 872.758840][T16893] ? ioctl_file_clone+0x180/0x180 [ 872.763875][T16893] ? __fget_files+0x359/0x520 [ 872.768582][T16893] ? ksys_dup3+0x3e0/0x3e0 [ 872.773010][T16893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 872.779262][T16893] ? fput_many+0x12c/0x1a0 [ 872.783816][T16893] ? tomoyo_file_ioctl+0x23/0x30 [ 872.788770][T16893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 872.795024][T16893] ? security_file_ioctl+0x8d/0xc0 [ 872.800151][T16893] ? tty_vhangup+0x30/0x30 [ 872.804584][T16893] ksys_ioctl+0x123/0x180 [ 872.808934][T16893] __x64_sys_ioctl+0x73/0xb0 [ 872.813544][T16893] do_syscall_64+0xfa/0x790 [ 872.818165][T16893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.824064][T16893] RIP: 0033:0x45c479 [ 872.827970][T16893] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 872.847580][T16893] RSP: 002b:00007f76d89bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.856007][T16893] RAX: ffffffffffffffda RBX: 00007f76d89bf6d4 RCX: 000000000045c479 [ 872.863987][T16893] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 872.871971][T16893] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 872.879952][T16893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 08:23:55 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0xb8160, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 872.887934][T16893] R13: 0000000000000583 R14: 00000000004c7d91 R15: 0000000000000003 [ 872.899325][ T270] general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] PREEMPT SMP KASAN [ 872.911047][ T270] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 872.919457][ T270] CPU: 1 PID: 270 Comm: kworker/u4:5 Not tainted 5.6.0-rc3-syzkaller #0 [ 872.927770][ T270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.937896][ T270] Workqueue: events_unbound flush_to_ldisc [ 872.943708][ T270] RIP: 0010:skb_put+0x35/0x1d0 [ 872.948472][ T270] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 b8 00 00 00 48 83 ec 08 e8 3c 48 43 fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4c [ 872.968078][ T270] RSP: 0018:ffffc900016f7b20 EFLAGS: 00010206 [ 872.974148][ T270] RAX: dffffc0000000000 RBX: ffff88808d83a400 RCX: ffffffff85a096ac [ 872.982119][ T270] RDX: 0000000000000017 RSI: ffffffff86324f14 RDI: 0000000000000000 [ 872.990090][ T270] RBP: ffffc900016f7b50 R08: ffff8880a89603c0 R09: ffffed1014d67d84 [ 872.998062][ T270] R10: ffffed1014d67d83 R11: ffff8880a6b3ec1f R12: 0000000000000000 [ 873.006031][ T270] R13: 0000000000000001 R14: 00000000000000b8 R15: 0000000000000000 [ 873.014006][ T270] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 873.022929][ T270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.029510][ T270] CR2: 0000001b2c624000 CR3: 000000003ad57000 CR4: 00000000001426e0 [ 873.037481][ T270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 873.045452][ T270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 873.053416][ T270] Call Trace: [ 873.056721][ T270] bcsp_recv+0xa06/0x1430 [ 873.061060][ T270] hci_uart_tty_receive+0x279/0x6d0 [ 873.066263][ T270] ? hci_uart_write_work+0x870/0x870 [ 873.071559][ T270] tty_ldisc_receive_buf+0x15f/0x1c0 [ 873.076852][ T270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 873.083105][ T270] tty_port_default_receive_buf+0x7d/0xb0 08:23:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0xcc6, 0xb7, 0x3, 0x81, 0x5, 0x8}) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(sha224-generic,xts(ecb-serpent-avx2)),sha1-avx)\x00'}, 0x58) [ 873.088828][ T270] flush_to_ldisc+0x222/0x390 [ 873.093519][ T270] process_one_work+0xa05/0x17a0 [ 873.098462][ T270] ? mark_held_locks+0xf0/0xf0 [ 873.103235][ T270] ? pwq_dec_nr_in_flight+0x320/0x320 [ 873.108603][ T270] ? lock_acquire+0x190/0x410 [ 873.113292][ T270] worker_thread+0x98/0xe40 [ 873.117809][ T270] kthread+0x361/0x430 [ 873.121879][ T270] ? process_one_work+0x17a0/0x17a0 [ 873.127081][ T270] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 873.132827][ T270] ret_from_fork+0x24/0x30 [ 873.137248][ T270] Modules linked in: [ 873.282434][T17019] overlayfs: unrecognized mount option "./file0" or missing value [ 873.334129][T16893] Bluetooth: Can't allocate mem for new packet [ 873.384060][ T270] ---[ end trace f1a4de0e34dc48e9 ]--- [ 873.390054][ T270] RIP: 0010:skb_put+0x35/0x1d0 [ 873.398129][ T270] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 b8 00 00 00 48 83 ec 08 e8 3c 48 43 fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4c [ 873.420896][ T270] RSP: 0018:ffffc900016f7b20 EFLAGS: 00010206 08:23:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = dup(r3) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) [ 873.427456][ T270] RAX: dffffc0000000000 RBX: ffff88808d83a400 RCX: ffffffff85a096ac [ 873.435955][ T270] RDX: 0000000000000017 RSI: ffffffff86324f14 RDI: 0000000000000000 [ 873.452266][ T270] RBP: ffffc900016f7b50 R08: ffff8880a89603c0 R09: ffffed1014d67d84 [ 873.484218][ T270] R10: ffffed1014d67d83 R11: ffff8880a6b3ec1f R12: 0000000000000000 08:23:56 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="130000004e007f6000fe01b2403b7bbb0a6000", 0x13}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r3, &(0x7f0000000280), &(0x7f0000000500)=0xc) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000440)=""/186) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x303}, 0x2}) r4 = socket(0x10, 0x9, 0x9) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000000540)="0b065e9fbe0997754a5db1a68ba97bfc107453557da07e1e0f13e805896fd80762971f54a2ec9936773d403db1ef640a7fddaafd49d73c7e18bbba0ffe7c024a38275fe533d6a482ad8a0b325a294365d9575a733948bd58ca4c2fc4c91a63591e8b0ac0ec3df754be665e3d0f6e6f80029d99abace38c58e7797063ccafae0b53f54dfca14cbbce475f4ad50252cce22f3ff41ce125760601c394cf281319f43c0103e16c691b5bdeaf48f1cef1f235b694f3478cce92928f46a4c070f427944e20243b9943c936031e2e4c62a3c81425c78b9e91f436c16b1b", 0xfef6, 0x40000, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f0000000640)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000003c0)={r9, 0x8000}, &(0x7f0000000400)=0x8) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000040000000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x0, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0xa30000, 0x10000, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa2090c, 0x5, [], @string=&(0x7f0000000180)=0xff}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r12, 0x5}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="000030f705fdb91700000100000063e9f9677b238a60496236daba04540de2d24ee37473b92d914703bae6d18423abdde5c6fc2614a5574d511c55674e6dce7ddafc994241", @ANYRES16=r12, @ANYBLOB="080026bd7000fcdbdf25010000000000000002410000eb0f001365e8548c08fc3f74683a6261746164080000072a4811957a107579bf749e5c33d300e38e0d3823635ad7127a13d12dc6872ea4d5fde9de4892c159bd459137047be75852873fe80b2641225305cb0f5e027513de1795fd8b1a95ed9fbd36be77953e8da7ad48f34cbed371fe24bf79fa5399700d61ee16412b79e2683d16221286ae008a39075aab7ab961d049b55042418802cf83d6103a0ea2c9bf1bea43d420d507482e92845e32af0c32d61115831838d0f62f9e19d347123f"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008001) listen(r0, 0x8) [ 873.528463][ T270] R13: 0000000000000001 R14: 00000000000000b8 R15: 0000000000000000 [ 873.552049][ T270] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 873.574212][ T270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.580941][ T270] CR2: 0000000000748008 CR3: 0000000050b36000 CR4: 00000000001426f0 [ 873.591868][ T270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 873.600305][ T270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 873.610903][ T270] Kernel panic - not syncing: Fatal exception [ 873.618357][ T270] Kernel Offset: disabled [ 873.622679][ T270] Rebooting in 86400 seconds..