) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000f00050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x3, 0x1, @stop_pts=0x6}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x88100, 0x0) 19:54:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x7b, 0x1}, 0xe) 19:54:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:21 executing program 5: r0 = syz_open_dev$sndmidi(0x0, 0x200, 0x0) read(r0, 0x0, 0xffffff7b) 19:54:21 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x6e, 0x400000) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000001c0)={0x6, 0x80000001, 0x7, 0x6, 0x4, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40280, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x2, 0x4, 0xfffffffffffffffe}) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x5, 0x2, 0x8}, &(0x7f0000000140)=0x10) 19:54:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22001c00050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) 19:54:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x60ff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:22 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 19:54:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) read(r0, 0x0, 0xffffff7b) 19:54:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22006000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 19:54:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:22 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040), 0x4) 19:54:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) read(r0, 0x0, 0xffffff7b) 19:54:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200f000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) read(r0, 0x0, 0xffffff7b) 19:54:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x7400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:23 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) 19:54:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000200050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:23 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(0xffffffffffffffff, 0x0, 0xffffff7b) 19:54:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:23 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(0xffffffffffffffff, 0x0, 0xffffff7b) 19:54:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000400050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:23 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001180)='/dev/btrfs-control\x00', 0x50000, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x90200, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 19:54:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x9400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:24 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(0xffffffffffffffff, 0x0, 0xffffff7b) 19:54:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000a00050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:24 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x3e62a895a336664a, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 19:54:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:24 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x2000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:24 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000e00050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:24 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) sendmsg$rds(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/187, 0xbb}, {&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/70, 0x46}], 0x9, &(0x7f0000001240)=[@mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x7}, &(0x7f0000000780)=0x1f, &(0x7f00000007c0)=0x100, 0x6, 0x251, 0x8, 0x6, 0x10, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x10001}, @rdma_args={0x48, 0x114, 0x1, {{0x10000, 0x6cb129c4}, {&(0x7f0000000800)=""/39, 0x27}, &(0x7f0000000ec0)=[{&(0x7f0000000840)=""/12, 0xc}, {&(0x7f0000000880)=""/61, 0x3d}, {&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000ac0)=""/94, 0x5e}, {&(0x7f0000000b40)=""/101, 0x65}, {&(0x7f0000000bc0)=""/225, 0xe1}, {&(0x7f0000000cc0)=""/237, 0xed}, {&(0x7f0000000dc0)=""/248, 0xf8}], 0xa, 0x0, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x40}, &(0x7f0000000f80)=0x7f, &(0x7f0000000fc0)=0x7ff, 0x5, 0x7fff, 0xd2, 0x3, 0x10}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001000)=""/90, 0x5a}, &(0x7f0000001080), 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x80, 0xfff}, &(0x7f00000010c0)=0x5, &(0x7f0000001100)=0x9, 0xee44, 0x3, 0x1, 0x2, 0x4, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x40, 0x6}, &(0x7f0000001140)=0x7fffffff, &(0x7f0000001180)=0x1, 0x81, 0x9, 0x80, 0x1, 0x24, 0x33}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x6379, 0xffffffffffff0000}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0xffffffff}, &(0x7f00000011c0)=0x3, &(0x7f0000001200)=0x674, 0x1, 0x3, 0x80, 0xfd7, 0x20, 0x927}}], 0x278, 0x400c014}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0xa, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={r0, 0x10, &(0x7f0000001700)={&(0x7f0000001600)=""/217, 0xd9, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={r0, 0x10, &(0x7f0000001780)={&(0x7f0000001500)=""/223, 0xdf, r1}}, 0x10) 19:54:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x40000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:25 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x9, 0x3, 0x49, 0x7, 0x5c0f800}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x10, 0x4, {"0ef5fb2dfb86d4d3af053521b4de1e62"}, 0x20, 0x7, 0x2}}}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000001c0)={0x1, 0xfffffffffffffc01, 0x400, 0x5, 0x8, 0x1}) 19:54:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000f00050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:25 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4a40, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xe, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0xaa9e, @mcast1, 0x6}}, 0xca, 0x5, 0x1ff, 0x6}, 0x98) 19:54:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22001c00050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 304.257407][T11912] serio: Serial port pts1 19:54:25 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 19:54:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22006000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x307100, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc000, 0x10) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x84) 19:54:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200f000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000b01050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 305.074608][T11950] serio: Serial port pts2 19:54:26 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:26 executing program 2: r0 = socket$inet(0x2, 0x100000000805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x9, &(0x7f0000745ffc), &(0x7f0000b96000)=0x9b) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 19:54:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200000a050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 305.332604][T11979] serio: Serial port pts2 19:54:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x406, r0) openat$cgroup_int(r1, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) 19:54:26 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x400000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200010b050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:27 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x2, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) [ 305.942502][T12002] serio: Serial port pts2 19:54:27 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) 19:54:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200000e050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) 19:54:27 executing program 2: 19:54:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200000f050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) 19:54:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x50b000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:27 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='ip6tnl0\x00'}) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0x23, "281adca7c9f645ffc2b78450beb47de2a4ab8d323cf0e3151d50dbc34f62424d855772910340936a1bf81f2d197ecd717102dc84ffc5e0038374b70aecf2624319e4a7a607fe86f966aa1adb448834419468af7665cca3c5ab5912d18de63ef90c01b05c77a07cb803cd892fa5ce4b0268ab1544fecbd8771498f3c655fa38c7"}) open(&(0x7f0000000140)='./file0\x00', 0x44800, 0x100) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000100)=0x3000) 19:54:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200001c050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) 19:54:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0xffffffffffff0001, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) [ 306.829135][T12052] serio: Serial port pts2 19:54:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000060050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:27 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x480000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0xff, 0x9}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x200) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xc4000, 0x102) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/105, &(0x7f00000000c0)=0x69) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@null=' \x00', 0x0, 'rose0\x00'}) 19:54:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:28 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) r1 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x34c, 0x1f, 0x400, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic, @nested={0x18, 0x1e, [@typed={0x14, 0x38, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @nested={0x320, 0x8b, [@typed={0xc, 0x45, @u64}, @typed={0x8, 0x16, @u32}, @generic="8cfec36622762eadd9fbd0110cdb331c0f55be040ad64629c0fbaf397361dcee72c70daf857ffd9f367e6011379b324249c8a57b5d91f0c5b8d0a7fecb7ef06d70b05996b017d29ade95175c133abf205fe9a9cc9540fb0edf654d72a1a9f492a240ed594f48c9422d8e90d77be7e5936d41c87f526b31b185f5a238cd4cc00c422dff624ad9bdc18c", @typed={0x8, 0x4d, @uid=r1}, @generic="4356722d4cacab7dbb001bfd6cfba93f70a6ff0b7b03054c17fc555630fa61f94daa49c6548bc260e119fb4bf10758346ec3767c2bfc6b90452244f509c118a86f5ab09eac52e837e4c445598f2c0848990060260b06dc723c794e4c3d0b7609d2bdf24280765f69a9f9a8513610e5290cb6431f0a3ebd0f0b9c02c699ab", @generic="8255c9326d224a6dc9dab98e", @typed={0x14, 0x4f, @ipv6=@mcast1}, @generic="2c7b4652c7df42f1faf2adef1d057a76fffcb94f69d2a52290958fc899e784bcbafa399a2f1f48afe3c36fd93f8e5310ede3918652127d2b225b6e4fc2687a4e2986196a2fbe2c2943dfa2f8ee3ad3e116aa2be2bc0f5a3899e5281989da0cb427b997e7c3dbe8820105305c60a760e2ae2104be0ff2a82c3c7b609f9641ef1116454985a49d78f90062bcda5cab14680d8ef7380fc74e0e55ccbe19e070b2cfede7c13b3d7e0c218f086930e4dbbc7301c50fe259e1e960b679340cbe0d8f92ceffb548453cb6a13bd1c23c25b99a792b7b3cc55643ce994d9d015ce2c1", @generic="4d67509b01f882e3b99135d9c578bc1c8f9eacb2db16456104ecbdf8d3be3871c8c8cafaf34c4b942209331bbac0b44deceee67a6f8d86a698da020023e776b2d7192078d15e2e34951e1cc65c4da732e9a712950031548b16e07e2ffe925de6340c5282024bf08cff49e117cf17ffce26264fe990cf63c57522ecc194b530720770e4b3640d26b7895299c9e371bccbfa54767ddb37fbbdc02590450973f522a92fe4245c6549d6300e03e0849b3f59e08776133475f4e0e5f6291b252b66d33e3f7d2eb2ff1b5a16d80047dfd2fda9aba84eae8d808b9e52df55f984d0376194c30c609d385b8e0226e0897a0eaa903afb5e88b6e2b5ad"]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 19:54:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x70a000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e220000f0050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x10001, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200040, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r3, r0, 0x7}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 19:54:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:28 executing program 2: socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000040)="d8eda182861ebd8403c89dc76d177597af991d2be4d551ab148424ae447b1479"}) [ 307.831286][T12104] serio: Serial port pts2 19:54:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000002050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000004050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 308.124458][T12126] serio: Serial port pts1 19:54:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x713000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200000a050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 308.728133][T12150] serio: Serial port pts2 19:54:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200000e050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) [ 309.030583][T12175] serio: Serial port pts1 19:54:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x740000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200000f050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}, 0x7b, 0x1}, 0xe) 19:54:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e2200001c050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 309.564802][T12191] serio: Serial port pts1 19:54:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, 0x7b, 0x1}, 0xe) 19:54:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1}, 0xe) 19:54:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000060050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050228925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x940000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe) 19:54:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xe00, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 310.476513][T12236] serio: Serial port pts2 19:54:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050428925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050a28925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xa07000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050e28925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xe00, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) [ 311.433840][T12290] serio: Serial port pts2 19:54:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050f28925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000051c28925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) 19:54:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) [ 311.678351][T12314] serio: Serial port pts1 19:54:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xb05000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000056028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) 19:54:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) 19:54:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925a000300000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) [ 312.343320][T12329] serio: Serial port pts2 19:54:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) 19:54:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) [ 312.497935][T12342] serio: Serial port pts1 19:54:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80200000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 312.701408][T12354] serio: Serial port pts3 [ 312.712200][T12356] serio: Serial port pts2 [ 312.723375][T12357] serio: Serial port pts4 19:54:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x1000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:34 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) 19:54:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80400000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80a00000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 313.262290][T12383] serio: Serial port pts3 [ 313.279100][T12385] serio: Serial port pts4 19:54:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80e00000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 313.501934][T12404] serio: Serial port pts1 [ 313.512685][T12406] serio: Serial port pts4 19:54:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) [ 313.641288][T12419] serio: Serial port pts1 19:54:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x2000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80f00000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa81c00000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 314.216134][T12437] serio: Serial port pts2 19:54:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa86000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 314.541328][T12466] serio: Serial port pts1 19:54:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x3000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8f000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 315.038846][T12476] serio: Serial port pts2 19:54:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) 19:54:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80b01000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) 19:54:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000a000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 315.479461][T12511] serio: Serial port pts1 19:54:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) [ 315.879609][T12519] serio: Serial port pts2 19:54:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x4000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) 19:54:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8010b000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000e000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 316.132510][T12542] serio: Serial port pts3 19:54:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000f000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) [ 316.321699][T12554] serio: Serial port pts1 [ 316.369999][T12558] serio: Serial port pts3 19:54:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8001c000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x5000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 316.882938][T12577] serio: Serial port pts2 19:54:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80060000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800f0000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80040030000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 317.246927][T12607] serio: Serial port pts2 19:54:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:38 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 317.433969][T12626] serio: Serial port pts2 19:54:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x6000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80003400000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 317.802934][T12643] serio: Serial port pts2 19:54:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8fffff00000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 317.828586][T12642] serio: Serial port pts4 19:54:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000100000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 318.106665][T12669] serio: Serial port pts2 19:54:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x7000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r2) 19:54:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000200000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 318.673868][T12689] serio: Serial port pts2 19:54:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000400000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 318.909299][T12716] serio: Serial port pts1 19:54:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x8000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000a00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000010b00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) [ 319.892844][T12759] serio: Serial port pts1 19:54:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x9000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000e00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) 19:54:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000f00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, 0xffffffffffffffff) 19:54:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:54:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) [ 320.818710][T12805] serio: Serial port pts1 [ 320.835498][T12807] serio: Serial port pts2 19:54:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xa000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000001c00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 321.351358][T12820] serio: Serial port pts4 19:54:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000006000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) [ 321.573904][T12843] serio: Serial port pts2 19:54:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xb000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8ffffff9e00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8fffffff000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) [ 321.901534][T12872] serio: Serial port pts2 19:54:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800f0ffff00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:43 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) [ 322.166307][T12898] serio: Serial port pts2 19:54:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xc000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa89effffff00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r1) 19:54:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 322.636461][T12918] serio: Serial port pts2 19:54:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8f0ffffff00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r1) 19:54:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xd000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80002000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r1) 19:54:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80004000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xe000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000a000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r1) 19:54:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000e000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000f000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) [ 324.889390][T13035] serio: Serial port pts1 19:54:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xf000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8001c000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80060000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:46 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 325.740353][T13075] serio: Serial port pts1 [ 325.832358][T13084] serio: Serial port pts1 19:54:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x10000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800f0000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) [ 326.352926][T13096] serio: Serial port pts3 19:54:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000b010000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 326.697613][T13128] serio: Serial port pts1 19:54:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000a0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x20000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800010b0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000e0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 327.621634][T13177] serio: Serial port pts1 19:54:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x30000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000f0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800001c0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000600000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) [ 328.469150][T13220] serio: Serial port pts2 19:54:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x3f000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000f00000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000400300000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 328.957201][T13233] serio: Serial port pts1 19:54:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000034000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 329.364120][T13268] serio: Serial port pts4 19:54:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x40000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800fffff000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 329.824500][T13284] serio: Serial port pts2 19:54:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000001000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000002000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:51 executing program 5: 19:54:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x60000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:51 executing program 5: 19:54:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000004000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000a000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 330.749385][T13334] serio: Serial port pts3 19:54:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:51 executing program 5: 19:54:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:52 executing program 5: 19:54:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000010b000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:52 executing program 5: 19:54:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xf0ffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:52 executing program 5: [ 331.668123][T13373] serio: Serial port pts1 19:54:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000e000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000f000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000001c000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xf6ffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000060000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 332.616414][T13429] serio: Serial port pts4 19:54:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x401, &(0x7f0000000080)=0x10000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r2) 19:54:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800ffffff9e000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 332.803302][T13445] serio: Serial port pts2 19:54:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800fffffff0000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'syzkaller0\x00', @ifru_settings={0x3, 0x5, @fr_pvc_info=&(0x7f0000000080)={0x9, 'team_slave_0\x00'}}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) [ 332.994366][T13465] vivid-001: ================= START STATUS ================= [ 333.033831][T13465] vivid-001: FM Deviation: 75000 [ 333.038803][T13465] vivid-001: ================== END STATUS ================== 19:54:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xff600000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000f0ffff000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'syzkaller0\x00', @ifru_settings={0x3, 0x5, @fr_pvc_info=&(0x7f0000000080)={0x9, 'team_slave_0\x00'}}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 19:54:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8009effffff000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 333.522777][T13484] vivid-001: ================= START STATUS ================= [ 333.532295][T13485] serio: Serial port pts1 [ 333.544509][T13484] vivid-001: FM Deviation: 75000 [ 333.559626][T13484] vivid-001: ================== END STATUS ================== 19:54:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'syzkaller0\x00', @ifru_settings={0x3, 0x5, @fr_pvc_info=&(0x7f0000000080)={0x9, 'team_slave_0\x00'}}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 19:54:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:54:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800f0ffffff000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 333.762498][T13506] vivid-001: ================= START STATUS ================= [ 333.814798][T13506] vivid-001: FM Deviation: 75000 [ 333.820215][T13506] vivid-001: ================== END STATUS ================== 19:54:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xfffffff0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000020000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'syzkaller0\x00', @ifru_settings={0x3, 0x5, @fr_pvc_info=&(0x7f0000000080)={0x9, 'team_slave_0\x00'}}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 19:54:55 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400000, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000000c0)={0x81, "d982546f8c324bf2bbfa1abec74911a10b8e317effd0523d5b7b66e2605a4309", 0x1, 0x22, 0x20000000000, 0xff, 0x2, 0x0, 0x6, 0x7f}) r2 = dup2(r0, r0) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf172abb6c9091049cb1fc7bbfad5701bb2f1bba5b4bd834691dc08e92f64db5763d726a7237259a1c07ef27754a1cb29f32ebe2692ffcbf438d5ab6ac7377f0585cbe4e0bf3c6130500a7505ade22ff37b83d0b9571001f3fc223bcdcf5496d9ee759ca2466c6351766de45967a772e1b994cd9617024594a944cf33500cd1fd82228f7d9"], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) getsockopt$inet6_int(r2, 0x28, 0x0, 0x0, &(0x7f00000002c0)) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f0000000240)='/dev/audio\x00'}, 0x30) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x80080, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setstatus(r3, 0x4, 0x4000) ioctl(r6, 0x100000890f, &(0x7f0000000200)="0adc1f123c123f3188b070") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540)="8a85fccf56b716fb74c2515b73bdb82d393587127bab61244a37c23057a75223ba55e32f8ea91f35bedffa905acf64621c94e3f5d9eacddc9d317ccc673cf339e514fcdd3b555d4cc6eabb2dc91439a7f5623e71ba89f94a5984c3eae556a6d66ec47926bcbcfa399bfe584587d8606060a5a1f63b221abec9af250da57e0d89799548a97aff43d7e77adb71ae5cf6a2d875e69e399721e929603e8977ab8c64ce70cbf96c8fe257b10d47bf4260a769590d1168bda356685f353d80e42fda04400624bfb01a240be391ef1d2bde", 0xce, r5}, 0xfffffffffffffca4) ioprio_set$uid(0x0, 0x0, 0x7fff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x20}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={r7, 0x1}) 19:54:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000040000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 334.423204][T13529] vivid-001: ================= START STATUS ================= [ 334.433228][T13529] vivid-001: FM Deviation: 75000 [ 334.438377][T13529] vivid-001: ================== END STATUS ================== [ 334.449064][T13531] serio: Serial port pts1 19:54:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'syzkaller0\x00', @ifru_settings={0x3, 0x5, @fr_pvc_info=&(0x7f0000000080)={0x9, 'team_slave_0\x00'}}}) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 19:54:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) [ 334.503991][ T26] audit: type=1804 audit(1554580495.558:42): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir930857037/syzkaller.ODeKHD/290/memory.events" dev="sda1" ino=17601 res=1 19:54:55 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x7) 19:54:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000a0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 334.647576][T13548] vivid-001: ================= START STATUS ================= [ 334.670248][T13548] vivid-001: FM Deviation: 75000 [ 334.682925][T13548] vivid-001: ================== END STATUS ================== 19:54:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, 0x0, 0x0) dup2(r1, r0) 19:54:56 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x7) 19:54:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 19:54:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xfffffff6, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000e0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) [ 335.375195][T13574] vivid-001: ================= START STATUS ================= [ 335.395456][T13577] serio: Serial port pts2 [ 335.409784][T13574] vivid-001: FM Deviation: 75000 19:54:56 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x7) 19:54:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000f0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 335.427957][T13574] vivid-001: ================== END STATUS ================== 19:54:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 19:54:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800001c0000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500), 0x0) dup2(r1, r0) 19:54:56 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x7) 19:54:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 19:54:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x400000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000600000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:54:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@remote, 0x71, r2}) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="29b3ec83c3b551912fdd3c000616137015c0da3732b94097318ffe6495816970ffb95d4af3308a4cd4ac43afadb606e4dc92a4c3b30975925c13c61fa6e82a49c0eedad58015e920974b4427e4602785d13e5336e7d96d93cf46b5af2210f4ec479f81506674a2aaefa46a162d171ec6853e722939098c142dd615e8f65c5f9e4c85120ac4897bc8b1c4b65b972561aaf992c5431d5bc8757d5e222634ef56d2f132ec5ffa01e461aa3ca485aaf111e5502fe2aecfc1601b3a114dab41e4908ade1041d7145a55461a8649cd9f631b49", 0xd0}], 0x1, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 19:54:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 336.297433][T13631] serio: Serial port pts2 19:54:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000f00000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) 19:54:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={@remote, 0x71, r1}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x2, 0x6, 0x10000, 0x3, 0x3acc62ab1e026c5, 0x1ff, 0x19a, 0x40, 0x90, 0x2, 0x1, 0x38, 0x1, 0x1, 0x1ff, 0xfff}, [{0x2, 0x4c3, 0xca8d, 0x20, 0x5, 0xffffffff, 0x7, 0xff}], "f5be8fadfb78eb0893355a21ec26667300e02ffc28893583021d600da8e88049966a685846735124bbe8e31e689d7d7f147d41001112d50723d71bf4b500f5fa027d401511d4c0ee186751ea123d9b912d719021e4774547af048ce4e1147a8dd1c2590d54a5f12d683e6ba2a01091629b4802455d1da29c6f6c443ca1ed8b51dd27908d0194470ab128c983019aff943228627aae3b1024398a6914cb6c3048b9fd5fd380f83320008b445ee2a9c2c0f5", [[], [], [], [], []]}, 0x629) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) 19:54:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:54:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{0x0}], 0x1) dup2(r1, r0) [ 336.480643][T13648] vivid-001: ================= START STATUS ================= [ 336.493670][T13648] vivid-001: FM Deviation: 75000 [ 336.499684][T13648] vivid-001: ================== END STATUS ================== 19:54:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x60ffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000b0100000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:58 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={@remote, 0x71, r1}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) 19:54:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) 19:54:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:54:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 337.226667][T13666] vivid-001: ================= START STATUS ================= [ 337.250240][T13671] serio: Serial port pts1 [ 337.258127][T13673] serio: Serial port pts2 19:54:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000a00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 337.291381][T13666] vivid-001: FM Deviation: 75000 [ 337.308095][T13666] vivid-001: ================== END STATUS ================== 19:54:58 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000a40)={0x5, 0x5, 0x1, 0x6}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 19:54:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000010b00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:54:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000e00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 337.495029][T13697] vivid-001: ================= START STATUS ================= [ 337.509471][T13697] vivid-001: FM Deviation: 75000 [ 337.515339][T13697] vivid-001: ================== END STATUS ================== 19:54:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x740000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:54:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:54:59 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x40000, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:54:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000f00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:54:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:54:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) [ 338.156497][T13717] serio: Serial port pts1 [ 338.158772][T13718] serio: Serial port pts2 [ 338.166265][T13720] vivid-001: ================= START STATUS ================= [ 338.193017][T13720] vivid-001: FM Deviation: 75000 19:54:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) r2 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:54:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000001c00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 338.216997][T13720] vivid-001: ================== END STATUS ================== 19:54:59 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:54:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) r2 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:54:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000006000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 338.338777][T13735] vivid-001: ================= START STATUS ================= [ 338.346676][T13735] vivid-001: FM Deviation: 75000 [ 338.352081][T13735] vivid-001: ================== END STATUS ================== 19:54:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0xf, &(0x7f0000000340)={0x0, 0x7530}, 0x10) r2 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x7fffffffefff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:00 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:55:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000f000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:55:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) [ 339.066626][T13758] vivid-001: ================= START STATUS ================= [ 339.086060][T13763] serio: Serial port pts2 [ 339.097668][T13762] serio: Serial port pts1 19:55:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000004003000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 339.116305][T13758] vivid-001: FM Deviation: 75000 [ 339.130429][T13758] vivid-001: ================== END STATUS ================== 19:55:00 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:55:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000340000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 339.316853][T13783] vivid-001: ================= START STATUS ================= [ 339.334208][T13783] vivid-001: FM Deviation: 75000 [ 339.339704][T13783] vivid-001: ================== END STATUS ================== 19:55:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x940000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:01 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:55:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000fffff0000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:55:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 340.010322][T13806] vivid-001: ================= START STATUS ================= [ 340.029267][T13805] serio: Serial port pts1 [ 340.042588][T13806] vivid-001: FM Deviation: 75000 [ 340.051723][T13806] vivid-001: ================== END STATUS ================== 19:55:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000010080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:01 executing program 5: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:55:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000020080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x1000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:01 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:01 executing program 5: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:55:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000040080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:55:02 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:02 executing program 5: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 340.954062][T13847] serio: Serial port pts1 19:55:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000a0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 19:55:02 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 341.234921][T13876] vivid-000: ================= START STATUS ================= [ 341.247410][T13876] vivid-000: FM Deviation: 75000 [ 341.257318][T13876] vivid-000: ================== END STATUS ================== 19:55:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x4000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000010b0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:02 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 19:55:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, 0xffffffffffffffff) 19:55:03 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 19:55:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 341.917467][T13890] serio: Serial port pts1 19:55:03 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000e0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:03 executing program 5: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 19:55:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x30710000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:03 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000f0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:03 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x2) 19:55:03 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 342.850848][T13934] FAULT_INJECTION: forcing a failure. [ 342.850848][T13934] name failslab, interval 1, probability 0, space 0, times 0 [ 342.889844][T13934] CPU: 0 PID: 13934 Comm: syz-executor.1 Not tainted 5.1.0-rc3+ #54 [ 342.897848][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.907900][T13934] Call Trace: [ 342.907930][T13934] dump_stack+0x172/0x1f0 [ 342.907957][T13934] should_fail.cold+0xa/0x15 [ 342.907980][T13934] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 342.908003][T13934] ? ___might_sleep+0x163/0x280 [ 342.930804][T13934] __should_failslab+0x121/0x190 [ 342.935751][T13934] should_failslab+0x9/0x14 [ 342.940262][T13934] kmem_cache_alloc_trace+0x2d1/0x760 [ 342.945658][T13934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.945745][T13934] ? __ldsem_down_write_nested+0x900/0x900 [ 342.945798][T13934] serport_ldisc_read+0x101/0x660 [ 342.962806][T13934] ? serport_ldisc_open+0x170/0x170 [ 342.968014][T13934] ? ldsem_down_read+0x33/0x40 [ 342.972792][T13934] ? ldsem_down_read+0x33/0x40 [ 342.977608][T13934] tty_read+0x196/0x2a0 [ 342.981772][T13934] ? serport_ldisc_open+0x170/0x170 [ 342.986984][T13934] do_iter_read+0x4a9/0x660 [ 342.991488][T13934] ? dup_iter+0x260/0x260 [ 342.995829][T13934] vfs_readv+0xf0/0x160 [ 342.999992][T13934] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 343.006074][T13934] ? kasan_check_read+0x11/0x20 [ 343.010943][T13934] ? ksys_dup3+0x3e0/0x3e0 [ 343.015373][T13934] ? wait_for_completion+0x440/0x440 [ 343.020665][T13934] ? __fget_light+0x1a9/0x230 [ 343.025350][T13934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.031601][T13934] do_readv+0xf6/0x290 [ 343.035675][T13934] ? vfs_readv+0x160/0x160 [ 343.040100][T13934] ? do_syscall_64+0x26/0x610 [ 343.044778][T13934] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.050847][T13934] ? do_syscall_64+0x26/0x610 [ 343.055540][T13934] __x64_sys_readv+0x75/0xb0 [ 343.060133][T13934] do_syscall_64+0x103/0x610 [ 343.064731][T13934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.070622][T13934] RIP: 0033:0x4582b9 [ 343.074520][T13934] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:55:04 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x2) 19:55:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:04 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x2) 19:55:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000001c0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:04 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) [ 343.094126][T13934] RSP: 002b:00007f4b8141ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 343.102544][T13934] RAX: ffffffffffffffda RBX: 00007f4b8141ac90 RCX: 00000000004582b9 [ 343.110528][T13934] RDX: 0000000000000001 RSI: 0000000020000500 RDI: 0000000000000004 [ 343.118501][T13934] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 343.126475][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8141b6d4 [ 343.134454][T13934] R13: 00000000004c4d9c R14: 00000000004d8d80 R15: 0000000000000005 19:55:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xa0700000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000600080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:04 executing program 1 (fault-call:4 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:04 executing program 5 (fault-call:0 fault-nth:0): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 343.744158][T13973] FAULT_INJECTION: forcing a failure. [ 343.744158][T13973] name failslab, interval 1, probability 0, space 0, times 0 [ 343.797316][T13973] CPU: 0 PID: 13973 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 343.805334][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.815393][T13973] Call Trace: [ 343.818700][T13973] dump_stack+0x172/0x1f0 [ 343.823067][T13973] should_fail.cold+0xa/0x15 [ 343.827684][T13973] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 343.830111][T13979] FAULT_INJECTION: forcing a failure. [ 343.830111][T13979] name failslab, interval 1, probability 0, space 0, times 0 [ 343.833505][T13973] ? ___might_sleep+0x163/0x280 [ 343.833527][T13973] __should_failslab+0x121/0x190 [ 343.833543][T13973] should_failslab+0x9/0x14 [ 343.833559][T13973] kmem_cache_alloc+0x2b2/0x6f0 [ 343.833576][T13973] ? kasan_check_write+0x14/0x20 [ 343.833602][T13973] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 343.875798][T13973] getname_flags+0xd6/0x5b0 [ 343.880308][T13973] getname+0x1a/0x20 [ 343.884223][T13973] do_sys_open+0x2c9/0x5d0 [ 343.888649][T13973] ? filp_open+0x80/0x80 [ 343.892897][T13973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 343.898359][T13973] ? do_syscall_64+0x26/0x610 [ 343.903053][T13973] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.909121][T13973] ? do_syscall_64+0x26/0x610 [ 343.913808][T13973] __x64_sys_open+0x7e/0xc0 [ 343.918401][T13973] do_syscall_64+0x103/0x610 [ 343.923001][T13973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.928908][T13973] RIP: 0033:0x412251 [ 343.932804][T13973] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 343.952411][T13973] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 343.960827][T13973] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 343.968799][T13973] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 343.976766][T13973] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 343.984743][T13973] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 19:55:05 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000ffffff9e0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 343.992725][T13973] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 [ 344.028629][T13979] CPU: 1 PID: 13979 Comm: syz-executor.1 Not tainted 5.1.0-rc3+ #54 [ 344.036639][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.046700][T13979] Call Trace: [ 344.050001][T13979] dump_stack+0x172/0x1f0 [ 344.054356][T13979] should_fail.cold+0xa/0x15 [ 344.058958][T13979] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.064779][T13979] ? ___might_sleep+0x163/0x280 [ 344.069641][T13979] __should_failslab+0x121/0x190 [ 344.074596][T13979] should_failslab+0x9/0x14 19:55:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 344.079110][T13979] __kmalloc_track_caller+0x2d8/0x740 [ 344.084488][T13979] ? pointer+0xa30/0xa30 [ 344.088742][T13979] ? kvasprintf_const+0x65/0x190 [ 344.093685][T13979] kvasprintf+0xc8/0x170 [ 344.097930][T13979] ? bust_spinlocks+0xe0/0xe0 [ 344.102613][T13979] ? kasan_check_read+0x11/0x20 [ 344.107469][T13979] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 344.113308][T13979] ? __debug_object_init+0x190/0xc30 [ 344.118595][T13979] kvasprintf_const+0x65/0x190 [ 344.123367][T13979] kobject_set_name_vargs+0x5b/0x150 19:55:05 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 344.128847][T13979] dev_set_name+0xbd/0xf0 [ 344.133185][T13979] ? device_initialize+0x440/0x440 [ 344.138349][T13979] ? __init_waitqueue_head+0x36/0x90 [ 344.143700][T13979] ? pm_runtime_init+0x311/0x3b0 [ 344.148649][T13979] ? __serio_register_port+0x17c/0x440 [ 344.154108][T13979] __serio_register_port+0x19e/0x440 [ 344.154130][T13979] serport_ldisc_read+0x3da/0x660 [ 344.154150][T13979] ? serport_ldisc_open+0x170/0x170 [ 344.154174][T13979] ? ldsem_down_read+0x33/0x40 [ 344.174390][T13979] ? ldsem_down_read+0x33/0x40 [ 344.179172][T13979] tty_read+0x196/0x2a0 [ 344.183340][T13979] ? serport_ldisc_open+0x170/0x170 [ 344.188563][T13979] do_iter_read+0x4a9/0x660 [ 344.193086][T13979] ? dup_iter+0x260/0x260 [ 344.197439][T13979] vfs_readv+0xf0/0x160 [ 344.201605][T13979] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 344.207680][T13979] ? kasan_check_read+0x11/0x20 [ 344.212565][T13979] ? ksys_dup3+0x3e0/0x3e0 [ 344.216997][T13979] ? wait_for_completion+0x440/0x440 [ 344.222301][T13979] ? __fget_light+0x1a9/0x230 19:55:05 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 344.226983][T13979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.233235][T13979] do_readv+0xf6/0x290 [ 344.237318][T13979] ? vfs_readv+0x160/0x160 [ 344.241751][T13979] ? do_syscall_64+0x26/0x610 [ 344.246435][T13979] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.252505][T13979] ? do_syscall_64+0x26/0x610 [ 344.252529][T13979] __x64_sys_readv+0x75/0xb0 [ 344.252553][T13979] do_syscall_64+0x103/0x610 [ 344.252574][T13979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.252593][T13979] RIP: 0033:0x4582b9 [ 344.276208][T13979] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.295827][T13979] RSP: 002b:00007f4b8141ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 344.304256][T13979] RAX: ffffffffffffffda RBX: 00007f4b8141ac90 RCX: 00000000004582b9 [ 344.312251][T13979] RDX: 0000000000000001 RSI: 0000000020000500 RDI: 0000000000000004 [ 344.320239][T13979] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 344.328218][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8141b6d4 [ 344.336220][T13979] R13: 00000000004c4d9c R14: 00000000004d8d80 R15: 0000000000000005 [ 344.407745][ T7670] serio (null): device_add() failed for pts1/serio0 (Serial port), error: -22 [ 344.417462][T13979] serio: Serial port pts1 19:55:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xb0500000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:05 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:05 executing program 5 (fault-call:0 fault-nth:1): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000fffffff00080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:05 executing program 1 (fault-call:4 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 344.630262][T14013] FAULT_INJECTION: forcing a failure. [ 344.630262][T14013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.643686][T14013] CPU: 0 PID: 14013 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 344.651662][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.662058][T14013] Call Trace: [ 344.665367][T14013] dump_stack+0x172/0x1f0 [ 344.669720][T14013] should_fail.cold+0xa/0x15 [ 344.674335][T14013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.680586][T14013] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.686394][T14013] ? debug_smp_processor_id+0x3c/0x280 [ 344.686415][T14013] ? perf_trace_lock+0xeb/0x510 [ 344.686437][T14013] should_fail_alloc_page+0x50/0x60 [ 344.686453][T14013] __alloc_pages_nodemask+0x1a1/0x7e0 [ 344.686476][T14013] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 344.686487][T14013] ? find_held_lock+0x35/0x130 [ 344.686511][T14013] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.696796][T14013] cache_grow_begin+0x9c/0x860 [ 344.696814][T14013] ? getname_flags+0xd6/0x5b0 [ 344.696831][T14013] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.696852][T14013] kmem_cache_alloc+0x62d/0x6f0 [ 344.696868][T14013] ? kasan_check_write+0x14/0x20 [ 344.696898][T14013] getname_flags+0xd6/0x5b0 [ 344.749629][T14013] getname+0x1a/0x20 [ 344.757997][T14013] do_sys_open+0x2c9/0x5d0 [ 344.758018][T14013] ? filp_open+0x80/0x80 [ 344.758054][T14013] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 344.758077][T14013] ? do_syscall_64+0x26/0x610 [ 344.776830][T14013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.782908][T14013] ? do_syscall_64+0x26/0x610 [ 344.787597][T14013] __x64_sys_open+0x7e/0xc0 [ 344.787617][T14013] do_syscall_64+0x103/0x610 [ 344.787637][T14013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.787649][T14013] RIP: 0033:0x412251 [ 344.787663][T14013] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 19:55:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:05 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000f0ffff0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 344.787681][T14013] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 344.802629][T14013] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 344.842455][T14013] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 344.850427][T14013] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 344.858402][T14013] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 344.866377][T14013] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:06 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 344.927346][T14031] serio: Serial port pts1 19:55:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x100000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:06 executing program 5 (fault-call:0 fault-nth:2): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800009effffff0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0x2000022c}], 0x1) dup2(r1, r0) 19:55:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:06 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 345.554281][T14056] FAULT_INJECTION: forcing a failure. [ 345.554281][T14056] name failslab, interval 1, probability 0, space 0, times 0 [ 345.578115][T14054] serio: Serial port pts1 19:55:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000f0ffffff0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 345.661548][T14056] CPU: 0 PID: 14056 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 345.669562][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.679619][T14056] Call Trace: [ 345.682924][T14056] dump_stack+0x172/0x1f0 [ 345.687300][T14056] should_fail.cold+0xa/0x15 [ 345.691914][T14056] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.697737][T14056] ? ___might_sleep+0x163/0x280 [ 345.702979][T14056] __should_failslab+0x121/0x190 [ 345.707939][T14056] should_failslab+0x9/0x14 [ 345.712461][T14056] kmem_cache_alloc+0x2b2/0x6f0 [ 345.717321][T14056] ? __save_stack_trace+0x99/0x100 [ 345.722446][T14056] __alloc_file+0x27/0x300 [ 345.726868][T14056] alloc_empty_file+0x72/0x170 [ 345.731641][T14056] path_openat+0xef/0x46e0 [ 345.731659][T14056] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 345.731674][T14056] ? kasan_slab_alloc+0xf/0x20 [ 345.731694][T14056] ? kmem_cache_alloc+0x11a/0x6f0 [ 345.741891][T14056] ? getname_flags+0xd6/0x5b0 [ 345.741907][T14056] ? getname+0x1a/0x20 [ 345.741924][T14056] ? do_sys_open+0x2c9/0x5d0 [ 345.741944][T14056] ? __x64_sys_open+0x7e/0xc0 [ 345.769648][T14056] ? do_syscall_64+0x103/0x610 [ 345.774417][T14056] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.780513][T14056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.786759][T14056] ? debug_smp_processor_id+0x3c/0x280 [ 345.786780][T14056] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 345.786800][T14056] ? __lockdep_free_key_range+0x120/0x120 [ 345.786820][T14056] ? __alloc_fd+0x430/0x530 [ 345.807838][T14056] do_filp_open+0x1a1/0x280 [ 345.812354][T14056] ? may_open_dev+0x100/0x100 [ 345.817061][T14056] ? lock_downgrade+0x880/0x880 [ 345.821925][T14056] ? kasan_check_read+0x11/0x20 [ 345.821943][T14056] ? do_raw_spin_unlock+0x57/0x270 [ 345.821961][T14056] ? _raw_spin_unlock+0x2d/0x50 [ 345.821977][T14056] ? __alloc_fd+0x430/0x530 [ 345.822006][T14056] do_sys_open+0x3fe/0x5d0 [ 345.845663][T14056] ? filp_open+0x80/0x80 [ 345.849920][T14056] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 345.855383][T14056] ? do_syscall_64+0x26/0x610 [ 345.860100][T14056] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.866177][T14056] ? do_syscall_64+0x26/0x610 [ 345.870872][T14056] __x64_sys_open+0x7e/0xc0 [ 345.875389][T14056] do_syscall_64+0x103/0x610 [ 345.879990][T14056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.885888][T14056] RIP: 0033:0x412251 [ 345.889792][T14056] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 19:55:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 345.909397][T14056] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 345.917845][T14056] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 345.917854][T14056] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 345.917864][T14056] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 345.917873][T14056] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 345.917882][T14056] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x200000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000200000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0x7ffff000}], 0x1) dup2(r1, r0) 19:55:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:07 executing program 5 (fault-call:0 fault-nth:3): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 346.468111][T14098] FAULT_INJECTION: forcing a failure. [ 346.468111][T14098] name failslab, interval 1, probability 0, space 0, times 0 [ 346.481447][T14096] serio: Serial port pts1 [ 346.506866][T14098] CPU: 1 PID: 14098 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 19:55:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 346.514862][T14098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.525089][T14098] Call Trace: [ 346.528396][T14098] dump_stack+0x172/0x1f0 [ 346.532743][T14098] should_fail.cold+0xa/0x15 [ 346.537349][T14098] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.543170][T14098] ? ___might_sleep+0x163/0x280 [ 346.548047][T14098] __should_failslab+0x121/0x190 [ 346.553004][T14098] should_failslab+0x9/0x14 [ 346.557528][T14098] kmem_cache_alloc+0x2b2/0x6f0 [ 346.562398][T14098] ? rcu_read_lock_sched_held+0x110/0x130 19:55:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 346.568127][T14098] ? kmem_cache_alloc+0x32e/0x6f0 [ 346.573449][T14098] security_file_alloc+0x39/0x170 [ 346.578486][T14098] __alloc_file+0xac/0x300 [ 346.582914][T14098] alloc_empty_file+0x72/0x170 [ 346.587685][T14098] path_openat+0xef/0x46e0 [ 346.592109][T14098] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 346.597915][T14098] ? kasan_slab_alloc+0xf/0x20 [ 346.602678][T14098] ? kmem_cache_alloc+0x11a/0x6f0 [ 346.602691][T14098] ? getname_flags+0xd6/0x5b0 [ 346.602703][T14098] ? getname+0x1a/0x20 19:55:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 346.602716][T14098] ? do_sys_open+0x2c9/0x5d0 [ 346.602730][T14098] ? __x64_sys_open+0x7e/0xc0 [ 346.602752][T14098] ? do_syscall_64+0x103/0x610 [ 346.630471][T14098] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.636555][T14098] ? __switch_to_asm+0x34/0x70 [ 346.641335][T14098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.647591][T14098] ? debug_smp_processor_id+0x3c/0x280 [ 346.653070][T14098] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 346.658455][T14098] ? __lockdep_free_key_range+0x120/0x120 [ 346.664184][T14098] ? __alloc_fd+0x430/0x530 19:55:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 346.668701][T14098] do_filp_open+0x1a1/0x280 [ 346.673217][T14098] ? may_open_dev+0x100/0x100 [ 346.677906][T14098] ? lock_downgrade+0x880/0x880 [ 346.682776][T14098] ? kasan_check_read+0x11/0x20 [ 346.687635][T14098] ? do_raw_spin_unlock+0x57/0x270 [ 346.692760][T14098] ? _raw_spin_unlock+0x2d/0x50 [ 346.697624][T14098] ? __alloc_fd+0x430/0x530 [ 346.702150][T14098] do_sys_open+0x3fe/0x5d0 [ 346.706578][T14098] ? filp_open+0x80/0x80 [ 346.710831][T14098] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 346.716294][T14098] ? do_syscall_64+0x26/0x610 [ 346.720979][T14098] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.727060][T14098] ? do_syscall_64+0x26/0x610 [ 346.731750][T14098] __x64_sys_open+0x7e/0xc0 [ 346.736299][T14098] do_syscall_64+0x103/0x610 [ 346.740903][T14098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.746798][T14098] RIP: 0033:0x412251 19:55:07 executing program 5 (fault-call:0 fault-nth:4): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 346.750700][T14098] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 346.770302][T14098] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 346.778712][T14098] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 346.778722][T14098] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 346.778731][T14098] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 346.778741][T14098] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 346.778750][T14098] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 [ 346.877480][T14123] FAULT_INJECTION: forcing a failure. [ 346.877480][T14123] name failslab, interval 1, probability 0, space 0, times 0 [ 346.890749][T14123] CPU: 0 PID: 14123 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 346.898744][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.908800][T14123] Call Trace: [ 346.912133][T14123] dump_stack+0x172/0x1f0 [ 346.916480][T14123] should_fail.cold+0xa/0x15 [ 346.921095][T14123] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.921114][T14123] ? __task_pid_nr_ns+0x1b1/0x530 [ 346.921143][T14123] __should_failslab+0x121/0x190 [ 346.921162][T14123] should_failslab+0x9/0x14 [ 346.921181][T14123] kmem_cache_alloc_trace+0x4b/0x760 [ 346.921199][T14123] ? kasan_check_read+0x11/0x20 [ 346.921228][T14123] proc_self_get_link+0x16f/0x1d0 [ 346.921251][T14123] link_path_walk.part.0+0xeec/0x1340 [ 346.932073][T14123] ? proc_ns_dir_readdir+0x570/0x570 [ 346.932093][T14123] ? walk_component+0x2000/0x2000 [ 346.932118][T14123] path_openat+0x202/0x46e0 [ 346.932135][T14123] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 346.932150][T14123] ? kasan_slab_alloc+0xf/0x20 [ 346.932170][T14123] ? kmem_cache_alloc+0x11a/0x6f0 [ 346.946847][T14123] ? getname_flags+0xd6/0x5b0 [ 346.946860][T14123] ? getname+0x1a/0x20 [ 346.946875][T14123] ? do_sys_open+0x2c9/0x5d0 [ 346.946901][T14123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.946918][T14123] ? debug_smp_processor_id+0x3c/0x280 [ 346.946937][T14123] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 346.956791][T14123] ? __lockdep_free_key_range+0x120/0x120 [ 346.956814][T14123] ? __alloc_fd+0x430/0x530 [ 346.956834][T14123] do_filp_open+0x1a1/0x280 [ 346.956850][T14123] ? may_open_dev+0x100/0x100 [ 346.956877][T14123] ? kasan_check_read+0x11/0x20 [ 347.022842][T14123] ? do_raw_spin_unlock+0x57/0x270 [ 347.022862][T14123] ? _raw_spin_unlock+0x2d/0x50 [ 347.022897][T14123] do_sys_open+0x3fe/0x5d0 [ 347.022916][T14123] ? filp_open+0x80/0x80 [ 347.033117][T14123] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.033134][T14123] ? do_syscall_64+0x26/0x610 [ 347.033154][T14123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.081847][T14123] ? do_syscall_64+0x26/0x610 [ 347.086540][T14123] __x64_sys_open+0x7e/0xc0 [ 347.091070][T14123] do_syscall_64+0x103/0x610 [ 347.095668][T14123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.101558][T14123] RIP: 0033:0x412251 [ 347.105448][T14123] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 347.125066][T14123] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 347.133469][T14123] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 347.141431][T14123] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 347.149400][T14123] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 347.157358][T14123] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 347.165318][T14123] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x300000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000400000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x2) dup2(r1, r0) 19:55:08 executing program 5 (fault-call:0 fault-nth:5): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) [ 347.431809][T14136] FAULT_INJECTION: forcing a failure. [ 347.431809][T14136] name failslab, interval 1, probability 0, space 0, times 0 [ 347.456649][T14135] serio: Serial port pts1 [ 347.467733][T14136] CPU: 1 PID: 14136 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 19:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 347.475724][T14136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.485780][T14136] Call Trace: [ 347.489099][T14136] dump_stack+0x172/0x1f0 [ 347.493450][T14136] should_fail.cold+0xa/0x15 [ 347.498067][T14136] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 347.503890][T14136] ? ___might_sleep+0x163/0x280 [ 347.508756][T14136] __should_failslab+0x121/0x190 [ 347.513703][T14136] should_failslab+0x9/0x14 [ 347.518212][T14136] kmem_cache_alloc+0x2b2/0x6f0 [ 347.523079][T14136] ? kasan_check_read+0x11/0x20 [ 347.523099][T14136] __d_alloc+0x2e/0x8c0 19:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 347.523116][T14136] d_alloc+0x4d/0x2b0 [ 347.523139][T14136] ? unwind_get_return_address+0x61/0xa0 [ 347.532114][T14136] d_alloc_parallel+0xf4/0x1bc0 [ 347.532133][T14136] ? perf_trace_lock+0xeb/0x510 [ 347.532164][T14136] ? __d_lookup_rcu+0x6c0/0x6c0 [ 347.556262][T14136] ? find_held_lock+0x35/0x130 [ 347.561030][T14136] ? __d_lookup+0x40c/0x760 [ 347.565554][T14136] ? lockdep_init_map+0x1be/0x6d0 [ 347.570591][T14136] ? lockdep_init_map+0x1be/0x6d0 [ 347.575633][T14136] __lookup_slow+0x1ab/0x500 19:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 347.580236][T14136] ? vfs_unlink+0x560/0x560 [ 347.584744][T14136] ? __d_lookup+0x433/0x760 [ 347.589285][T14136] lookup_slow+0x58/0x80 [ 347.593540][T14136] walk_component+0x74b/0x2000 [ 347.601444][T14136] ? refcount_dec_not_one+0x1f0/0x1f0 [ 347.606822][T14136] ? kasan_check_read+0x11/0x20 [ 347.611680][T14136] ? path_init+0x18f0/0x18f0 [ 347.616284][T14136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.622975][T14136] ? security_inode_permission+0xd5/0x110 19:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 347.628708][T14136] ? inode_permission+0xb4/0x570 [ 347.633656][T14136] link_path_walk.part.0+0x980/0x1340 [ 347.639055][T14136] ? walk_component+0x2000/0x2000 [ 347.644099][T14136] path_openat+0x202/0x46e0 [ 347.648607][T14136] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 347.654416][T14136] ? kasan_slab_alloc+0xf/0x20 [ 347.659185][T14136] ? kmem_cache_alloc+0x11a/0x6f0 [ 347.664214][T14136] ? getname_flags+0xd6/0x5b0 [ 347.668897][T14136] ? getname+0x1a/0x20 [ 347.672974][T14136] ? do_sys_open+0x2c9/0x5d0 19:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 347.677586][T14136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.683838][T14136] ? debug_smp_processor_id+0x3c/0x280 [ 347.689312][T14136] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 347.694697][T14136] ? __lockdep_free_key_range+0x120/0x120 [ 347.700900][T14136] ? __alloc_fd+0x430/0x530 [ 347.705417][T14136] do_filp_open+0x1a1/0x280 [ 347.709927][T14136] ? may_open_dev+0x100/0x100 [ 347.714617][T14136] ? simple_attr_release+0x50/0x50 [ 347.714636][T14136] ? do_raw_spin_unlock+0x57/0x270 [ 347.714654][T14136] ? _raw_spin_unlock+0x2d/0x50 19:55:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 347.714685][T14136] do_sys_open+0x3fe/0x5d0 [ 347.734116][T14136] ? filp_open+0x80/0x80 [ 347.738376][T14136] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.743838][T14136] ? do_syscall_64+0x26/0x610 [ 347.748523][T14136] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.754607][T14136] ? do_syscall_64+0x26/0x610 [ 347.759293][T14136] __x64_sys_open+0x7e/0xc0 [ 347.763804][T14136] do_syscall_64+0x103/0x610 [ 347.768406][T14136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.774302][T14136] RIP: 0033:0x412251 [ 347.778206][T14136] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 347.797815][T14136] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 347.806239][T14136] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 347.814208][T14136] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 347.822161][T14136] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 347.830110][T14136] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 347.838072][T14136] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000a00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x400000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:09 executing program 5 (fault-call:0 fault-nth:6): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x4) dup2(r1, r0) [ 348.330511][T14172] serio: Serial port pts1 19:55:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000e00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x7) dup2(r1, r0) 19:55:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 348.510067][T14174] FAULT_INJECTION: forcing a failure. [ 348.510067][T14174] name failslab, interval 1, probability 0, space 0, times 0 19:55:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 348.551095][T14174] CPU: 0 PID: 14174 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 348.559105][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.569634][T14174] Call Trace: [ 348.572935][T14174] dump_stack+0x172/0x1f0 [ 348.577294][T14174] should_fail.cold+0xa/0x15 [ 348.581907][T14174] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 348.587731][T14174] ? ___might_sleep+0x163/0x280 [ 348.592616][T14174] __should_failslab+0x121/0x190 [ 348.597557][T14174] ? proc_i_callback+0x30/0x30 [ 348.602332][T14174] should_failslab+0x9/0x14 [ 348.606847][T14174] kmem_cache_alloc+0x2b2/0x6f0 [ 348.611698][T14174] ? get_pid_task+0xc9/0x190 [ 348.616297][T14174] ? find_held_lock+0x35/0x130 [ 348.621087][T14174] ? proc_i_callback+0x30/0x30 [ 348.625860][T14174] proc_alloc_inode+0x1c/0x1a0 [ 348.630627][T14174] alloc_inode+0x66/0x190 [ 348.634966][T14174] new_inode_pseudo+0x19/0xf0 [ 348.639655][T14174] new_inode+0x1f/0x40 [ 348.643739][T14174] proc_pid_make_inode+0x22/0x230 19:55:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000f00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 348.648778][T14174] proc_pident_instantiate+0x82/0x2a0 [ 348.654166][T14174] proc_pident_lookup+0x1ad/0x210 [ 348.659208][T14174] proc_tgid_base_lookup+0x2c/0x40 [ 348.664327][T14174] __lookup_slow+0x27e/0x500 [ 348.668933][T14174] ? vfs_unlink+0x560/0x560 [ 348.673439][T14174] ? __d_lookup+0x433/0x760 [ 348.677979][T14174] lookup_slow+0x58/0x80 [ 348.682231][T14174] walk_component+0x74b/0x2000 [ 348.687001][T14174] ? refcount_dec_not_one+0x1f0/0x1f0 [ 348.687028][T14174] ? kasan_check_read+0x11/0x20 [ 348.687068][T14174] ? path_init+0x18f0/0x18f0 19:55:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 348.701849][T14174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.701868][T14174] ? security_inode_permission+0xd5/0x110 [ 348.701886][T14174] ? inode_permission+0xb4/0x570 [ 348.701905][T14174] link_path_walk.part.0+0x980/0x1340 [ 348.701929][T14174] ? walk_component+0x2000/0x2000 [ 348.701955][T14174] path_openat+0x202/0x46e0 [ 348.701971][T14174] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 348.701993][T14174] ? kasan_slab_alloc+0xf/0x20 [ 348.744238][T14174] ? kmem_cache_alloc+0x11a/0x6f0 [ 348.749268][T14174] ? getname_flags+0xd6/0x5b0 [ 348.753951][T14174] ? getname+0x1a/0x20 [ 348.758021][T14174] ? do_sys_open+0x2c9/0x5d0 [ 348.762633][T14174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.762650][T14174] ? debug_smp_processor_id+0x3c/0x280 [ 348.762668][T14174] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 348.762689][T14174] ? __lockdep_free_key_range+0x120/0x120 [ 348.762709][T14174] ? __alloc_fd+0x430/0x530 [ 348.762728][T14174] do_filp_open+0x1a1/0x280 [ 348.794462][T14174] ? may_open_dev+0x100/0x100 [ 348.799156][T14174] ? simple_attr_release+0x50/0x50 [ 348.804288][T14174] ? do_raw_spin_unlock+0x57/0x270 [ 348.809412][T14174] ? _raw_spin_unlock+0x2d/0x50 [ 348.814288][T14174] do_sys_open+0x3fe/0x5d0 [ 348.818721][T14174] ? filp_open+0x80/0x80 [ 348.822977][T14174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 348.828440][T14174] ? do_syscall_64+0x26/0x610 [ 348.833125][T14174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.839195][T14174] ? do_syscall_64+0x26/0x610 [ 348.843883][T14174] __x64_sys_open+0x7e/0xc0 19:55:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000001c00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 348.848400][T14174] do_syscall_64+0x103/0x610 [ 348.853002][T14174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.858916][T14174] RIP: 0033:0x412251 [ 348.862901][T14174] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 348.882424][T14194] serio: Serial port pts1 [ 348.882511][T14174] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 348.895216][T14174] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 348.895225][T14174] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 348.895234][T14174] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.895243][T14174] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 348.895252][T14174] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x500000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:10 executing program 5 (fault-call:0 fault-nth:7): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000006000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x8) dup2(r1, r0) [ 349.288017][T14229] FAULT_INJECTION: forcing a failure. [ 349.288017][T14229] name failslab, interval 1, probability 0, space 0, times 0 [ 349.317251][T14228] serio: Serial port pts1 [ 349.338686][T14229] CPU: 0 PID: 14229 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 349.346680][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.346687][T14229] Call Trace: [ 349.346715][T14229] dump_stack+0x172/0x1f0 [ 349.346739][T14229] should_fail.cold+0xa/0x15 [ 349.368976][T14229] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 349.374799][T14229] ? ___might_sleep+0x163/0x280 [ 349.379661][T14229] __should_failslab+0x121/0x190 [ 349.384605][T14229] should_failslab+0x9/0x14 19:55:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 349.389120][T14229] kmem_cache_alloc+0x2b2/0x6f0 [ 349.393979][T14229] ? perf_trace_lock+0xeb/0x510 [ 349.398848][T14229] __d_alloc+0x2e/0x8c0 [ 349.403058][T14229] d_alloc+0x4d/0x2b0 [ 349.407065][T14229] ? find_held_lock+0x35/0x130 [ 349.411839][T14229] d_alloc_parallel+0xf4/0x1bc0 [ 349.416712][T14229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.422968][T14229] ? kasan_check_read+0x11/0x20 [ 349.427838][T14229] ? __d_lookup_rcu+0x6c0/0x6c0 [ 349.432697][T14229] ? __d_lookup+0x433/0x760 19:55:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 349.437198][T14229] ? lookup_open+0x2c2/0x1b10 [ 349.441872][T14229] ? d_lookup+0xf9/0x260 [ 349.446120][T14229] ? lockdep_hardirqs_on+0x418/0x5d0 [ 349.451416][T14229] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 349.451429][T14229] ? d_lookup+0x19e/0x260 [ 349.451449][T14229] lookup_open+0x52a/0x1b10 [ 349.451472][T14229] ? vfs_link+0xbc0/0xbc0 [ 349.451514][T14229] path_openat+0x1eb4/0x46e0 [ 349.474905][T14229] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 349.480716][T14229] ? kasan_slab_alloc+0xf/0x20 19:55:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 349.485482][T14229] ? kmem_cache_alloc+0x11a/0x6f0 [ 349.490514][T14229] ? getname_flags+0xd6/0x5b0 [ 349.495194][T14229] ? getname+0x1a/0x20 [ 349.499264][T14229] ? do_sys_open+0x2c9/0x5d0 [ 349.503867][T14229] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 349.509247][T14229] ? __lockdep_free_key_range+0x120/0x120 [ 349.514978][T14229] ? __alloc_fd+0x430/0x530 [ 349.519493][T14229] do_filp_open+0x1a1/0x280 [ 349.524009][T14229] ? may_open_dev+0x100/0x100 [ 349.528725][T14229] ? simple_attr_release+0x50/0x50 [ 349.533849][T14229] ? do_raw_spin_unlock+0x57/0x270 19:55:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 349.539070][T14229] ? _raw_spin_unlock+0x2d/0x50 [ 349.543928][T14229] do_sys_open+0x3fe/0x5d0 [ 349.548349][T14229] ? filp_open+0x80/0x80 [ 349.552620][T14229] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 349.558113][T14229] ? do_syscall_64+0x26/0x610 [ 349.562812][T14229] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.568881][T14229] ? do_syscall_64+0x26/0x610 [ 349.573576][T14229] __x64_sys_open+0x7e/0xc0 [ 349.578091][T14229] do_syscall_64+0x103/0x610 [ 349.582705][T14229] entry_SYSCALL_64_after_hwframe+0x49/0xbe 19:55:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 349.588604][T14229] RIP: 0033:0x412251 [ 349.592508][T14229] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 349.612114][T14229] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 349.620533][T14229] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 349.628508][T14229] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 349.636487][T14229] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 349.644466][T14229] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 349.652439][T14229] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000f000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x9) dup2(r1, r0) 19:55:11 executing program 5 (fault-call:0 fault-nth:8): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x600000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 350.227107][T14266] FAULT_INJECTION: forcing a failure. [ 350.227107][T14266] name failslab, interval 1, probability 0, space 0, times 0 [ 350.247320][T14264] serio: Serial port pts1 [ 350.255595][T14266] CPU: 1 PID: 14266 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 350.263586][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.273673][T14266] Call Trace: 19:55:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 350.276977][T14266] dump_stack+0x172/0x1f0 [ 350.281322][T14266] should_fail.cold+0xa/0x15 [ 350.285932][T14266] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 350.291756][T14266] ? ___might_sleep+0x163/0x280 [ 350.291778][T14266] __should_failslab+0x121/0x190 [ 350.291794][T14266] ? proc_i_callback+0x30/0x30 [ 350.291813][T14266] should_failslab+0x9/0x14 [ 350.301579][T14266] kmem_cache_alloc+0x2b2/0x6f0 [ 350.301592][T14266] ? get_pid_task+0xc9/0x190 [ 350.301609][T14266] ? find_held_lock+0x35/0x130 [ 350.301626][T14266] ? proc_i_callback+0x30/0x30 [ 350.301641][T14266] proc_alloc_inode+0x1c/0x1a0 [ 350.301664][T14266] alloc_inode+0x66/0x190 [ 350.320317][T14266] new_inode_pseudo+0x19/0xf0 [ 350.320335][T14266] new_inode+0x1f/0x40 [ 350.320351][T14266] proc_pid_make_inode+0x22/0x230 [ 350.320372][T14266] proc_ns_instantiate+0x58/0x100 [ 350.347653][T14266] proc_ns_dir_lookup+0x1ac/0x210 [ 350.347674][T14266] ? proc_ns_instantiate+0x100/0x100 [ 350.347690][T14266] lookup_open+0x6d4/0x1b10 [ 350.347719][T14266] ? vfs_link+0xbc0/0xbc0 19:55:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 350.376867][T14266] path_openat+0x1eb4/0x46e0 [ 350.381469][T14266] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 350.381485][T14266] ? kasan_slab_alloc+0xf/0x20 [ 350.381500][T14266] ? kmem_cache_alloc+0x11a/0x6f0 [ 350.381513][T14266] ? getname_flags+0xd6/0x5b0 [ 350.381524][T14266] ? getname+0x1a/0x20 [ 350.381538][T14266] ? do_sys_open+0x2c9/0x5d0 [ 350.381572][T14266] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 350.392108][T14266] ? __lockdep_free_key_range+0x120/0x120 [ 350.392130][T14266] ? __alloc_fd+0x430/0x530 [ 350.392149][T14266] do_filp_open+0x1a1/0x280 [ 350.392167][T14266] ? may_open_dev+0x100/0x100 [ 350.401848][T14266] ? simple_attr_release+0x50/0x50 [ 350.410473][T14266] ? do_raw_spin_unlock+0x57/0x270 [ 350.410491][T14266] ? _raw_spin_unlock+0x2d/0x50 [ 350.410523][T14266] do_sys_open+0x3fe/0x5d0 [ 350.454668][T14266] ? filp_open+0x80/0x80 [ 350.458923][T14266] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 350.464417][T14266] ? do_syscall_64+0x26/0x610 [ 350.469103][T14266] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 19:55:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 350.475180][T14266] ? do_syscall_64+0x26/0x610 [ 350.479893][T14266] __x64_sys_open+0x7e/0xc0 [ 350.484404][T14266] do_syscall_64+0x103/0x610 [ 350.489004][T14266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.494907][T14266] RIP: 0033:0x412251 [ 350.494923][T14266] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 19:55:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000b01000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 350.494932][T14266] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 350.494946][T14266] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 350.494962][T14266] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 350.520513][T14266] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.520523][T14266] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 350.520532][T14266] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xf) dup2(r1, r0) 19:55:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x700000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 350.743912][T14294] serio: Serial port pts1 19:55:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000a000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:12 executing program 5 (fault-call:0 fault-nth:9): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x25) dup2(r1, r0) 19:55:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000010b000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), 0x0) [ 351.087378][T14324] serio: Serial port pts1 19:55:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 351.121219][T14330] FAULT_INJECTION: forcing a failure. [ 351.121219][T14330] name failslab, interval 1, probability 0, space 0, times 0 [ 351.143273][T14331] serio: Serial port pts2 [ 351.162979][T14330] CPU: 1 PID: 14330 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 351.170967][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.170974][T14330] Call Trace: [ 351.171000][T14330] dump_stack+0x172/0x1f0 [ 351.171026][T14330] should_fail.cold+0xa/0x15 [ 351.171061][T14330] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 351.171086][T14330] ? ___might_sleep+0x163/0x280 [ 351.171109][T14330] __should_failslab+0x121/0x190 [ 351.171127][T14330] should_failslab+0x9/0x14 [ 351.171144][T14330] kmem_cache_alloc+0x2b2/0x6f0 [ 351.171166][T14330] ? lock_downgrade+0x880/0x880 [ 351.171252][T14330] ? group_pin_kill+0x1c0/0x1c0 [ 351.171280][T14330] alloc_inode+0xb8/0x190 [ 351.204114][T14330] new_inode_pseudo+0x19/0xf0 [ 351.204137][T14330] __ns_get_path.isra.0+0x13c/0x7b0 [ 351.204158][T14330] ? group_pin_kill+0x1c0/0x1c0 [ 351.204175][T14330] ns_get_path_cb+0x42/0x90 [ 351.204194][T14330] ns_get_path+0x81/0xb0 [ 351.204217][T14330] ? ns_get_path_cb+0x90/0x90 [ 351.242297][T14330] ? do_raw_spin_unlock+0x57/0x270 [ 351.242316][T14330] ? _raw_spin_unlock+0x2d/0x50 19:55:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000e000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), 0x0) [ 351.242331][T14330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.242351][T14330] proc_ns_get_link+0x170/0x1b0 [ 351.251682][T14330] ? proc_ns_readlink+0x240/0x240 [ 351.251703][T14330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.251721][T14330] ? security_inode_follow_link+0xee/0x120 [ 351.251741][T14330] trailing_symlink+0x779/0x970 [ 351.251754][T14330] ? proc_ns_readlink+0x240/0x240 [ 351.251771][T14330] path_openat+0xa95/0x46e0 [ 351.251788][T14330] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 351.251809][T14330] ? kasan_slab_alloc+0xf/0x20 [ 351.323632][T14330] ? kmem_cache_alloc+0x11a/0x6f0 [ 351.328663][T14330] ? getname_flags+0xd6/0x5b0 [ 351.333339][T14330] ? getname+0x1a/0x20 [ 351.337414][T14330] ? do_sys_open+0x2c9/0x5d0 [ 351.342026][T14330] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 351.347421][T14330] ? __lockdep_free_key_range+0x120/0x120 [ 351.353149][T14330] ? __alloc_fd+0x430/0x530 [ 351.357676][T14330] do_filp_open+0x1a1/0x280 [ 351.362187][T14330] ? may_open_dev+0x100/0x100 [ 351.366882][T14330] ? do_raw_spin_unlock+0x57/0x270 [ 351.371999][T14330] ? _raw_spin_unlock+0x2d/0x50 [ 351.376884][T14330] do_sys_open+0x3fe/0x5d0 [ 351.381312][T14330] ? filp_open+0x80/0x80 [ 351.385575][T14330] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.391053][T14330] ? do_syscall_64+0x26/0x610 [ 351.395740][T14330] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.401811][T14330] ? do_syscall_64+0x26/0x610 [ 351.406497][T14330] __x64_sys_open+0x7e/0xc0 [ 351.411006][T14330] do_syscall_64+0x103/0x610 [ 351.415614][T14330] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.421504][T14330] RIP: 0033:0x412251 [ 351.421519][T14330] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 351.421528][T14330] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 351.421542][T14330] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 351.421556][T14330] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 351.421571][T14330] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.477333][T14330] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 351.485303][T14330] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x800000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), 0x0) 19:55:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000f000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x2f) dup2(r1, r0) 19:55:12 executing program 5 (fault-call:0 fault-nth:10): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) [ 351.629590][T14354] FAULT_INJECTION: forcing a failure. [ 351.629590][T14354] name failslab, interval 1, probability 0, space 0, times 0 [ 351.656876][T14356] serio: Serial port pts1 [ 351.674634][T14354] CPU: 0 PID: 14354 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 351.682627][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.692688][T14354] Call Trace: [ 351.695998][T14354] dump_stack+0x172/0x1f0 [ 351.700739][T14354] should_fail.cold+0xa/0x15 [ 351.705345][T14354] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 351.711166][T14354] ? ___might_sleep+0x163/0x280 [ 351.716025][T14354] __should_failslab+0x121/0x190 [ 351.720983][T14354] should_failslab+0x9/0x14 [ 351.725496][T14354] kmem_cache_alloc+0x2b2/0x6f0 [ 351.730459][T14354] ? ktime_get_coarse_real_ts64+0x1ba/0x2b0 [ 351.736370][T14354] __d_alloc+0x2e/0x8c0 [ 351.740542][T14354] d_alloc_pseudo+0x1e/0x30 [ 351.745078][T14354] __ns_get_path.isra.0+0x30f/0x7b0 [ 351.750288][T14354] ? group_pin_kill+0x1c0/0x1c0 [ 351.755147][T14354] ns_get_path_cb+0x42/0x90 [ 351.759658][T14354] ns_get_path+0x81/0xb0 [ 351.763907][T14354] ? ns_get_path_cb+0x90/0x90 [ 351.768592][T14354] ? do_raw_spin_unlock+0x57/0x270 [ 351.773709][T14354] ? _raw_spin_unlock+0x2d/0x50 [ 351.778560][T14354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.784810][T14354] proc_ns_get_link+0x170/0x1b0 [ 351.789660][T14354] ? proc_ns_readlink+0x240/0x240 [ 351.794697][T14354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.800943][T14354] ? security_inode_follow_link+0xee/0x120 [ 351.806762][T14354] trailing_symlink+0x779/0x970 [ 351.811612][T14354] ? proc_ns_readlink+0x240/0x240 [ 351.816643][T14354] path_openat+0xa95/0x46e0 [ 351.821152][T14354] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 19:55:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000001c000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000060000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 351.826959][T14354] ? kasan_slab_alloc+0xf/0x20 [ 351.831728][T14354] ? kmem_cache_alloc+0x11a/0x6f0 [ 351.836764][T14354] ? getname_flags+0xd6/0x5b0 [ 351.841458][T14354] ? getname+0x1a/0x20 [ 351.845537][T14354] ? do_sys_open+0x2c9/0x5d0 [ 351.850143][T14354] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 351.855525][T14354] ? __lockdep_free_key_range+0x120/0x120 [ 351.861259][T14354] ? __alloc_fd+0x430/0x530 [ 351.865775][T14354] do_filp_open+0x1a1/0x280 [ 351.870289][T14354] ? may_open_dev+0x100/0x100 [ 351.874994][T14354] ? do_raw_spin_unlock+0x57/0x270 [ 351.880112][T14354] ? _raw_spin_unlock+0x2d/0x50 [ 351.884995][T14354] do_sys_open+0x3fe/0x5d0 [ 351.889422][T14354] ? filp_open+0x80/0x80 [ 351.893684][T14354] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.899150][T14354] ? do_syscall_64+0x26/0x610 [ 351.903830][T14354] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.909905][T14354] ? do_syscall_64+0x26/0x610 [ 351.914597][T14354] __x64_sys_open+0x7e/0xc0 [ 351.919109][T14354] do_syscall_64+0x103/0x610 [ 351.923712][T14354] entry_SYSCALL_64_after_hwframe+0x49/0xbe 19:55:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000f0000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 351.929607][T14354] RIP: 0033:0x412251 [ 351.933512][T14354] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 351.953126][T14354] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 351.961548][T14354] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 351.969530][T14354] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 19:55:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 351.977509][T14354] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.977518][T14354] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 351.977526][T14354] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:13 executing program 5 (fault-call:0 fault-nth:11): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) [ 352.037927][T14372] serio: Serial port pts2 [ 352.165690][T14386] FAULT_INJECTION: forcing a failure. [ 352.165690][T14386] name failslab, interval 1, probability 0, space 0, times 0 [ 352.188967][T14386] CPU: 0 PID: 14386 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 352.196990][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.196998][T14386] Call Trace: [ 352.197027][T14386] dump_stack+0x172/0x1f0 [ 352.197068][T14386] should_fail.cold+0xa/0x15 [ 352.197092][T14386] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 352.219319][T14386] ? ___might_sleep+0x163/0x280 [ 352.219342][T14386] __should_failslab+0x121/0x190 [ 352.219359][T14386] should_failslab+0x9/0x14 [ 352.219380][T14386] kmem_cache_alloc+0x2b2/0x6f0 [ 352.244395][T14386] ? ktime_get_coarse_real_ts64+0x1ba/0x2b0 [ 352.250307][T14386] __d_alloc+0x2e/0x8c0 [ 352.254484][T14386] d_alloc_pseudo+0x1e/0x30 [ 352.258988][T14386] __ns_get_path.isra.0+0x30f/0x7b0 [ 352.264191][T14386] ? group_pin_kill+0x1c0/0x1c0 [ 352.269064][T14386] ns_get_path_cb+0x42/0x90 [ 352.273587][T14386] ns_get_path+0x81/0xb0 [ 352.277840][T14386] ? ns_get_path_cb+0x90/0x90 [ 352.282525][T14386] ? do_raw_spin_unlock+0x57/0x270 [ 352.287631][T14386] ? _raw_spin_unlock+0x2d/0x50 [ 352.292475][T14386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.298709][T14386] proc_ns_get_link+0x170/0x1b0 [ 352.303542][T14386] ? proc_ns_readlink+0x240/0x240 [ 352.308569][T14386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.314803][T14386] ? security_inode_follow_link+0xee/0x120 [ 352.320607][T14386] trailing_symlink+0x779/0x970 [ 352.325441][T14386] ? proc_ns_readlink+0x240/0x240 [ 352.330450][T14386] path_openat+0xa95/0x46e0 [ 352.334947][T14386] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 352.340746][T14386] ? kasan_slab_alloc+0xf/0x20 [ 352.345493][T14386] ? kmem_cache_alloc+0x11a/0x6f0 [ 352.350509][T14386] ? getname_flags+0xd6/0x5b0 [ 352.355196][T14386] ? getname+0x1a/0x20 [ 352.359261][T14386] ? do_sys_open+0x2c9/0x5d0 [ 352.363842][T14386] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 352.369199][T14386] ? __lockdep_free_key_range+0x120/0x120 [ 352.374915][T14386] ? __alloc_fd+0x430/0x530 [ 352.379413][T14386] do_filp_open+0x1a1/0x280 [ 352.383899][T14386] ? may_open_dev+0x100/0x100 [ 352.388569][T14386] ? do_raw_spin_unlock+0x57/0x270 [ 352.393677][T14386] ? _raw_spin_unlock+0x2d/0x50 [ 352.398533][T14386] do_sys_open+0x3fe/0x5d0 [ 352.402939][T14386] ? filp_open+0x80/0x80 [ 352.407168][T14386] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 352.412636][T14386] ? do_syscall_64+0x26/0x610 [ 352.417315][T14386] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.423379][T14386] ? do_syscall_64+0x26/0x610 [ 352.428059][T14386] __x64_sys_open+0x7e/0xc0 [ 352.432562][T14386] do_syscall_64+0x103/0x610 [ 352.437152][T14386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.443025][T14386] RIP: 0033:0x412251 [ 352.446914][T14386] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 352.466503][T14386] RSP: 002b:00007f015d5f5c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 352.474914][T14386] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 0000000000412251 [ 352.482906][T14386] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000004bcea3 [ 352.490861][T14386] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 352.498838][T14386] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f015d5f66d4 [ 352.506810][T14386] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 19:55:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x900000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000040030080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x63) dup2(r1, r0) 19:55:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:13 executing program 5 (fault-call:0 fault-nth:12): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) [ 352.639893][T14401] FAULT_INJECTION: forcing a failure. [ 352.639893][T14401] name failslab, interval 1, probability 0, space 0, times 0 [ 352.653855][T14399] serio: Serial port pts1 [ 352.704936][T14401] CPU: 0 PID: 14401 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 352.712960][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.723022][T14401] Call Trace: [ 352.726342][T14401] dump_stack+0x172/0x1f0 [ 352.730691][T14401] should_fail.cold+0xa/0x15 [ 352.735297][T14401] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 352.741121][T14401] ? ___might_sleep+0x163/0x280 [ 352.745982][T14401] __should_failslab+0x121/0x190 19:55:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x37f) dup2(r1, r0) 19:55:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000003400080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 352.750923][T14401] should_failslab+0x9/0x14 [ 352.755437][T14401] kmem_cache_alloc+0x2b2/0x6f0 [ 352.760302][T14401] ? ksys_dup3+0x3e0/0x3e0 [ 352.764737][T14401] create_new_namespaces+0x34/0x7b0 [ 352.769956][T14401] __x64_sys_setns+0x1f8/0x350 [ 352.774736][T14401] do_syscall_64+0x103/0x610 [ 352.779340][T14401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.785241][T14401] RIP: 0033:0x45adc7 [ 352.789143][T14401] Code: 00 66 90 b8 10 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 8d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.808758][T14401] RSP: 002b:00007f015d5f5c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 352.817184][T14401] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045adc7 [ 352.825167][T14401] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00000000000000ef [ 352.833145][T14401] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 352.841133][T14401] R10: 0000000000000064 R11: 0000000000000246 R12: 00007f015d5f66d4 [ 352.849119][T14401] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 [ 352.858832][T14414] serio: Serial port pts1 19:55:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000fffff00080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x395) dup2(r1, r0) 19:55:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:14 executing program 5 (fault-call:0 fault-nth:13): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xa00000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000180000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 353.513641][T14445] FAULT_INJECTION: forcing a failure. [ 353.513641][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 353.547399][T14445] CPU: 0 PID: 14445 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 19:55:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), 0x0) [ 353.555416][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.565469][T14445] Call Trace: [ 353.568773][T14445] dump_stack+0x172/0x1f0 [ 353.573122][T14445] should_fail.cold+0xa/0x15 [ 353.577733][T14445] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 353.583551][T14445] ? ___might_sleep+0x163/0x280 [ 353.583574][T14445] __should_failslab+0x121/0x190 [ 353.583596][T14445] ? sock_destroy_inode+0x60/0x60 [ 353.593359][T14445] should_failslab+0x9/0x14 [ 353.593376][T14445] kmem_cache_alloc+0x2b2/0x6f0 [ 353.593396][T14445] ? __might_sleep+0x95/0x190 19:55:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), 0x0) [ 353.612395][T14445] ? sock_destroy_inode+0x60/0x60 [ 353.617428][T14445] sock_alloc_inode+0x1d/0x260 [ 353.622203][T14445] alloc_inode+0x66/0x190 [ 353.626539][T14445] new_inode_pseudo+0x19/0xf0 [ 353.631221][T14445] sock_alloc+0x41/0x270 [ 353.635474][T14445] __sock_create+0xc0/0x750 [ 353.639985][T14445] ? lock_downgrade+0x880/0x880 [ 353.644850][T14445] __sys_socket+0x103/0x220 [ 353.649368][T14445] ? move_addr_to_kernel+0x80/0x80 [ 353.654490][T14445] ? trace_hardirqs_on_thunk+0x1a/0x1c 19:55:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), 0x0) [ 353.659960][T14445] ? do_syscall_64+0x26/0x610 [ 353.664647][T14445] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.670713][T14445] ? do_syscall_64+0x26/0x610 [ 353.675403][T14445] __x64_sys_socket+0x73/0xb0 [ 353.679601][T14448] serio: Serial port pts1 [ 353.680089][T14445] do_syscall_64+0x103/0x610 [ 353.680118][T14445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.680131][T14445] RIP: 0033:0x4582b9 [ 353.680151][T14445] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.689035][T14445] RSP: 002b:00007f015d5f5c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 353.689063][T14445] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004582b9 [ 353.689072][T14445] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 000000000000001f [ 353.689087][T14445] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 353.718741][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f015d5f66d4 19:55:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 353.718751][T14445] R13: 00000000004c69c0 R14: 00000000004dc380 R15: 0000000000000003 [ 353.739246][T14445] socket: no more sockets 19:55:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000280000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 353.816212][T14460] serio: Serial port pts2 19:55:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x3b7) dup2(r1, r0) 19:55:15 executing program 5 (fault-call:0 fault-nth:14): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000e00000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 354.074319][T14481] serio: Serial port pts1 19:55:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xb00000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:15 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000480000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:15 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x7ffffff2) dup2(r1, r0) 19:55:15 executing program 5: syz_init_net_socket$bt_l2cap(0xffffffffffffffff, 0x0, 0x2) 19:55:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000a80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x7ffffff8) dup2(r1, r0) 19:55:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:15 executing program 5: syz_init_net_socket$bt_l2cap(0xffffffffffffffff, 0x0, 0x2) 19:55:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xc00000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x7ffffff9) dup2(r1, r0) 19:55:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000010b80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:16 executing program 5: syz_init_net_socket$bt_l2cap(0xffffffffffffffff, 0x0, 0x2) 19:55:16 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x2) 19:55:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff888085942818) dup2(r1, r0) 19:55:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000e80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:16 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) 19:55:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xd00000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff8880903fcab8) dup2(r1, r0) 19:55:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000f80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet(0x2, 0x4, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x18) r2 = dup(r0) r3 = msgget$private(0x0, 0x200) msgrcv(r3, &(0x7f0000000140)={0x0, ""/17}, 0x19, 0x0, 0x2000) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x2) 19:55:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) 19:55:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000001c80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff8880937453b8) dup2(r1, r0) 19:55:17 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xa, 0x2) 19:55:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x27, 0x2) 19:55:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000006080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff888093745738) dup2(r1, r0) 19:55:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xe00000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:18 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000ffffff9e80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x6, &(0x7f0000000440)=[{&(0x7f0000000200)="501e110ab8049597eb0860801343d36809b56cac6d45bc8a0060bbfad8615486e8ab0247b447e5e98e26459183e4196a980ca887dd96d83bd2ef935365308a24f24bbe2aa8b845ebfc8813", 0x4b, 0x8}, {&(0x7f0000000280)="7621f4a585", 0x5, 0x9}, {&(0x7f00000002c0)="de2af03e54f8e33a6d93306343ceee1cfa4c65b604123e9aad46fa59caa09f6b2bca4a9b633711537cdaccabbe15f695475d2ecb603953cf681503179816e573a0938e0cd52b8faa7bd3979d775e6b5070b876faf772bb7ebb39341f977c4202b9fad38727242c0064950628b23494bab0f44aca85e0", 0x76, 0x2}, {&(0x7f0000000340)="4c22f19b1cf8681398cd8db012840c0dfd4f845bfe501ec1109891abb0a18294a9f46c1c2458ca6e0c4d6bff8d9d106fd79b24959e9c58477cfc13698d0e3c31562307963004e6476ef1379e7a44477a73c29aed09788c39", 0x58, 0x3}, {&(0x7f00000003c0)="3b682474cc175fd6e029c7acd8184a8b218f", 0x12, 0x3}, {&(0x7f0000000400)="38a9c7d71d7febef13833b70ee5d7f2d8d9c5bbaef6708a2a1", 0x19, 0x10001}], 0x0, &(0x7f0000000500)='em1proc$}\\O:proc\x00') r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff8880938dc2d8) dup2(r1, r0) 19:55:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2f, 0x2) 19:55:18 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000fffffff080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x48, 0x2) 19:55:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff8880938dc578) dup2(r1, r0) 19:55:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000100)="0ae8cae55800228d850e73927500000000702acfe9f861d78fb83c74f1cc4bcb758473ea11ae078db7e63d6a8bbe5af73ca821cd6764cdd899ee4a87265dd1ac7d3d274a7401382ed672c1ae96944c0b81ed91c6ebe4ddd039183bf36fa5a7a93d563b03c656553c00000000000000") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4c, 0x2) 19:55:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xf00000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:19 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000f0ffff80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff888094944038) dup2(r1, r0) 19:55:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fff, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty}, 0x8) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:19 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x68, 0x2) 19:55:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x1c31cf232717d1f4) linkat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1000) 19:55:19 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:19 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6c, 0x2) 19:55:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0xffff888094944818) dup2(r1, r0) 19:55:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000009effffff80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:19 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x74, 0x2) 19:55:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x1000000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000f0ffffff80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10001, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) socket$inet_smc(0x2b, 0x1, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8480, 0x73f1efe105e1c6f9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffffffffffffff9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={r3, @in={{0x2, 0x4e21, @loopback}}, [0xffffffff, 0xe0e0, 0x7, 0xffffffffffffffe0, 0x292, 0x6, 0x4, 0x0, 0x7, 0x6, 0xffffffffffff0e66, 0x400, 0x1, 0x0, 0x2]}, &(0x7f0000000380)=0x100) dup2(r1, r0) 19:55:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:20 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7a, 0x2) 19:55:20 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xc0, 0x2) 19:55:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 359.016886][T14740] serio: Serial port pts1 19:55:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000007000000000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pread64(r0, &(0x7f0000000100)=""/66, 0x42, 0x0) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000002000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x3e8) 19:55:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x2000000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:20 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xe0, 0x2) 19:55:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x5510ef91ab818611, @loopback, 0x4e21, 0x0, 'fo\x00', 0x8, 0x2, 0x11}, 0x2c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000004000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:20 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xf0, 0x2) [ 359.892059][T14784] serio: Serial port pts1 19:55:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0x48a5bf26}, &(0x7f0000000180)=0x8) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000a000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:21 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x300, 0x2) 19:55:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 360.654656][T14791] serio: Serial port pts2 19:55:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x3000000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:21 executing program 4: ustat(0x7, &(0x7f00000003c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x5, 0xe1d, 0x2, 0x80]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x8) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000b82000)={0xc}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r5, &(0x7f0000000300)=[{}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x1}}, [0x1, 0x2, 0x9, 0x7b5, 0x2, 0x451, 0x6, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x1, 0x1000, 0x0, 0x1f]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000740)={r6, @in6={{0xa, 0x4e21, 0x80000001, @mcast1, 0x7}}}, 0x84) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x152}}], 0xfffffffffffffdab, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x0, 0x100000001, 0x17}) clone(0x4, &(0x7f0000000540)="e79ce355818f23141e63941d8e758ab176d66f0900259fbefdf71efcf6d0c34eac82bea04f920145ae9c2743128ddf0fcb01f5430d82e14498c54800bde007f8c5867ae6f22e3f9c752acb79c711e6d007858ad3b45a8590acdf5287db8f314e80d4f26797ea0f89c15d588c8a17d1b85e5adf3fbd789004a6b74d667bfb6c5fcf5e28a906da2026f0999128bbf09d0fcf19f98916b3eebf0000007b75352e680a59890f0b2866d6a75c00e1ec7096174ee60ee50ade22ff15eda9c40181b30cfdee2a33e18821b11ff82a0764b8ac23b748564b9cc9d4b77142d6dcea1c5f65c44228a34fe77a0e9767f563bdd86230113f82aed3", &(0x7f0000000500), &(0x7f00000002c0), &(0x7f0000000300)="a7862388f9aca7b0727230aa842123c348d201512f445889566ff8e81475a62058bc0270053bafc02e259a8b21d0afae716571fa3d57e222d63cc6a40326384419be9b9d5bdbfe5da5e4bf9bfd7b847591f3b998e68fd28fb502c48c68ec320afc3d87c48acebc1d7d53b92d3191756115857ec7b3684d6a2538d00e0f4b9f5e55a45702ae1f7e59454818601c90314962b6") syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000e000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:21 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x500, 0x2) 19:55:21 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xa00, 0x2) 19:55:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 360.818293][T14834] serio: Serial port pts1 19:55:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000f000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpid() tgkill(r1, r2, 0x19) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) dup2(r3, r0) 19:55:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:22 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1f00, 0x2) 19:55:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x3f00000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x3, @mcast2, 0xfa4}, r2}}, 0x30) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x8018800, &(0x7f0000000100)="ba1d6dd2736b623c4cb4cbbaaec3773d8e9265d58dc1d43b49cfac01a69c3b85329a9b2ee30c79f3831fc4bd74e7ebdf034fa0143dd239cb87991bfaa8e4181ee520c9d166a1c090de221aa64f4c82e0ad385e2b098212144e536455d26398c911cfcae312295ebf0778a13a493e8e498440b644e4346e1398ac07a2e03bed151baa2585e3f01488", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="b81d762054dad51ab5df797358e72df5ae036f69684aaa4508bbfb425f8dffd716dec57e3081612508688c5842bbec604cd1") r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000001c000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:22 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2000, 0x2) 19:55:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8, 0xc41) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) fchmod(r2, 0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:22 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2700, 0x2) [ 361.597064][T14872] serio: Serial port pts1 19:55:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000060000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0xaa00) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x1000, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:22 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2f00, 0x2) [ 361.842216][T14899] serio: Serial port pts1 19:55:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x4000000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000f0000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000240)=""/91) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:23 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x416d, 0x2) 19:55:23 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x10080, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:23 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4800, 0x2) 19:55:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000b010080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/236, 0xec}], 0x10000000000000d9) dup2(r1, r0) 19:55:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept$inet(r0, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x9b8, 0x31, 0x8, 0x2, 0x6000000000000000}, 0x14) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0xbe}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 19:55:23 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4c00, 0x2) 19:55:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) r2 = dup(r1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={r2, 0x10, &(0x7f0000001180)={&(0x7f0000000180)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={r2, 0x10, &(0x7f0000001200)={&(0x7f0000000100)=""/79, 0x4f, r3}}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000a0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x80000020) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000000)={0x7fffffff, 0x8, 0x5b, 0x1, 0x2, 0x74d, 0x3}) 19:55:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x6000000000000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:24 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6800, 0x2) 19:55:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000010b0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 363.376376][T14967] serio: Serial port pts1 19:55:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="74c0bb1a4e0230b43f8e29c780f2c2b4d9ced05990f9d0ed4da239a3e335f65b283eb0cd786247da039f34242f283515aa49e07a9cda698461e84978bf2dbaf3b0436c2062cd8a326247435659c0cf42d084d253b11911e3818dab7dbb691919571787f93a0424d514feb6995730b475aee9c538fb5186bf617b5d41acd8095c77b589c0330512c547e6d03aeece95fa4565073d36d831781c5a91e72b8fdd512dc8f4c7cf78b8f9628349ea7be7396cf1f244ddaf2f8829ac5fe01bc7234dd3f86192c0bf", 0xc5}, {&(0x7f0000000200)="848210a8b99a6b1c26b24e73e41e45524078100030e42a292a5c5dbb335d7fc8780902db8ae61aad5d4b97d4597e761032735462d2d837839139968e9096b4d587aaf1db97bffe9da1590fbd4749c352145bab200673c8833ccccdbd63f9a1c2df4e9e699a50979905e64a8698662519a85d54dfd8f38e28531884b4a7aef9857653adf0fc2441a13e9150461446c38b1aed9aecc072d8a9235c32e8bb7c23d56982", 0xa2}, {&(0x7f0000000000)="fe49ad", 0x3}, {&(0x7f00000002c0)="ed22b0f97984bd3a86eb790c22d7a0cb8134ad3f04a59eefd630e6da88515a", 0x1f}], 0x4, 0x1) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:24 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6c00, 0x2) 19:55:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x800, 0x1}, &(0x7f0000000280)=0x100000001, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x92a9}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r0) 19:55:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000e0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 363.594494][T14990] serio: Serial port pts1 19:55:24 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6d41, 0x2) 19:55:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffd, 0x3) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'io'}, {0x2b, 'cpu'}]}, 0x9) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xf0ffffff00000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x84002, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000100)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:25 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7400, 0x2) 19:55:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000f0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x800) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x20) r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x80000) r6 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x80000001, 0x402000) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0xa00, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000280)={0x0, 0x7, [{r0, 0x0, 0xfffffffff0008000, 0x1fffff000}, {r2, 0x0, 0x100008000, 0xfffff000}, {r3, 0x0, 0x1000000, 0xfffffffff0000000}, {r4, 0x0, 0x18000, 0xfffffffffffff000}, {r5, 0x0, 0xfffffffff0008000, 0xfffffffffffff000}, {r6, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}, {r7, 0x0, 0x1008000, 0x1000}]}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000001c0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 364.286039][T15027] serio: Serial port pts1 19:55:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:25 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7a00, 0x2) 19:55:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000090e, &(0x7f0000000100)="0adc1f123cedef16ae03ebdab07000"/26) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = fcntl$getown(r1, 0x9) prlimit64(r3, 0x6, &(0x7f0000000000)={0x5, 0x8783}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 364.537794][T15050] serio: Serial port pts1 19:55:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xf6ffffff00000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000600080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:26 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xc000, 0x2) 19:55:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @pic={0xff, 0x3f, 0x33c00, 0x5, 0x7ff, 0x1, 0x5, 0x890, 0x6, 0x252a692b, 0x100, 0x2, 0xfffffffffffffffb, 0x9, 0x9, 0x3ff}}) 19:55:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl(r1, 0x1, &(0x7f0000000100)="c34901904bbe26f345bce1e4c5f3ca97418a9c993576fe8403165ea9cdcaa217b53718b8e3fe4285acb7197a14e85af26a5feeb6573a93c5ab5e090b29e309aae1f6e198d5a7f7fe43f038a81036f59bfc61bb48b55e5193084ee63cce752c8b0f71b7f3e80c97105ec664bc8fa706637e45b01abb844e48bf170cc0f278925f59364045fe7583335a6d98ba5d3d49e2cff06cc2155523a9f39adf13d3458d181c1d04903355fcdc2b7b647ac15bd79526334c2311c59a377bfe02284c8d02aaa9436163e9a7e9eb221eb4b5231d5a443cf35f77b10525022acdfacec1499b2a1df5287daa3f2153") r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$int_in(r2, 0x5421, 0xfffffffffffffffe) 19:55:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 365.146227][T15071] serio: Serial port pts1 19:55:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000f00080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) write$vnet(r2, &(0x7f0000001180)={0x1, {&(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/165, 0x1}}, 0x68) accept4$unix(r2, &(0x7f0000001200), &(0x7f0000001280)=0x6e, 0x80000) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0x3) 19:55:26 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xe0ff, 0x2) 19:55:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000240)) 19:55:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xffefffffff7f0000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000020080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:27 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xf000, 0x2) 19:55:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2000, 0x0) 19:55:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:27 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xffe0, 0x2) 19:55:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000040080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000140)={r3}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x100000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={r4, 0x7b53}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="642ed09af788241494bf0761927e00499486ec004cc1238ad6396882c64e0c5e7874fdc62761017f29945168e540ced2b7652a1a937a075820a623f3be5d30351758a623912feb1da9190dd9c5aaf30b3608abd175b002218d31e83212975c351fef6e2d14e701e88b8b3555301a43f9a4b9a1087dfd356680a053068298a0b6fe144e66c8113b2286a0a5989900033ac3dd5ce9171c8488fc661d157f6a179612acc68b245c2954ec2d9b03f59490d9e4fe4fbd0232e3754db5c686b47a117dcd892bc8b0653bd0b4c69e92834c7b022ff0bd6e916bf1b8526df23e1c6078a8b5a6161b9d34b50ad0285f3a48fa69b7788fef", @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf2501000000000000000741000000140018000000627564703a73797a3200000000"], 0x30}}, 0x80) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x400000000002) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101100, 0x0) sendto$netrom(r3, &(0x7f0000000240)="2890893cf1079b25cdf67167db86954dd6adf95310821c9b21e70f069e69c116d308985b11324c3f7ca68abb31ae14f8a6fe9789af59cefde11d1dbca67ee5c4ca24c9283a7d89e0073b5fa433a6df3f29a41f1698b53b21d16251bb7eaa70551acbca31dd7aa91e00ff094addc1aec9e1eccfc1bafa34274894f87281f82f4644e564b53f2b1732d5c05ab665a0", 0x8e, 0x40, &(0x7f0000000300)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null]}, 0x48) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r2) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 19:55:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:27 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xf0ffff, 0x2) [ 366.356613][T15143] serio: Serial port pts1 19:55:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xffffffff00000000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000a0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x69, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000180)="b1cd75a401a4048863d7b2d4c6fc575abb14e4a512f1417cfdb99bd468e899e2bbee6d7d02cb1c707572b11ced4fcd4cbc50c69efdf112b235e1f2f34bfa7fb6dc2b70c13e863950e0f5cbb0acb836d084bc8a02ff10ee4ec2fe3bd4150807434f9912ece78f1635fba6622e0ac38a99befc235247de3e1395705bd41b6f0a89022280715b254e00c35d21097758d0515ed7bc10d28fa54558d269465878136e52c7a43ae26da8a24f1165d62c4c499c1a6e25b2edf743220b0b4848206884b697a678ced109804c83b826ebf0e84c30621824c7891041dab5cd22", 0xdb, 0x5}, {&(0x7f0000000280)="8fb6bccf9ad578cbce490a61c8bca45b6c3fb6dd859c27eb024c8b9639f6b1b3fdc4f62ae762915cb4055924a59cd92751a8ff6e3dbfe6a12094a4b6681a7011388d98acd1544f4247b3f185ed291611eb49a87e2f9632d14a4642209cf15e81eafd1afbf33bfec3e49d9c8f5ce2a084145ce35c", 0x74, 0x3}, {&(0x7f0000000300)="a018ad8189e28d2ccc0abd0f0b9a66f20b3185ee8fbb664f08825a744e924e94c1de169164b9bf3faacfca64bf98e113989dc5925f7cd9e001f30b5fd7e2fbfd43166c7fd3f8a96045e290a76a7c0db6806224613f82036a080ee0ab2b499489b9da3bce27e4eda038d59ae5e8a832e2335d3054cab0b0e36aa697aca46c35bab2fb64c67ea5f88be9a31f7964e4107ad1941c767a53e700b551e1983743e47aee97389fd19cac695ed3a7897da10be38bd6a5dbbad9a83b3684bd7fd26ba670f1b116c9a36d71b13014d4ec4ea135a42dc57f5892c5b941315528f70c3d36c5ba413cff466a026a891673931a", 0xed, 0xfffffffffffffc01}, {&(0x7f0000000400)="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", 0xfd, 0x80000000}, {&(0x7f0000000500)="6769310916c87e9e9eae27c01e2c3412a91cf7a68f443501be29843ea7cb3fe7ba77cc735f6be5fbf3c7a050c2974bbe5ed2883cb605fe5fa4b53c6103abc9176cad9f39536d1d50561db2a58d5bc891f44f733874eeff055e05179a0ac5d15139752fcce295230b9602c3c40ca3b02948319d4743b2417ada7c7214dbb157195bed153629e5fdf0b1b8d69caab02aa322d05c40b24f", 0x96, 0xccb}, {&(0x7f00000005c0)="c9ab28a3f8832d342cefbd6ac1d6666ef161bdebb2a127661e1f3e638903cc3b9197290bff59d98cb324c2794766c75b04a8f5d0989738fd046c1559532fabe2dc770d8a22e992d4e7f6e02512842e8720cc6e418b750547d04938dabd9f0537aad0362fc716b73318ef7fb397afbaffa14af507aff2835846dae5ab7e9efe9fb81a0ea9bd59e8a2726f5998129419e01d5ea492f2b8feabb435f9f679baa488f4238cc979b54b68610f3e52d497c6a7b23bccb605f347d64e2fd94d7ceb008b64f542de462404281b5fedfc38d0eba46744bb2aa1a5fb52", 0xd8, 0x1}], 0x40, &(0x7f0000000780)='&\feth0wlan0%-\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1000000, 0x2) 19:55:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2000000, 0x2) 19:55:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000e0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 367.129027][T15180] serio: Serial port pts2 19:55:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3000000, 0x2) 19:55:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000240)={0x21, 0x80000002, 0x7ff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x4}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000100)=""/42, 0x2a}], 0x5) dup2(r2, r1) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x100, 0x0) 19:55:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000600)=0x4, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x5, 0x7, 0xfff, 0x8, 'syz1\x00', 0x8}, 0x1, [0x1, 0x8, 0x56a06478, 0x5, 0x80, 0x3f, 0x5b0, 0x9, 0x7222abf0, 0x6, 0x0, 0x2, 0xea, 0x28363502, 0x7ff, 0x401, 0x5, 0x6, 0x58a, 0x7f, 0x5, 0x100, 0x0, 0x9, 0x2, 0x400, 0x2, 0x80000000, 0x5, 0xec, 0x4, 0x0, 0x1, 0x800, 0x474a, 0x5775, 0x3, 0x1, 0x1, 0x876f, 0x1, 0x100, 0x80, 0x80, 0x7, 0x0, 0x1, 0x7, 0x7, 0x0, 0x6, 0x4000000, 0xffffffffffffffe1, 0x2, 0x70d9, 0x3, 0x97a, 0x3, 0x100, 0x7fff, 0xffffffffffffff01, 0x0, 0x3, 0x8, 0x101, 0xffffffffffffff26, 0x10001, 0x1, 0x0, 0x9, 0x100000000, 0x2, 0x8, 0x22, 0x80000001, 0xfffffffffffffbff, 0x7, 0x4, 0x2, 0x3ff, 0x7, 0x40000000000, 0x80000000, 0x8, 0xfffffffffffffffe, 0x2, 0x71, 0x8, 0x100000000, 0xfffffffffffffff8, 0xe21, 0x82, 0x2ca, 0x8, 0x5, 0x1, 0x40e000000, 0x6, 0xfff, 0xdc, 0x1, 0x9, 0x1, 0x100000001, 0x9, 0x7fffffff, 0x400, 0x4, 0x8000, 0x2, 0x100000001, 0x48b7, 0x0, 0x0, 0x8001, 0x100000001, 0x9, 0x7fff, 0x200, 0x6, 0x100000000, 0x12d, 0x2, 0x6, 0xfffffffffffffffe, 0x2, 0x8000, 0x4]}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x20003, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4000000, 0x2) [ 367.417626][T15201] serio: Serial port pts1 [ 367.480523][T15201] serio: Serial port pts2 19:55:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0xffffffffff600000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000f0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x301200) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x8, 0x2, 0xfffffffffffffbff, 0x4, 0x100000000}, 0x14) 19:55:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5000000, 0x2) 19:55:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x40, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x128, r3, 0x208, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0xc9dcf7696a8acb7a) [ 367.929463][T15217] serio: Serial port pts1 19:55:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:29 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xa000000, 0x2) 19:55:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x720, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80f9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8050) 19:55:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000001c0080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000100)) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {&(0x7f0000000540)=""/4096, 0x1000}, &(0x7f0000000240), 0x10}, 0xa0) dup2(r1, r0) 19:55:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000600080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 368.253780][T15250] serio: Serial port pts1 19:55:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) 19:55:29 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1f000000, 0x2) 19:55:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000000)=""/30, &(0x7f0000000100)=0x1e) 19:55:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000f00080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x46, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x5, "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", 0xbb, 0x8, 0xffffffff, 0x100000001, 0x80, 0xffffffff, 0x1, 0x1}, r2}}, 0x128) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r0) 19:55:30 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x20000000, 0x2) 19:55:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000b0180000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) 19:55:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x62, &(0x7f0000ffe000/0x2000)=nil, 0x1}) 19:55:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x10000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xd08a, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/237, &(0x7f0000000380)=0xed) 19:55:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) [ 369.133654][T15296] serio: Serial port pts1 19:55:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x3) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:30 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x27000000, 0x2) 19:55:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000a80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:30 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000000)='veth1_to_bond\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000f00080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:30 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2f000000, 0x2) [ 369.873687][T15315] serio: Serial port pts1 19:55:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000010b80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:31 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x20000) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 369.961170][T15324] serio: Serial port pts2 19:55:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x1, 0x3ff, 0x9, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x0, 0x4, 0x6, 0x5, 0x2}, &(0x7f0000000280)=0x14) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r3 = dup2(r1, r0) recvmmsg(r3, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/2, 0x2}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/35, 0x23}, {&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/69, 0x45}, {&(0x7f0000000740)=""/71, 0x47}], 0x5}, 0x1}], 0x2, 0x0, &(0x7f00000008c0)={0x77359400}) 19:55:31 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x48000000, 0x2) [ 370.204232][T15348] serio: Serial port pts1 19:55:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x4) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000e80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x80) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000100)=""/230, 0xe6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)={0x4, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1, 0x7, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x410) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in=@loopback}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) r3 = dup(r2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socketpair(0x9, 0x6, 0xfffffffffffffc00, &(0x7f0000000380)) 19:55:31 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4c000000, 0x2) 19:55:31 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000440)=[@dead_binder_done={0x40086310, 0x3}, @decrefs={0x40046307, 0x3}], 0x2a, 0x0, &(0x7f0000000480)="388ea884e0dd0fa448570b40284aca565f25a474ff1a21ce05518539417f8725d6910f5a6dc3c10d74ef"}) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) inotify_init1(0x80000) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x334, r4, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x160, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @rand_addr="71a002455bb3578441343e65bff850b4", 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x785202ad}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffeff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa00000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd48b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) sendto$isdn(r3, &(0x7f0000000240)={0xfff, 0x52713c9c, "6d5142349b99c3668e207750ee44689f7cb0cd15d8b26afc9f5a13e0cdec3094d63893c522c468efcd2368e9ba815f897d899e25fe115976717d8c9e5ea59e643d74d1b8d1068e67fd738a197d1ed40a541611d41668c62f4c1a2ec91431282854ae28a4c7d605ca5d7870a48388b9f80848405bfc8782cf7de53c4b7086e3432336386e8b90eea45a5032331c7f3abaede41b8a62bbc2d409cfec7b6350522dde6948fffa7fdeb6d7c6c5b0806240bd90626b1641b8d655"}, 0xc0, 0x4000000, &(0x7f0000000100)={0x22, 0x9, 0x8001, 0x9, 0x5}, 0x6) dup2(r2, r1) 19:55:31 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x68000000, 0x2) [ 370.818739][T15369] serio: Serial port pts1 19:55:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x2, 0x0, &(0x7f00000000c0)) 19:55:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000f80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 370.881841][T15378] serio: Serial port pts2 19:55:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x20080) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000200)={0xae, 0x8, 0x855, 0x2}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYPTR64], @ANYRES32=r0, @ANYRES32=r0], @ANYBLOB="4ffea2eca4bc751a57c66fc026000000dcadb2c7fe497e8cc4f1f41ba624b21ab9e441ca4d75adc175b72109cd403fc702bc0c17a0aaaf80d8bb75606ba459f68f60bc81e29b9ee1"], &(0x7f0000000140)=0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x40, 0x0, 0x100000001, 0x7}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x68) dup2(r1, r0) 19:55:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000001c80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 371.142530][T15403] serio: Serial port pts1 [ 371.196090][T15409] serio: Serial port pts2 19:55:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="000402000000000000b0c924c570aae2c72987aae8180d932738568e66545652248233bb8514dbc6dd042790716a12ad99cf2d66bd4551936bd98f39b81ee5896f01ffc34e7c685bdf8471b54e7442b21c0f342a418bb8711b0a8f54d8da11a2039bcb726369fee1aa567ef0139082ff69d85407a8ee96adf099318119f8cc43d437750db8b5aae8e79e656d6875b0daa28d75814efae4fb18ae41b6d11e5a9259a3953ca4ff4919ff22ec238842e0961d0d3698d3ff3faa33d4938ed936") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000001, 0x3) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x3d5) 19:55:32 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6c000000, 0x2) 19:55:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x4, 0x0, &(0x7f00000000c0)) 19:55:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000006080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000780)={0x4, @sdr={0x3633565e, 0x80}}) r3 = dup2(r1, r1) getsockname$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="010109eaff000000badd387dcafecd7665fa0cbee29dc7019d0eaa4f231f55ead741b9e1ef56c0fa7a3e7d0ae7874e3db9eb017b887febaae5313dbccf4d63698307b8682c8ccea2667bcd4a4ec190c4d00dc11898c76def4ec778b2b7b7416ce31aef0718db7be32f5dd6154ad0c327968c4c81771006fd2f441b1b18c8d3e7a1e16cfd31123946a606e43665562513c86586a9036114e8fed6f6a54b44274c667f2dcdbf12b397aecd40f9a79a13d07a380dbed333634883de3ddcd711481198eb6dcb6bac624cb4367f6037a696b20bc6f6e81683316687730f2b78cbeaf92b7bcb4c25d981130384c05788085fdd00abb4cc26270ca631a54076e89a2326e665e42b5b861054e1b3249a9504d0292494e579de3c904fca5b62b1934126c6e6c85a9f4110599a6b8ea98936706d17be4f1bd2799b25a16c33167efc6259963826f33e0ae24f6701010000000000009c29a7e2979f75288e3e4c8c412ab0a5b0d5894533fdf6a6d84ef0b7ffc70d8d873ba54da5ec69b89aa70917db19cb9ccc7224ea2b00"/402], &(0x7f0000000280)=0xe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x8000000000000, @mcast1, 0x100}}, [0x1, 0x84ed, 0x9, 0x6, 0x1, 0xffffffff, 0xedf, 0x8, 0x8000, 0x7, 0x3f, 0x4, 0x0, 0x7b0, 0x9]}, &(0x7f0000000440)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000480)={r5, 0x10001}, 0x8) connect$unix(r3, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000240)={0x1, 0x8001}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x4052, 0x8}, &(0x7f0000000300)=0xc) 19:55:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa8000000000000f080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:32 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6d410000, 0x2) [ 371.717189][T15424] serio: Serial port pts1 19:55:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x3) 19:55:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000280000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:33 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x74000000, 0x2) 19:55:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x6) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x300) 19:55:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:33 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7a000000, 0x2) 19:55:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000480000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x16, 0x2}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000440)={0x8, 0x8, 0x1, 0x0, 0x19, 0x1ff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, 0x0, "0e2de93b90be65236ee299118bdd45f65d3a4a05e959e651b1a2720f07f1feae8bed53c2eeb33c5c2fd69870ab961487e669b7799bf4f771e55658d73f4d05c67988b62ecd90974eead764d8653f824e"}, 0xd8) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0xa00, 0x70bd27, 0xfa0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r0) 19:55:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r3, 0x320, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x834}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000140)={0x78fb, 0x5, 0x6, {}, 0x3, 0x400}) r4 = dup(r1) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f00000001c0)=""/4096) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0xfffffffffffffd8d) 19:55:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x4000) 19:55:33 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xc0000000, 0x2) 19:55:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000a80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x60ff) 19:55:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="e58178b9b324da9f7dd9a2c1215e37") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) perf_event_open$cgroup(&(0x7f0000000180)={0x7, 0x70, 0x5, 0x8, 0x7fff, 0x101, 0x0, 0xb1, 0x4000, 0x3, 0x80000000, 0x0, 0x9, 0x10001, 0x6, 0x3, 0x0, 0x3, 0xffffffffffff9505, 0x3, 0x800100000000, 0x1, 0x100000001, 0x8000, 0x9, 0x1, 0x9, 0xfff, 0x6, 0x40, 0x8f19, 0x6, 0x0, 0x100000000, 0x7fffffff, 0x3, 0x1000, 0x20, 0x0, 0x6, 0x3, @perf_config_ext={0x0, 0x6}, 0x4000, 0x1808, 0x3, 0x7, 0x0, 0x45f, 0xffffffff00000001}, r2, 0xe, r2, 0x2) [ 372.619897][T15493] serio: Serial port pts1 19:55:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000e80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:34 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xe0ffffff, 0x2) 19:55:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/220}, {&(0x7f0000000540)=""/4096}], 0x10cf) dup2(r1, r0) 19:55:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x7) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x200000) bind$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000240)=0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) splice(r0, &(0x7f0000000000), r2, &(0x7f0000000100)=0x32, 0x401, 0x1) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000140)=0x6) 19:55:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x7400) 19:55:34 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xf6ffffff, 0x2) 19:55:34 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x3e1303, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_hsr\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000f80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x9400) 19:55:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) times(&(0x7f0000000000)) 19:55:34 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfcfdffff, 0x2) 19:55:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x5, 0x8) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000100), &(0x7f00000000c0)=0xfffffffffffffd9a) 19:55:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000001c80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 373.272229][T15549] serio: Serial port pts1 19:55:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x307100) 19:55:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:34 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfeffffff, 0x2) 19:55:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x0, 0x401}]}, 0xc, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x80000000, 0x6, 0x9dd, 0x6, 0x3, 0x81, 0xffffffff, 0x87dd, 0x1ff, 0x9, 0x80, 0x5}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = epoll_create1(0x80000) dup2(r0, r2) 19:55:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x400000) 19:55:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x26) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000006080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:35 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfffff000, 0x2) 19:55:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080020efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x50b000) [ 374.023813][T15583] serio: Serial port pts1 19:55:35 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfffffdfc, 0x2) 19:55:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f1200043f3188b070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={0x0, @loopback, @remote}, &(0x7f0000000800)=0xc) sendmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f00000002c0)=@hci={0x1f, r3, 0x3}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)="5536c8ec0917afb39ba7b46344af6c7b43d9e248fee519f54b6ce39730c5d23284e09b1487a3f057777dcb9a9eebc0880e3e8a93cac87822d17884245a7c4578fb3ba3fc0736ecc7c88176e5c00a353cc66d543b03ba261c6024280b5b2fa34a257702fb09d5c5369012d9948fe3e76ea51a58ffb35d341405892a81fc", 0x7d}, {&(0x7f00000003c0)="7d4d6c1ba89ab6f2b4a627847acdf1aad81495062cce1394bfda845f9a58bc2e8a4b13dd90b59c78dda98b777506a148afdaf0eb6934b878533912022c8cb3fce59a3715e20be5b1db91f4c6cdf81549f55dd21cc4446f3d801004ee93dd9af5c6390243690276bb00474d46017d97fef5f34c1ae18e83c91162a4d3829599282d0ac119fab56843ce3cbf7ecc13e92e4781d24652ce33e9", 0x98}, {&(0x7f0000000480)="87e010d1d6e8f3406b52cac2808de0ec16536cbb10aa2f4166255c4be1e706ead45a1b389897cbbf57414277df5be0d880778af06a19fc9a53bb02ddd8670da680305a89895c4666fe19fcb672bdd1787cab866df87035f086e36c462bce17520b7e4acb82d802677aca4f8a95ff801d4d8b74ef02daa07fc99e8eae", 0x7c}, {&(0x7f0000000080)="5d52682621e77c9554c4fbc554506f4c652268050a0a8554", 0x18}, {&(0x7f0000000500)="d49916bd7ac03e659bc29fa9271be451bab32564c50b2f59b297635a30cc571a408807b3bd4fdd9e5e214cd03a944a844c067d24ee20b3abc3c836f09acb906603ba68ccb59cabd0692deaae9fe5a0e34812aae01c40f5e6ba7e28c00a276eb48d9b27167b02e599054960df5db051515baf36a7c0b0f227bd", 0x79}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="f800000000000000846489000000ffffffff0e6a6d9d5a067bfa18bd617dbe5ab0dcb06765cbe44e46ef7b82aca1e2e8a46b6ab6787f1b71eb2f9cd5cd633f8f64e433f101dea168a8417eb9f2d80c4a782ad4c3bea899b2f0f635cce1ca04b1c2a742715c0e84a477cad0ecea3d7d9d8700000000000000065c9d63e755d1d0577e22e2b5759758c0520b4f3082874f5ee83e0b2928960e4f224d0a68ba0226ce4185ceb9af8e4708e3be4b1595a44c5bf2d0333caddb42caaa9008fa606641c11898e0c658a84dbb0b67f2538204785c46037b9811582c11b171b2dcc49e8b4fd59cc166e3f31f6c0000000000"], 0xf8}, 0x1}, {{&(0x7f0000000840)=@ll={0x11, 0xf7, r4, 0x1, 0x3f48, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)="21fe845f45008ef8ef1060ea31eaf06db206904d5a394c4fc773283b729e54285bfca252fb0073bec1a3aae22ea7b37fe2cbb7bc15fd8f632219726fd476b5abc4936e0c0c2fd76aa681bad774ba22cd3de7051b02bb3b05e6d8d15889dc63bd85f2a62d78e627c02ebbd0ea5435949f86ed140346c003c065720e33ca2f6ad9407ba28c9aeecfe26a217df01ecc1b", 0x8f}], 0x1}, 0x8}, {{&(0x7f00000009c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a40)="e2540b2eaaf0cb77858fb42a3d876de94f12bdcbb5c0167278a7d717f231df193812d29692ac74115b03e082dc0988c2252bef22781f19fd10958f4f3a4b02a1f23409e7e12dfefb1f7953fbffc19c3ebd1e675e5a0798f9a3d4a705ed6539b36cfee0dbb44cb9eb193233f37924b8eb0cac61f46a19c4284e03177e1478cc1206e9b4eb2953a39a2bad78c57a9621d5fbe90ceeca0f6ea3e500", 0x9a}, {&(0x7f0000000b00)="c677a3951dc3da2129b35795df1c3230d052340f5ca143d571d81326b195fc3c8413306ae0bd2e55390a01dce7ce7c3cc33f55e3d9f6ddd5ca4eb48affbd1fb41d46377340ef96568200b2dcccafeb38088eed1272f26c98cb6dc891450153bf3390282a52de44a6a369bcfea252b88f745a18e60851298b4853b3cd565f0b", 0x7f}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="d209d10a30dc93edc37855fe07c55465d9c195b27b1329121935e3f155a2eda189bb620c4fbd630a548c5b9e9797d645e9d3a55c31c401abf93d7cc3bfd2db75dd88b4fa84d4a83dcc891cc6c00cd890a48ed8e7dd35a25965170f0480743a7d9a1fbfc626f2bd4c6c0470b8497d09d0a6004daab86a42bd403a8935bd08fea1d1571560e738b92c7bca459752a0d94abb749e0dd003d769c3bb132322d4d34db80b1dad26d27ec3296f6a1de1ced81cf32824f694d50536bb1919e157041ea76110d8ee2d79fc587d15", 0xca}], 0x4}}], 0x3, 0x2000c0c1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x108, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x70a000) [ 374.771277][T15616] serio: Serial port pts2 19:55:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x9) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:35 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xffffffe0, 0x2) 19:55:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000140)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080040efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x713000) 19:55:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xea, 0x1, 0x0, 0x7, 0xf, 0x3, 0x8000, 0x9, 0x4, 0x8, 0xc, 0x7fffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfffffff6, 0x2) [ 374.940998][T15632] serio: Serial port pts1 19:55:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000080)=0x80, 0x80800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123188b07072e3e731a112d0d48125f386a1002b936e95d457462134fde89149543db0baf42dc3fba0ebb602da5c5e65b29ae63b39b5ba412153ac607a94fce502b993ab6f7d7ce9460ec2c979308e9866cf74702579ad575e1686ad0ed1982431db985c9aac2fa7ee") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000000)=0x5de, 0x4) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000280)) fcntl$dupfd(r1, 0x405, r1) 19:55:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x740000) 19:55:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000000800a0efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000240)=""/82) dup2(r1, r0) 19:55:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xa) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffe, 0x2) 19:55:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xfffffffffffff136, 0xd0000) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1ff, 0x5}}, 0x30) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40000, 0x0) 19:55:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x940000) [ 375.205167][T15655] serio: Serial port pts1 19:55:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000000800e0efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1000000000000, 0x2) 19:55:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000240)=""/151, 0x97) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xa07000) 19:55:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000000800f0efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xf0ffffffffffff, 0x2) [ 375.507316][T15685] serio: Serial port pts1 19:55:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xb05000) 19:55:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xb) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0x44001}, 0x10) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa800000000000000801c0efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @initdev}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x400, 0x7, 0x0, 0x5, 0x6, 0x40, 0xff], 0x8, 0x6, 0xfffffffffffffffc, 0x7fff, 0xffffffff, 0x5, {0x2, 0x81, 0x43c944b4, 0x2, 0x3, 0x3, 0x1ff, 0x400, 0xba4c, 0x100, 0x9, 0x100000000, 0x2, 0xea, "b893ca561eb267997396893c019e604e386d372ec4d3bc864fd9022cff418f6f"}}) 19:55:37 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x100000000000000, 0x2) 19:55:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x3000000) 19:55:37 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x200000000000000, 0x2) 19:55:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080600efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 376.179381][T15724] serio: Serial port pts1 19:55:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xff600000) 19:55:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x300000000, &(0x7f0000000100)=0x2) r2 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0xffffffffffffffec) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@ipv4={[], [], @initdev}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000940)={r2, 0x1, 0x6, @remote}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:37 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x300000000000000, 0x2) 19:55:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xc) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000eff00f0e809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x400000000000) 19:55:38 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x400000000000000, 0x2) 19:55:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x321040) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000240)="8ca3e6171a47e91a6e4a22ac128f66eb04953e0ce9b9852274a3cef8512bd41f0fc97446496c17e3ad8c5a4ace25d44d1a4ca88c837aa3fb92bfd31e42a1767219c55563c6b77a2cabb122022dfbe423a2511daf57f425", 0x57) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x18) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x3, 0x0, 0x20, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:38 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x500000000000000, 0x2) 19:55:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809020000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000100)=0x3e9) getsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000), &(0x7f0000000180)=0x4) 19:55:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x60ffffffffff) 19:55:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x102) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000240)=""/109) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x64d6, 0x8000) getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000100), &(0x7f00000002c0)=0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x740000000000) [ 377.433163][T15801] serio: Serial port pts1 [ 377.484694][T15801] serio: Serial port pts2 19:55:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809040000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:38 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xa00000000000000, 0x2) 19:55:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0xfffffffffffffff9, 0x4) r3 = dup(r1) accept4$netrom(r2, &(0x7f0000000140)={{0x3, @bcast}, [@bcast, @null, @bcast, @netrom, @netrom, @bcast, @bcast, @rose]}, &(0x7f00000001c0)=0x48, 0x80000) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000000)=0x4) 19:55:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xd) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x7fffffffefff) 19:55:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x402000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:39 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1f00000000000000, 0x2) 19:55:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x940000000000) 19:55:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x2284, &(0x7f0000000240)=ANY=[@ANYBLOB="0068a120000000000000b7d11310e0c04f33f4a04e46307fc9077e0a3e4d4ff96c9114167642d53da70928b6f07000"/58]) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x200000, 0x4) 19:55:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe8090a0000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x5, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xe) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x30710000000000) 19:55:39 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2000000000000000, 0x2) [ 378.261836][T15849] serio: Serial port pts1 19:55:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe8090e0000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:39 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2700000000000000, 0x2) 19:55:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xa0700000000000) 19:55:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 378.542002][T15870] serio: Serial port pts1 19:55:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe8090f0000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:39 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2f00000000000000, 0x2) 19:55:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x88000) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) dup2(0xffffffffffffffff, r0) 19:55:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xf) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xb0500000000000) 19:55:40 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) write$P9_ROPEN(r1, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x0, 0x2, 0x8}, 0x1000}}, 0x18) prctl$PR_CAPBSET_READ(0x17, 0x15) mq_timedsend(r1, &(0x7f0000000000)="4596b160ed32c47452e3e9fd621b6f7de9558252153bfc34e4733d2301", 0x1d, 0x5, &(0x7f0000000100)={0x0, 0x989680}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:40 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4800000000000000, 0x2) 19:55:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe8091c0000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0x300000000000000) 19:55:40 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4c00000000000000, 0x2) [ 379.318819][T15913] serio: Serial port pts1 19:55:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809600000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x200000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000200)=0xfff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r3 = dup(r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x8, 0xb9}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r4, 0x6}, 0x8) 19:55:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xffefffffff7f0000) 19:55:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 379.651384][T15945] serio: Serial port pts1 19:55:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:41 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6800000000000000, 0x2) 19:55:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809f00000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12) 19:55:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xffffffffff600000) 19:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000002c0)=""/74, 0x104000, 0x1800, 0x10000}, 0x18) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) dup2(r2, r0) 19:55:41 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x1) [ 380.294534][T15967] serio: Serial port pts1 19:55:41 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6c00000000000000, 0x2) 19:55:41 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0x7001, 0x3002, 0x1d006, 0x2000], 0x87d, 0x80, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @rand_addr, 0x4e20, 0x2, 'rr\x00', 0x1c, 0x37, 0x39}, {@dev={0xac, 0x14, 0x14, 0x2}, 0x4e21, 0x0, 0x2, 0x8, 0xfffffffffffffffb}}, 0x368) 19:55:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe8090b0100fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x100000001, 0x1000, 0x80000000, 0x800000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$VT_WAITACTIVE(r0, 0x5607) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/236, 0xfffffffffffffcdf}], 0x1) dup2(r1, r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x121041, 0x0) 19:55:41 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6d41000000000000, 0x2) 19:55:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000a00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100f) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x9}, 0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x1) 19:55:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x30) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fsync(r0) r2 = dup(r1) syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x6, 0x2000) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="d9631848cdf5d1155f162a84c71a1631a0aac962b1f60195e506b28442921487ee27979f825aa1ebebc2344804a3232ef66f9f79", 0x34, 0x1f}, {&(0x7f0000000180)="aea123531cf9454d0f5ff40bb70f476192cd41b65ff54a704f8a28894a782f6451a0a4e6f28241bdb8e5057750d3d371f490c80e93ac579e047901be45c33765290d59bd1f02e9086d3c74e563d31fbe1ccaa656be391fa8baf47e45ce6847d19a11ee67f8a38ff12effa1fda5d1f0ef7de3e754fc658a5530a1bcffdb10f396d7451c459040b5d61b06fe32efbf8dc4b1077b12dc3bcd8a6140", 0x9a, 0x8a}, {&(0x7f0000000240)="e2e070596f8a683a2bb051269793db5e2fc52a1f0254d98729cfeb408b3b7c4f7269e0117f6a7aa57446965533b7d4fb08b68fea411e629daa3804cb074d38d4b5a372662a1f0d762d95a0d0af2768653302abbb4ec6d5b665d8f15fcacef996933661da83ce4da6a05a992ce7386ae8753e9c47e57ac76389904dd5d27c51f9db1b7e8e65d2283f580b4019b7ecf6e525b65ddd14827d574f2f85123129c813a6f3f79b5ee0157923bad14b21fe2a918920fb557d02237d07518d6a2f40ad9a5597bb928727135ad218cd70114571008f241a1d1b161ed9619da1d2a0d2954c78866f023018af695184411ea6dabb64d8", 0xf1, 0x9}], 0x40000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000400)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xe4) 19:55:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7400000000000000, 0x2) 19:55:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000100)=0x7) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 381.232377][T16015] serio: Serial port pts1 19:55:42 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0xe0, 0x4000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000280)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000400)=[0x1], 0x2) fstat(r1, &(0x7f0000000140)) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x42000) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000100)=0x200, 0x4) setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000300)="c842a74f94dd758f0bbe2e4f90d8e44cb1931b521722c547499d61b9de7fafbe6da0405fab6cc5d9beb7210a6b7216f278e4e70b1c3a1f38fd6919e7480b00181d09fcc65cf9f834816c7eadc3121570e0f5fd725ba9f490b48489af3ff7ab3bd13ec4f31795f76df66ca4c5a64658260705e3692001084179a3a87fd9684bc33d846d19dd228acb9ba7cec76c9035934c1c7365a15428881bd18b0ce87abb20840c704c0b853289a2593e2d093afccba6935c849c7a5802b51e6b7b30b1d88963cc97e5e4fc9c38714249912e9b331f9eeed89f67d4cfeeae335c9bd112630ec138ace4e8fddf9add2b47592fc6287c4c7ed04d64c1de9b4f0d14d170", 0xfd) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000002c0)=""/47) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000001c0)={{0x7, 0x5}, {0x2b01, 0x100000001}, 0x0, 0x1, 0x8}) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000440)={'irlan0\x00', 0x3}) 19:55:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7a00000000000000, 0x2) 19:55:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809010b00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:42 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="000205000300ff0307950002005f3006aa196dae14bca648b4337983db38cd1d86143e7ff5e3ed6d83bd7f2ef3cd5e7854f329cfac212da5fdc473dbaf87b5"], &(0x7f0000000200)=0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0x5e9, @loopback}}, 0xf3a0, 0x2, 0x0, 0x5}, &(0x7f0000000300)=0x98) write$FUSE_GETXATTR(r0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x2, {0x3}}, 0x18) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) r5 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/cec#\x00', 0xfffffffffffffff9) keyctl$clear(0x7, r5) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0xffffffffffffdc24) 19:55:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xc000000000000000, 0x2) 19:55:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000e00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @local}, {0x1, @random="7d64842474d0"}, 0x22, {0x2, 0x4e21, @multicast2}, 'vlan0\x00'}) 19:55:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = gettid() capset(&(0x7f0000000000)={0x0, r1}, &(0x7f0000000040)={0xfff, 0x800, 0x6598, 0x5, 0xffffffff, 0x5a}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup3(r0, r0, 0x80000) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000100)={0xb, 0x8, 0x10000}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:43 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xe0ffffffffffffff, 0x2) 19:55:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x800000000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCCBRK(r1, 0x5428) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x60) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000f00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x40, 0x700) write$P9_RSTAT(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="630000007d010000005c004d01040000008001000000050000ffffffff000000000103000000e1ffffff020000000000000002002d5c040073656c661d67ec6f7570776c10e2e8cf06616e3173656c302c06006200"/94], 0x63) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 382.175926][T16077] serio: Serial port pts1 19:55:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400500, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ce939ada2d0823594b1824ebba8d707a5df28fa59bd73f8d670ac32c7e6498ce44ca70a4ddbfe8f748f6b128dda5dae2989444073278f6da9424bb945c40ad"}, 0x60) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000100)) 19:55:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809001c00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:43 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xf6ffffff00000000, 0x2) [ 382.255534][T16077] serio: Serial port pts2 19:55:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809006000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:43 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfcfdffff00000000, 0x2) 19:55:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x20000001, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000000)={0x0, 0x1, [0x9, 0x3, 0x64, 0xc78, 0x9, 0x4, 0x100000001, 0x1]}) 19:55:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000040)="0adc03123c123f3188b070af47a23c90434197d7c13bee1c233c28") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xf11, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000000)={0x6, 0x3}) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:43 executing program 1: mq_unlink(&(0x7f0000000000)='\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000340)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @local, 0x5}}}, &(0x7f0000000480)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYBLOB="81000600090900070000000008002900"], 0x14) r4 = syz_open_dev$admmidi(&(0x7f000000bc40)='/dev/admmidi#\x00', 0x0, 0x100) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000540)) sendmsg$nl_route_sched(r4, &(0x7f000000bc00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f000000bbc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xb5ec}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101200, 0x0) getpeername$ax25(r5, &(0x7f00000002c0)={{0x3, @bcast}, [@netrom, @rose, @rose, @netrom, @bcast, @remote, @rose, @netrom]}, &(0x7f0000000100)=0x48) poll(&(0x7f0000000240)=[{r0, 0x172}, {r5, 0x200}, {r1, 0x1002}], 0x3, 0x27d9) dup2(r1, r0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f000000bc80)=0x67fc, 0x4) 19:55:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x300) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:44 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfeffffff00000000, 0x2) 19:55:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900f000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:44 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x2, 0x1f, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x11, 0x114, 0x100000001, 0x0, 0x2}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r3, 0x2, 0x1, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) connect(r3, &(0x7f0000000300)=@rc={0x1f, {0x4, 0x7ff, 0x100000001, 0x100000001, 0x101, 0x4}, 0x9}, 0x80) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000280)={0x61, ""/97}) dup2(r2, r1) 19:55:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = getpgid(0xffffffffffffffff) r3 = fcntl$getown(r1, 0x9) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x680001, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000040)={r4, r0, 0x10001}) r5 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:44 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xffffffff00000000, 0x2) 19:55:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000200fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 383.104017][T16136] serio: Serial port pts1 19:55:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0x0, @empty, 0x4e24, 0x2, 'rr\x00', 0x8, 0x3fed, 0x67}, {@multicast2, 0x4e21, 0x3, 0x8, 0x6, 0x7}}, 0x44) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x3, 0x70, 0xff, 0x9, 0xee, 0xbd, 0x0, 0x81, 0x40000, 0x2, 0x80000000, 0x7fffffff, 0xf71d, 0x8a, 0x3, 0x1, 0x7, 0x5, 0x9, 0x80, 0x10000, 0x100, 0x2cea, 0x3, 0xf0b, 0x7fffffff, 0x9, 0xfffffffffffff1e9, 0x4, 0x0, 0x3ae, 0x0, 0x0, 0x3, 0x9, 0x53, 0xfff, 0x8000, 0x0, 0x1f, 0x5, @perf_config_ext={0x9, 0x4}, 0x4000, 0x9, 0x9, 0x0, 0x80000000, 0x7fff, 0x6}) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) [ 383.198866][T16146] serio: Serial port pts2 19:55:44 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffff000, 0x2) 19:55:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0xa9b) [ 383.468632][T16173] serio: Serial port pts1 [ 383.510691][T16177] serio: Serial port pts2 19:55:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x500) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, 0x0, &(0x7f0000000000)) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x800000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '#'}}, {@msize={'msize', 0x3d, 0xfffffffffffffffb}}, {@access_client='access=client'}, {@version_L='version=9p2000.L'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040), 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@buf={0x7a, &(0x7f0000000280)="1325fc3b855d450ad7349c9dff7fd37f91ade37e45a9a9f4c78592e3a577584791c04c5ead3d0b4a8bc4d04730bb1e9667aa080dfd8f353f1471b77ed2397488ee977c6e7e4055772af6fc549b79563b4780695d68440d0477c50529e129e6fc7dc30cda50d207d93b23ee0de9740c36e278e0f249ec50f52a6e"}) 19:55:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000400fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) write$smack_current(r2, &(0x7f0000000100)='/\x00', 0x2) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:45 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffe0, 0x2) 19:55:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) r3 = geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) write$P9_RSTATu(r2, &(0x7f00000003c0)={0x65, 0x7d, 0x2, {{0x0, 0x4d, 0x7, 0x8, {}, 0x10000, 0x6, 0x8, 0x100000001, 0x4, 'bdev', 0xa, '$nodev),[,', 0x2, '&-', 0xa, '/dev/ptmx\x00'}, 0x3, '-#\\', r3, r4, r5}}, 0x65) 19:55:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) fsetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', &(0x7f0000000040)='ppp1em0!\x00', 0x9, 0x1) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000100)={0x101, "4da05dcb711324978d1f638cc0cf3bcad23810cfa5788675b8a544cf0d79ba7f", 0x2, 0x1}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 384.055698][T16189] serio: Serial port pts1 19:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="415061d037250c4548df0d848baaf35ad815306966adda86072084ec59b52a218544430f675e0cbe85bd64a53dc5c87dae7f273fbd5cc62ed7e7d4a31dc95f8598afd17c2fd20818b1bfbce00df76f2c0de895401450f15203be7ffbec83", 0x5e, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r5) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r3, r4/1000+30000}, {0x0, 0x2710}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) 19:55:45 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) 19:55:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000a00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x600) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:45 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) 19:55:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) 19:55:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000e00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 384.387379][T16229] serio: Serial port pts1 19:55:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x700) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:45 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) 19:55:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000280)={0x8001, 0x200, 0xb87}) r2 = syz_open_pts(r0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101080, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000100)=0x80, 0x4) dup2(r2, r0) 19:55:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x4}, 0x8) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), &(0x7f0000000140)=0xfffffffffffffd8b) 19:55:45 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x7) 19:55:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl(r0, 0x2, &(0x7f0000000140)="277800a36395a08a00") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2800, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e21, 0x7, @mcast2, 0x7}, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0xffff, [0x7, 0x8000, 0x1, 0x1, 0x2b8, 0x3, 0x5, 0xfc6]}, 0x5c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x21, "c44aaf00216a0f682c8937de7df60c3d261693df2600f433de56485ec38cb58c3f"}, &(0x7f0000000100)=0x29) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @empty}}, 0x5370f5ec, 0x7fffffff}, &(0x7f0000000240)=0x90) r5 = dup(r2) mkdirat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x1ff) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x800, 0x0) 19:55:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000f00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 384.731491][T16256] serio: Serial port pts1 19:55:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x900) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 384.786033][T16262] serio: Serial port pts2 19:55:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet(0x2, 0x5, 0xff) r1 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xa00) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) 19:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2c80, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) dup2(r1, r0) 19:55:46 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) 19:55:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809001c00fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:46 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x223) 19:55:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809006000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) recvmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000240)=@ax25={{0x3, @bcast}, [@netrom, @rose, @default, @null, @rose, @bcast, @default, @bcast]}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1}, 0x1) dup2(r1, r0) 19:55:46 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001240)={0x80, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000001280)={0x2, r1, 0x10001, 0x2}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) bind$ax25(r2, &(0x7f0000000040)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000001140)={0x3f, {{0x2, 0x4e23, @broadcast}}}, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f00000012c0)) [ 385.355952][T16322] serio: Serial port pts1 19:55:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123ca83f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x86a00, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x3, 0x0, 0xe0, 0x4}, 0x6, 0x0, 0x7, r3, 0x2, 0x5, 'syz0\x00', &(0x7f0000000100)=['\x00', '*\x00'], 0x3, [], [0x200, 0x6, 0x6, 0x9]}) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000280)) 19:55:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) membarrier(0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900f000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xb00) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:46 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) chmod(&(0x7f0000000080)='./file0\x00', 0x2) rt_sigtimedwait(&(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x800, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000100)={0x4}) 19:55:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000080)=0x80, 0x800) ioctl(r0, 0x1000001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xc00) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000b01fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 385.639417][T16352] Unknown ioctl 1074819277 19:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000100)={"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"}) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 385.671256][T16355] Unknown ioctl 1074819277 19:55:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x4040) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={r0, 0x8000000000, 0x7f, "1b8c1bf647dc272cefe3cb4757904f651821846fd8a679ae29131f645e6bf73f72489e0dca08e50979327518e4963f7484e96ac508125c2b3fce9912b7f137daf9df026d943e87eb46102f3a31c051805d8fd6410e09fb567d"}) [ 385.772408][T16364] serio: Serial port pts1 19:55:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) 19:55:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900000afff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 385.838785][T16376] serio: Serial port pts2 19:55:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xd00) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) 19:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+'}, 0x28, 0x2) 19:55:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x101, 0x16000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = dup(r1) fgetxattr(r1, &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000140)=""/239, 0xef) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900010bfff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 386.115073][T16397] serio: Serial port pts1 19:55:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000200)=""/191) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80000) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000002c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xe00) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:47 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1a081, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xff, 0x12) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000080)="0adc1f12dba03f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900000efff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:47 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xf00) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x7) dup2(r0, r1) 19:55:47 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x84000, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffd, 0x3) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000140)={0x5, 0x9e01}) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000100)='/dev/vcs\x00', 0x9, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x58400, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900000ffff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x9881, 0x40001) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140)=0x8, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) socket$inet6(0xa, 0x6, 0x6) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000040)) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x1) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0xc722, 0x3, 0x5}) 19:55:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) memfd_create(&(0x7f0000000100)='+nodev)bdevvmnet1eth1vboxnet1vmnet1em1mime_typeGPL]nodev\\eth1[vboxnet1ppp0cgroup--\x00', 0x1) fchmod(r0, 0x40) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000000)={0xaf7, 0x3, 0x6}) [ 386.684532][T16455] serio: Serial port pts1 19:55:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x2000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:47 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) 19:55:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900001cfff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x40000002, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x9, 0x3, 0x1, 0x96}) 19:55:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000060fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 387.447823][T16463] serio: Serial port pts2 19:55:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40500, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x7fffffff, 0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r0) 19:55:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e21, 0x200000, @mcast2, 0x4}, r3}}, 0x38) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="4000000002d98987000000") sendto(r0, &(0x7f0000000200)="b27ff3eb2f1277f7fdd26e9b53ce380be70efabf848530a865045d2ce082aaf3b9a3e3c261a8ac53dc66434ab79a394d4d2fcf5bfdbfa8fc35c1c2b660f6991388045e38242fa06f43ac4a4c7109024d051d7a990bedde82cd7f2cbe3b961c787026a1aacb52790c9b6f9cb90be217b1775b02b3b0e673083ab9254f8d6a04dbe4a7a2c08738e5f8acf23fb440aaa5a9c7df74d2ce5af8109bae7ea439d5a3e5d00b8e490ac126eb0917063507b6f4c6692bfdddf2bef66609180701d58bfd439d4d35db5d69fa98db897dec5e81555fbfe86d538dbffad51f5e9850e6d45a935da73506740182f0557efc7ba4943922ff6b0785e5836d1f832ab43267520da92a1aca12b60da41c5055b2c7535e5202b278f0333797c0e59d296a48b303c31974af845938f2254398b354a65fd13e64a38b5d5ebc393eac8c6bfbf4790e068f6a7c34d8b8a5242f986407ca5c7946e311ecae20ec4e142ba2bcd8a9262c52ae65b6aaf6afa91e539361e0760eac7b8387c6b029f1dcb20ea0d6938fe8ebbd438c791c91570e9cdb385a2290679581bb871b009dd76c2f94033bf5e7125775f191f463e386fd1063fe80f8fd14236a8eff3c5a6baa8f79868458788b2ae7648b1cf799c461c2aef0f1d1f3ff2cb5712c7a08b211bf5d70f5fcc4319247d9c44dd01b4f5ae9a8c502841f2654b24936a4731833aed946e35ea0c66e013aa57ec47be84e4f93728754ebda7f8e1a46c1681c03ab8859c5a8b50cc43cecd468ba45e595bb283a4d35c6e79952f5d2b972cf68712c5a692978dfa3ef4f872712a5f922750e04c71dc49d7a94dc818c3554c24bc9e0be543ecd00d778f43a64634cf86305d7dd33644612fd11582b775e3739bd60752e7cdf518457f08ec1f8b9a035276a8812d29d308e75e3204a2a21380b725bd41a51ff0ad19cfa11838700a809bfe55425cd77dc72404d8867f015a47a0e0c8e6ed0647fdee22b3f3394309bdbb5a1e725be249c14f52111846e4299dbe71eaa49abd4cae8aa1621806a309055d31cc9394aa4551ce83c79723ded838b2d44ee1eb4e1b861b002c3602a562f07af02623e6fff31ec76a7fb76b72f6be8f079c6400d8ad9906cf3db541917895fb652df08f1535d833f89b19a6d2ac8792e53e949e73522552580ea39ca2d4dd0779e77a15beb1ace5da06bf31b6134a46529fbf387343c47c72fc743d499de7fdc15db97ccf95a1e56893f4898b765fe7054380e75f349e33c675a0b2f3a77ace941baad20a123ea37ac97ed93371d43c084c9454b1149bcfa70d89a5830b1a388a7348cc0762fa335a3c56dfdcde4b9f66e064074e2a27f2e18f6ae9343c40a30b9023d18efb71340c3a14de010b423a166cad80170323cea88b1fa6f2b85255404b0025847af0243cda78815ecec1771d4baa0a579395958de238cc9b2de14809028741bc544b6e2a8ffd88395e52e430a6d0ccde886b644ee33265e1bbb87e08a3d2702bc7bca615ff307098b43046868649e6561495948701cf874327798957eadd2f1ad37a6754cd59c8200d1c0e8aa4c51e73f4aba94cca1a6989a25b08db3798e660e89272146bde1899602fb82889d345c74af66e2927614b053fc4b942c7c725cabb9307d8f5d2cc5a10ae01d159b23d79980c7da8633beff39303fb9ce8991620fafc451d6f164cfadf2fc6c696688ca8e76061c2ade2ad149c648becd4b39a4baf4a09087446e0dcb7c816aa6e77e1d69730f03ce849a078045db8e29789d7631ffa7200bd3db1ca737f881291f010163184bfc54512e89bef5acfdc5fa871882eb7aa6e04514a16e2ded200efff9d89aa327e221dc93091e709acf2b2f2b3069fd7bd75672a168f7f7a2a68ad3e8fccda526e082e05e389ae1172131a2ae43bb7e3196c2e359e5f7bea5dc849c62b4a90ee7a939ac00f2b10781c24ae9bb50192bc062904259d60383152a53f487193f9ff51bfd9bd7f813f5b94e61908f88b9f8eef0932de43e78cd2b9f7d7564a77e00deb167c827591272817f95b6f70ff267dd6845794f2034de9669b4c211c59f5776f41819c6fdad2ccf124800328225accd905c7276e13748379cf7dcc12ced9d3108ea9274a8857765c22553081f4153abbb9abb18d124c4065f576ec3aec0eef917f8a52b0bce4bbf9fb5b5df7731074eefc2c24efc6e78ec1a03066e69bb011a939d8fd85766785da6234c17e890aee3ea836fbca3bd4211009a04319c62a6e8048851e2cdee1d4ca7568c2c2fabcfe8f3880bf64a24b252ecdbd248277c14d60fb94eac0cc40c3e3605f8b728f960f190a9112f95d8e04b8b3057b6a4d6d070af95b6a175918b639f677bf743940900550e04a5633c175d22b200f6f1d113415f0c8ca216b61162a94d506611df25762a86044b272bd25a2bcbe69e365aadfca90aec12ea45e56b49e243291f4ec779bdb2f9a35c00a8af57b07c5da7318c8f60067022c9de82dc63196a396ce61e1bc066175715b366957b5d482ba19f092d32ef59bb5102637dd5e9e9d1d35e853fcf095c74d9fecab728063e806dee382379cdec9498c2b637ba663daa285e5b91a1d80b9da3d3e7e3048da16a815ca0b1b16f1e763ce998d03b78387a639b0ac6f3d7646d8904e69e75c6588e9048f7cc3d45b695b440d0af18e662eaca13f7bbb754cdf01a39b12c4d36fed152cb2042126d3c1a4e0672b076ba5c8720a152a7c722361f986c3432ee735077c4e9baea83356c3d3f4454388fc46143b16f03aa034266729ad45ceee745af041020c7cfafd786f7fd2fac95a5158737b7621a0f8cec63c2166d5b0fbf3d6a5c68bf44e276598af2b651b9f611e83f05179f207d238eeaaf9b9609215ad87d12b86cc5cf82898d716a8834e52b3254581e087d7173ab3e79f03098cd3298faae702ad47957e9cf5a2105cdddff2938c1a61abcc87feb44cecbe0f9532f97276998c68f647b344cb4221b38a9085896c1acd4075c4c6d87f09a00eff828aa3ce73b519521be98036f3bd5c486542ba6d0c09797e78f0094b3042d2cebb21e55cca6cb2e8a59472d2456939758509a4de66200af0ac6822ae0d79017734b7becf8eac78956301804040db6b9db897ba0802294d1ae738f2bb662f2974014620c89c0c645126351ef7236a61392f3dffcd8fd70115778c1061ccfde7a38c5fccc2b0d88d3caa4438dd953a1d0fa773a35aef172c099f07bffed2fceafdba911df30d62ae07f89af300066adf9b36eab3f8ef1dde3f05687d4b59c3de360b012d08bb2cb04277b5fbe29bfd69be2b075c11afd37a4922b518c2b5acab5258d7c86dff232a91dcef00e0eac4dbd5d6d99d09350b6e150ca938c626788b1b40751833761b502394ba629d9f2fe7ec5e1117b0f45c091642b1b0ddc6e068ced8c93ab13bff8ba10b47b942c75ba64e651f0c97e2a025cd06265e4d0f83d779be6f105cf4302b2617ae4f866c9706152ec83f64f94f48e7d2e94858e08f4552ea2e10930c91a610ff42924e0f733a1b027764dd69db782fd67304209abe8d360c8f1b14fa31db324c5b5db5522418ff1f32283eccd602f9aecdb63264588d4bf6ec7b1f997ab5d43cf5db83e3183073f9f0a55909fdad4e4c2f022cad5c29be1f81eaf4fafb9ad92c7dc7ed2e449d28875384988edcddb9113df21d4961ae55b201ad22ad942191aecb543437d14c1c60ecc819d7f12afcdabb9a0aaa5b66f1836eaac8800158664d95804f6ea9c6edce65baaa140de2776e58a1f19098bccb15ddcc0eb3a1a39e84efa752fe23ce38c16c554512e7bc03afcf9495f0d6f0e937d78596145ba66d805ae1907ec30e780f37cb3b1a44a5ffecf02d59367b96889fc286a31a129154c163204c163cd7aa95948b1cac76001f00f88dd280d231e54cf7c43f3a1cb42db449455989d424023fb16d8134f53287aa6ef95b3e539b5da6cdf1a6eb457b760b3f1df71ddff635d3a0e48d48d695ad0d3fb141b30c9c31ba2ac931657e5ec3835b1635871e8548fc0f5f6adc0c0112553cef84eb05f81988541645710c0977fd4a1b8757667155d9555c8c39c99db0a96eba372112def6ad8edfd58c86092397ddcba06579f69dec375799e66e305dcecae0da033cdfc1feeb6e75c6d4506a3d5a3b3dff0a56e7c271ef6be23deac653adb26cff9976271099da44683d8988f2b0a08f6adcacd7b2d4d0caa18260a316b921081909de5eed176b41467a684aaa4f8dbc792e67e4a9a7838b0f1328e4068230e73c8f0ba063c055c70c28271b66ca4b552e3720a6f4498fa6df5fe9ca44129654dd614dd261500e51b1602b4a25f9f565f23468ca15e632faf6242d4e5f5397fe865322d063e443e11eeef784ffaf8db0b4ed279eb91ef8230cedae3546978bb0e4144491d8072449aca74e4d6db2f231b903f5174ba092e32b7405b845b38c8fefd4a268325474e5f6ffaddab684f2ad5f5186d8f752e7e9c329d4455299fa78fc8f38061fc72c528571376cdb96a81f2e906557157383fd52948d61a83f7774af9d6008e97f949d0003df9991b7d1fa4e4ba5e703e8b3a245933a54448cbb5aeac1ce20366d9d60cbf9e8be4897089fa1dfe79cb497b18f4f38e1d6935c412e5535e97dc275b6472ca2a1bdc3bdd52f1afac7dd0cb90578aec82bd6dafb504c2c2f20587e89efa3f285cd7a2525b30517ebd94d1a3c8b18966750084a43432be198cd089c9c994d0d8778feb17fafae3b5dfdc874ef00e0671f0df88d7d721e92e6c264867d4e324fc10b627e9be10585181674433598694edf3ee8bc570e30955451abe54d577e2896fa10e763ba9a5fd61a760916d1bdcc8cacab0a67c6a5b9eb933103b0844d6821fd57a068cf718781d824157f31f86e86839ca9bb1b932526b9edab3bc8f5096c1c8abbb3c6cedb10e3396e45fbde66adc488f84bef030d2d325375d3be30384ec6c222003d20c4d15fba678df773cf0c57b77939710bdc7191d688231d8863af932f20ce8a3028bc2dbbefb1d198751779055b862ad4c89111d866d70d7da628412e878b8abb18c8f6e32d5f5481266338d423463dcc1ee63ab664757dc1830ea20a57c80fcc5a498d76b020279850366b8f70e266dc2d46fe5198caa61d089e3a64b2c8c2a055b38dc6be16242d82399b4f7514f0ce76d2fa87c4418759c96a2964d2a1cd0064fe1e678218384d9245e549647f6230ed72b67e6a4d07e0acb4119c4a88187b82d18a4c5ffbe3912b065743ff2c19b395cc13a03b39b8deafacd3e14fabecc4971a3df59e3e1ee4790f14624e3843a6938d79158dd33bf2ce04787b0deae93e6493f639a65dcd816a0c94196c1c8939bffce77f7183e07ce50679234e2148afac31d8b75a0c10602ce1013b5ea84339cd88c5072b844ee19c44a10abd2d7069106e7815b11a894310e07c85bb42d6658ce6f93d40cab0107b1f21717b3bd5efabf682ff5e2604ccfa74d5355698f664f233c74fec6667443af1e43f4d461171c6e5140b1a9e3344d5346515601314eecf761c0c509dba16b34fa3b075281a08ba401004c44f5a2db1297263a815ddaea93206bb041b5535c51b4496c9142d9d9edb3b3b5d7b2d7f0faabcaf19bca6bb62454610c9ae3e33622668d5dfe031aedbbc4056d5c39307bdee9580485ddc7218f8c61342e5ac477b63100bc5f8d2938cbdf3723c5f80f88f7aaf82d2d490931a07d4f9fa3a9b25a3576434823b9e00bb8820fceeb38c4f03789312de69c46dc6662f83f3130119cc497bccff15672e4ab0b2234", 0x1000, 0x8000, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000001200)='trusted.overlay.opaque\x00', &(0x7f0000001240)='y\x00', 0x2, 0x2) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) sendto$rose(r2, &(0x7f0000000000)="84f5dfad96558d6ec783cff0f98ac8daf72bdfe62f376b64dbe30006fb64e9a7145a7a42f8705c66ec951a0607aeffc8bb61626149dfba8c78d2d1e1dcaf71f004bf01e98a59e9e2480e8c04e7cc5755d9e7de6f5b73d990bd460e9b10f074e6", 0x60, 0x8010, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}, 0x40) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000012c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) 19:55:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe8090000f0fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:48 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}) 19:55:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) accept4$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) pipe(&(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 387.621885][T16518] serio: Serial port pts1 19:55:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x3000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000002fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:48 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xb, 0x2) 19:55:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$radio(&(0x7f0000000500)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000540)={0x40000000, 0x7, "e8ea56b6b2cd9e9bc1e3f77505b14a0f3aa041bb59a0fab6daf02cc82a03f81d", 0x1, 0x9, 0x81, 0x80, 0x8000, 0xffff, 0x1, 0xfff, [0xfffffffffffffffb, 0x3, 0x3c22]}) r3 = dup(r1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffb, 0x48, 0xc, @scatter={0x4, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/163, 0xa3}, {&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f00000002c0)=""/125, 0x7d}]}, &(0x7f0000000340)="6b8b6db2ba3a57c30aab5893fe05ad48d3cc4060388360d3a1f6f67dc5cfc7ef01bf426eddbb0600005edead0aeb871d63414986d1d6c71e7436822155e41703750483b7b334e9d60bc848b2839b016432c6dcf34403dbca106fa1afb501364a45434f5edcbc62c0a9b63609bef23dccf285c36a7823bebd769d2cebb2e5b88046bb", &(0x7f0000000400)=""/31, 0x10001, 0x4, 0x4, &(0x7f0000000440)}) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 19:55:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x3ffff, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = msgget(0x0, 0x0) msgrcv(r3, &(0x7f00000001c0)={0x0, ""/5}, 0xd, 0x1, 0x2000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r4 = dup(r1) getsockopt$netlink(r4, 0x10e, 0xf, &(0x7f0000000000)=""/107, &(0x7f0000000100)=0x6b) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x0, 0x5, 0x1}) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:48 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x2) 19:55:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000004fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 387.967271][T16551] serio: Serial port pts1 19:55:49 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x400) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x60f, @local, 0x6}}, [0x4, 0x9, 0x400, 0x0, 0x1, 0x8, 0x1b14, 0x6, 0xa3d2, 0x5, 0x9, 0x2, 0xeed, 0x4, 0x21e337ef]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x3, 0x0, 0xffffffffffffffff, 0xffffffff, 0x5}, &(0x7f0000000240)=0x14) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x8400000000000000, 0x7004, 0x3, 0x6, 0x3}) [ 388.025259][T16560] serio: Serial port pts2 19:55:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900000afff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000080)="0adc1f123c123f3188b070") sync_file_range(r0, 0x7, 0x7f, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@generic={0x0, 0xbf, 0x7fffffff}) r2 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x5, 0x1, {0x0, 0x0, 0x1, 0x3, 0xb5f1}}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x3f00) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xd4, r2, 0x320, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb535}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f0000000000)=0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x2c2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/125, &(0x7f0000000340)=0x7d) 19:55:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x2202, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) personality(0x410000e) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xe0002, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0x8, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:49 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x24d2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$TCSBRK(r0, 0x5409, 0x4) 19:55:49 executing program 2: r0 = dup(0xffffffffffffffff) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000300)=""/3, 0x3}], 0x4, &(0x7f0000000380)=""/19, 0x13}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = dup(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000000)={0x4, 0x800, 0x80, 0x6, 0x3}) 19:55:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900000efff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 388.721518][T16590] serio: Serial port pts1 19:55:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x105800, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x7a036071) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000100)) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0xb343, 0x95d5, 0x45b, 0x5}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x4, 0x2) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x18, 0x1c, 0x17, 0xc, 0x8, 0x8, 0x6, 0x165, 0xffffffffffffffff}}) 19:55:49 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = pkey_alloc(0x0, 0x8000000002) pkey_mprotect(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x2000000, r0) 19:55:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900000ffff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) 19:55:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$VT_WAITACTIVE(r2, 0x5607) 19:55:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x4000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x2, 0x80000001, 0x280, 0x4, 0xffffffffffffffc0, 0x2}) [ 388.990325][T16621] serio: Serial port pts1 19:55:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r2}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000000240)="79ab2fa5750b290d24e0f1eb0759c89ad9f12d97d59f44d29a2e2353b9198c75807b82c02cce440278e64550e43c4bf9e65422227d13ce8c05f1049877f0659f9c1868a5ee80fdfdb5a9105abab92b12dad78d59c80e67293e0ce9f5755501249112759b25d999856ebeb9dec56345926144a10db68fb2a430dafb95f8f31b34e8e36a38b1e78ffc7e8968a0902e7cf893791d2418a41e36525b5482b2e99b7a78fd16e34e004987a0719243a0ba51927e056cf5e09de38ff01ed24673eeb887c0dce3cb9b03bc06106689f15f09b625a71d9d1bbdf3b32dc751", &(0x7f0000000340)=""/25}, 0x18) 19:55:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe80900001cfff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x11) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000100)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) dup(r1) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x101) dup2(r2, r0) 19:55:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "eea8b63de2bb9cbe1736e11f6852c750fd6fc6e993c10cb908"}, 0x1d) 19:55:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000060fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffff00000001, &(0x7f00000001c0)="0a63a5520e2e26465b386371e8ed3b9deeb195e1b7d9b6efd1f4e79c0fd4ab23610419c679e5f39425d9aaa2c7fb8820b70feec3d7b67cbb635e5907a9295e7e9e5c1ad1c64d3395dad7eb906e77590f7d3a76c0f87ace92aeb4cc225b1cda2fcfb77684e161723e6a1f6fb2b9992a129a93a84172b65117de0f2536e5dd8326eb93b0b314faef40db7c5590ac1e383a8b20d5ba3e2fbd33cb3564178da64ebbf37ce713d17f1e6c025976b00c261e08b9cf") ioctl(r0, 0x40, &(0x7f0000000180)="6be34a66a0447ee187be5dfaccbb") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020808090400000028bd7000fbdbdf0500000000000104d5000004d200000000"], 0x20}}, 0x24000080) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) prctl$PR_GET_KEEPCAPS(0x7) 19:55:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x30, 0xc9dd, 0x8}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x40, 0xffffffff7fffffff, 0x8, 0x3ff, 0x1, 0x0, 0xbdc, 0xffff, r2}, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 389.243023][T16647] serio: Serial port pts1 [ 389.333729][T16655] serio: Serial port pts2 19:55:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x84000, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @loopback, 0x101}, 0x1c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000580)) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast1, 0x4e22, 0x0, 0x4e22, 0x800, 0xa, 0xa0, 0x80, 0xfb, r3, r4}, {0x9, 0xdb, 0x100000001, 0xffffffff, 0x60000, 0x401, 0x12, 0x2}, {0x4, 0xfffffffffffff2d0, 0xb5, 0x3}, 0x137, 0x6e6bc0, 0x1, 0x1, 0x1}, {{@in=@remote, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x34ff, 0x3, 0x0, 0x1f, 0x20, 0x4, 0x746}}, 0xe8) dup2(r2, r0) 19:55:50 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc00, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 389.540122][T16677] serio: Serial port pts1 [ 389.597278][T16677] serio: Serial port pts2 19:55:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x6000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3ff, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd20e1200000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x440100, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x8}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) 19:55:50 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x4200) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 19:55:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204000, 0x50) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x138, @loopback, 0x1}}, 0x0, 0x9}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r1, 0x200}, &(0x7f00000003c0)=0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x3, 0x80000001, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}) r3 = syz_open_pts(r2, 0xfffffffffffffffd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r4 = dup2(r3, r2) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x2, 0x7fffffff, 0x2, 0x3, 0x8, 0x1, 0x2, 0x9]}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) 19:55:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000100020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:51 executing program 5: rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x200) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$VT_DISALLOCATE(r2, 0x5608) 19:55:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000200020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 390.135626][T16721] serio: Serial port pts1 19:55:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x60ff) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="07000000c000"/16, @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400008001000000040000c00300000013d6d981c4f7cdeac3891b07dc9f2d4fb63209be39c3b5b90fc42e5ebf152a6c8df4102dd33ff9d813165aede4f62290a7afc326ff52e6f45c3e7a22d7310bb033c6ed8be824aea58cdfc98b802879640f00520e0d519400b7aee5de32c6020a935643cc7b60f57e63bf40aa207c7c"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x40) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000100)={0x0, 0x7, 0x4, 'queue0\x00', 0x9}) 19:55:51 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="b38b87c79ec4fe7a9725b6d507711a0e22c3ba6503ee9739551801dc2bad85689f892d8b067f57e29977", 0x2a, 0x10001, &(0x7f00000000c0)={r1, r2+30000000}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 19:55:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") dup(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000240)={0x2, "f8ab1fc7a0d016866012858f6e961ce15cebaed190f81fc9e4cee10d4dd46c1e", 0x10, 0x20, 0x2, 0x4, 0x3}) 19:55:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000700020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 390.743299][T16743] serio: Serial port pts1 19:55:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x44000, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000001c0)={0x0, 0x2, "e18422b6f171d1237037975af80f0fbdaa8c17b454a3431acd194125019cbc80", 0x6, 0x7, 0x3, 0x4, 0x2}) accept$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2f0000001800030007fffd946fa283bc8020000000040005031d8568130007005200000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r2, &(0x7f0000000080)=""/129}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) [ 390.802310][T16756] serio: Serial port pts2 19:55:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000a00020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003e00)='/dev/sequencer\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e80)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000003f40)={&(0x7f0000003e40), 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x2c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf6ad}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4004080) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x40) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x200000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r4, 0x40, 0xfffffffffffffffa, r5}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f00000001c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000300)=0x7) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 19:55:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="2adc1f123c123b3188b070") semget(0x2, 0x0, 0x500) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TCFLSH(r2, 0x540b, 0x1000) 19:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(0xffffffffffffffff, r0) r1 = getpid() rt_sigqueueinfo(r1, 0x19, &(0x7f0000000240)={0x3d, 0xfffffffffffffff7, 0x1000}) 19:55:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x7400) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0200001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x9, 0x40000) recvfrom$rxrpc(r2, &(0x7f0000000100)=""/152, 0x98, 0x3, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)) 19:55:52 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x101401) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000280)={0x0, 0x7, 0x2ae7, [], &(0x7f0000000240)=0x7658}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0400001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x9400) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000140)={0x1, 0x0, 0x100, 0x4, {0x57, 0x97b, 0x43b5, 0x101}}) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000100)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:55:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/6, 0x329}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/12, 0xfebb}, {&(0x7f0000000200)=""/141, 0x8d}, {&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f00000004c0)=""/229, 0xffffffffffffffe6}], 0x8, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x2, 0x4200) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000300)={0x0, 0x3, @stop_pts=0x7ff}) 19:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="092c35cc0188b50008f26f6b6c88e622e1217fa7e1351c15d2553a4a4d26b26ad0738c751609d390889d520833664fbc70c8e27dc6b47722e8b1c6ed4a563f9fe81dabe61a04a6db0fd9c34b6d9df6a8430db03cc08e289b9511d762e037f775b685f17b09d054684d64774f23b585ac768cb7eec9855eb1f72a76befc2d4f27fdd72f568e20e940c34cd364c6765efdda2ed3ba877004eb15c46e3b6625", 0x9e}, {&(0x7f0000000300)="e702bb9c426c23587c9fa0581e78bb8b4ef6d2c5762616133d7f98493b528c23357019a5fc8cd1697a2670c74463dd948be0fd71288b15e317a0c759e8c6bc9f99", 0x41}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000380)="738add17bc7226e9f4be53f909368bf8c8df3f05a51c992fd3d95c6c790d8d342fd02b10e73bbf445faf19593b6401ade0e64302dd576dc7f885375fecff92a6f21ec7d4d89c3d0d48172e286ced60fd7ac24376ec65fdb38f0d4edf180d2dbf14d5e66dad62f54ba6ed4c6e9dbe5bf991f180208db9823640af264ecd8a6c2f3cf89a7318d32023357c369ae5ba8ed3e534cc81c008a9bc9f926326e76241403364306fec03325d89a114173ffe262fd45e7d7dfcb4c7cbe60f935352481202328bf58db2ec378712833cf172def49613", 0xd1}, {&(0x7f0000001540)="41e88ccd7d08fab984544566dbdcbb8586c072847eb0d2d25c7059de244d36c3cf8d928e11c7569ba2f2c4ccb050b906c277011d23932b0e7c8f1e584e422a637f66be19df7a309e753f896e226a0ba3b384d61f4fbfc967f8016ad5cafa53fbc325b2b4b37bb74caa30faca51e5b78b0e86bb8aa41438abe6c7950e22bb5cd672a39c50fed2d9ad11e1b3ff20f12cc437015c829640229012", 0x99}], 0x5, 0xfb6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9d, 0x200) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)='/dev/ptmx\x00', 0xa) dup2(r1, r0) 19:55:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c124edc81b73229d16e3f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) openat$cgroup_ro(r2, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x40000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 391.412185][T16816] serio: Serial port pts1 19:55:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0a00001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'eql\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 19:55:52 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0xffffffffffffff88, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000300)=@rc={0x1f, {0x9, 0x1000, 0x1f, 0x1, 0x7f, 0x1}, 0x8}, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) finit_module(r3, &(0x7f0000000100)='/dev/fuse\x00', 0x1) fdatasync(r0) r4 = dup(r2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000002c0)={0x7000000a}) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) sendto$netrom(r0, &(0x7f0000000140)="7b80b5962dd41995e2b6e9931a00fa1f9dbc0b07a6", 0x15, 0x80, &(0x7f0000000180)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 19:55:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfb, 0x202800) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x180) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x111800, 0x0) syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x4, 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000440)={r2, 0x45433e65}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x80000000) dup2(r1, r0) 19:55:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000100)={0x2, 0x5, 0x101, 0x20a7, 'syz1\x00', 0x5}) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000), 0x4) 19:55:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0e00001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:52 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x2) [ 391.680034][T16843] Unknown ioctl 1074021320 [ 391.698617][T16843] serio: Serial port pts1 [ 391.755083][T16852] Unknown ioctl 1074021320 19:55:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b0703146edbfe264632c7c53b0d554422dd1950aa31c8568740de5002115637c23adea39a94bffd2b06d33cfe7e9f8acd6cd1eada1adf14db3e05d830fb95414b6877402223ff9d2d8cebc452b1734bae4dc3af92b737be85947e8148e1304c342f97c67bcbbd1ea8f34c3c884b33d4a993f24a129d16ea64f02155491932c1e809520a5fb64a45a2887cd0d7101") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x7b, &(0x7f0000000080), &(0x7f00000002c0)=""/123, 0x4}, 0x28) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) 19:55:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0405d2e0d1312f5cf2ad9b959faa7b2530a7b799d9"], 0x15, 0x1) dup2(r1, r0) 19:55:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x307100) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0f00001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x49eb4424}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 19:55:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000140)={0x1, {}, 0x0, 0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffff7ffffffd, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000000)) 19:55:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:53 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000080)={0x1, 0x1}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000140)={r1, r0, 0x5}) setxattr$security_smack_transmute(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000180)={{0x4, @name="c96fd82d6351b36593f05914c9288997e477f38cb793b753a76d1dc7e73d284b"}, 0x8, 0x7fffffff, 0xb7}) [ 392.381441][T16882] serio: Serial port pts1 19:55:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) rt_sigaction(0x1f, &(0x7f0000000100)={&(0x7f0000000000)="640f381ec90f3806f944d15d00c44262f5370f56792e0f654e4f8fa84087023b0f5cf7660f70eccf8fa870cea58300000042", {0x8}, 0xc0000001, &(0x7f0000000040)="c442e54746fd470f0feda0662666f2a7c44229bc668e8f497812cd3e660f38dca100000100c442abf5f0c4c13d6313c483794b9201000000be2e2e44dae9"}, &(0x7f0000000240)={&(0x7f0000000140)="c481cdd084238affffffc441f9e6ffc4227d5a098f2878c0d8bd450f4832c4010172e41e440f31c4e27d79a45600000000c4a3015db676d3ddfa0ac462490d150d000000", {}, 0x0, &(0x7f00000001c0)="660fd52ac441fcc6e334c4225dbe861e000000c423896d9800000000fec46229084484c7368c8000000080c4a2b1398600000021660ffb95b00000008f293091b500000080360f2ffb"}, 0x8, &(0x7f0000000280)) 19:55:53 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x4002, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000002c0)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x581180, 0x26) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x2, 0x4}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x0, 0x400, 0x1, 0x20}, 0x9, 0xffffffffffffff7f, 'id1\x00', 'timer0\x00', 0x0, 0xae8, 0x1f, 0x80000001, 0xffffffffffffff97}) 19:55:53 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x10000, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:55:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd1c00001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = syz_open_pts(r0, 0x200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:55:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x400000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x4, 0xfffffffffffffe00, 0x1, 0x0, 0x8, 0x101, 0x9, 0x4, 0x6, 0x2, 0x100}, 0xb) r2 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:55:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x50b000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:53 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000080)='net/raw6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x2) [ 392.672369][T16926] serio: Serial port pts1 19:55:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd6000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:55:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x100003c9) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0x10001) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = accept(0xffffffffffffff9c, &(0x7f0000000240)=@alg, &(0x7f0000000100)=0x80) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000300)={0x3ff}, 0x1) setsockopt$rose(r3, 0x104, 0x7, &(0x7f00000002c0), 0x4) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000400)={0x5, 0x8, 0x2, 0x0, 0x20}) dup2(r1, r0) 19:55:53 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81, 0x18) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000040)={{0x2, @addr=0x31d54b52}, "76093e5fb695a6b34e76ba65dd8108189d534823985d9c3d4e93d6f7a68f4195", 0x2}) 19:55:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0xfffffffffffffff8, 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r4 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffff9c, 0x0, 0xe, &(0x7f00000001c0)='eth1cgroup^^+\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, r4, 0x0, 0x10, &(0x7f0000000180)='keyringvboxnet0\x00', r5}, 0x30) dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000340)=0xffffffffffffff11) 19:55:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x70a000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000100)=""/4096) 19:55:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$amidi(&(0x7f0000001800)='/dev/amidi#\x00', 0x20, 0xa0080) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="000025bd7000fbdbdf250e0000005000070008000100080000000c000400090000000000000008000200120000000c00030000000000000000000c000300f5090000000000000c00040001000000000000000c0003000700000000000000080002000400040044000200080001000004000004000400080001000100000008000100080000000400040004000400040004000800020004000000080002000300000008000100050000a86200090008000100010001000800010009000000080002000200000008000200c900000008000100ff000000080001000100000008000200090000000800010009000000440002000400040004000400040004000400040008000100080000000800020003000000080002000100000008000200ff7f000008000100010000000800010018ffffff"], 0x138}, 0x1, 0x0, 0x0, 0x4000081}, 0x4010) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) write$P9_RMKNOD(r4, &(0x7f0000000240)={0x14, 0x13, 0x2, {0xc, 0x3, 0x4}}, 0x14) dup2(r3, r0) 19:55:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5ddf000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x7f}, 0x28, 0x1) 19:55:54 executing program 4: getcwd(&(0x7f0000000340)=""/217, 0xd9) 19:55:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x713000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x31, 0x5, @tid=r2}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"/529], &(0x7f0000000240)=0xf3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x101000, 0x0) fcntl$addseals(r0, 0x409, 0xb) 19:55:54 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x42, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x401, {}, {0x0, 0x2710}, {0x2, 0x80000000, 0x0, 0x1ff}, 0x1, @canfd={{0x2, 0x3, 0x3, 0x7ff}, 0x3b, 0x3, 0x0, 0x0, "da862dbe1f83924e5dc15fc496839073cf99313512cab61c6f5978768d2d0847677a166b934345a63f4d67dcf15b3efb3937b1835badbe5b433292465cd0ad09"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 19:55:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0b01001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 393.175286][T16987] Unknown ioctl 21569 [ 393.197953][T16990] serio: Serial port pts1 19:55:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x4, 0xfffffffffffffe44, [], 0x23e, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x100000000, {0x80000000, 0x20, 0x9, 0xffffffffffffff00, 0x1, 0xfffffffffffffffb}, 0x7fffffff, 0x32}, 0xe) socket(0xf, 0x4, 0x3ff) 19:55:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x740000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 393.281789][T16990] serio: Serial port pts2 19:55:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 19:55:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000a001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x5, 0x33, 0xa, 0xc, 0xa, 0x0, 0x3, 0xaa}) r3 = syz_open_pts(r0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x1, 'G'}, &(0x7f00000002c0)=0x9) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x1, 0x8}, &(0x7f0000000340)=0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r3, r0) 19:55:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sysfs$1(0x1, &(0x7f0000000000)='security[\x00') r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000100)=0x4) 19:55:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0x128, 0x308, 0x228, 0x128, 0x128, 0x440, 0x440, 0x440, 0x440, 0x440, 0x5, &(0x7f0000000040), {[{{@ip={@empty, @broadcast, 0xff, 0xffffffff, 'rose0\x00', 'irlan0\x00', {0xff}, {0xff}, 0x8e, 0x1, 0x48}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x15, 0x8, 0x70d6, 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x605, 0xba, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @broadcast, @multicast1, @icmp_id=0x68, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x40, 0x20, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1b, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @port=0x4e20, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x98, 0xe0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv4=@loopback, @ipv6=@empty, @port=0x4e23, @icmp_id=0x64}}}, {{@ip={@rand_addr=0x3, @multicast2, 0x0, 0xff, 'eql\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x21, 0x2, 0x20}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x6, [0x3a3f, 0x10001, 0x100000000, 0x2e7, 0x4, 0x1e8], 0x8, 0x1d7e}}}, @common=@inet=@tos={0x28, 'tos\x00', 0x0, {0x3ff, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @remote, @rand_addr=0xffffffffffff0001, @port=0x4e21, @icmp_id=0x65}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 19:55:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 393.513120][T17025] serio: Serial port pts1 19:55:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xa800, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001200)=@sack_info={0x0, 0x2f0f, 0x3}, &(0x7f0000001240)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001340)={r3, @in={{0x2, 0x4e20, @loopback}}, 0x200, 0x5}, 0x90) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000011c0)={0x1, 0x22d, &(0x7f0000000100)="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", &(0x7f0000001100)="2c81d37b3fc00e1edf816efd2209994e07d3e416d5175c9d2cf86a5e3d917a7f9e012dc4331a2203b4896fbd667ebb6d546bc7c3d92ab38cdf55e3a5f777ac63104b2edde1bdb8c24fa59136605bd1a38072dc65547cd9f56269fd9f208dcdefa8fee3a7dda4cf1f6b4cc1e07dc2e833482bcdfddbd07c1c5c00930fb55381a1715399dc478d62f1f2005df7a8d38b2217f00adce00c6aa89a424b8079501d2770", 0x1000, 0xa1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x410000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001440)={r3, 0xfffffffeffffffff, 0x30, 0x9, 0x80000001}, &(0x7f0000001480)=0x18) r4 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x0, @name="dc615dd01813fa7ff3b30b90dcffe482d025446e3d5b0af44e7adc8ae711f3aa"}, 0x8, 0x2, 0x6}) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000012c0)={'mangle\x00'}, &(0x7f0000001400)=0x54) 19:55:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x940000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd010b001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x3}, [{0x2, 0x6, r1}, {0x2, 0x6, r2}, {0x2, 0x5, r3}, {0x2, 0x2, r4}, {0x2, 0x2, r5}], {0x4, 0x6}, [{0x8, 0x4, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x4, r9}, {0x8, 0x6, r10}], {0x10, 0x4}}, 0x74, 0x1) 19:55:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) setsockopt$packet_int(r0, 0x107, 0x645c3cf3b95a35a7, &(0x7f00000004c0)=0x8000, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x48010, r1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) getuid() lsetxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0xbd, 0x0, 0x403, "b8fb7d9cb666138b5650583de52f3047", "31fc73c11bcdfe138e2c0d925971e16a89f189ba2f05541fb4c53f01ec806c76ff06153ec0adc5f171f04205c8e1c7e4261a285b7e940546210f6f91e4d6631a700374561829f9e0f4ff9ae5554b9af095cfa9997cbba445fc970df061352ee9aede469cc3cd4a6f66ef054294f9d997a73cee1d02130d4edec366ae6ccd0a2accb2fd138bfca0152e0cc8792dcc0ee5db4ff825351d7d96019cb7e0ae8bf05986f8759845f6c6f4"}, 0xbd, 0x1) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[]) openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x40, 0x0) dup2(r1, r0) 19:55:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 19:55:54 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x2) 19:55:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000900)={@loopback, 0x76, r2}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4004010) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x8001, 0x100000001, 0x0, 0x7, 0x0, 0x10000, 0x0, 0x2, 0x5, 0x5, 0xc457, 0x401, 0x17b0, 0x5, 0x4, 0xec02, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x9, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x80, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2020, 0xfff, 0x400, 0x0, 0x0, 0x8, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0x2, 0x4, 0x2, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000200)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x0, [], 0x6, &(0x7f0000001b00)=[{}, {}, {}, {}, {}, {}], 0x0}, &(0x7f00000003c0)=0x78) [ 393.753619][T17054] serio: Serial port pts1 19:55:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000e001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 19:55:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0xf7) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r0, &(0x7f0000000500), 0x0) dup2(r2, r0) 19:55:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000f001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/212) 19:55:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xa07000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x400000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000100)) 19:55:55 executing program 4: ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 19:55:55 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000010000000000060005000000000000000000000000000007000080160e0000050000000500000008000000400000000400"/71]) syz_init_net_socket$bt_l2cap(0x1f, 0x20000000000001, 0x2) 19:55:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd001c001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:55 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x12040) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x40400) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x2}, 0xf) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:55 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x688000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0xdde0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) 19:55:55 executing program 4: ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 19:55:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0060001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r0, r0) 19:55:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xb05000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:55 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) 19:55:55 executing program 4: ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) [ 394.678943][T17125] serio: Serial port pts1 19:55:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00f0001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x20000000000003, 0x2) 19:55:55 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 19:55:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0002001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x84b00) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80, 0xb, 0x3}) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x1000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:56 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 395.465344][T17130] serio: Serial port pts2 19:55:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)=0x4) 19:55:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) get_robust_list(r2, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000100)={&(0x7f0000000240)}, 0x0, &(0x7f0000000140)}, &(0x7f0000000200)=0x18) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) 19:55:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0004001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:56 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 19:55:56 executing program 4: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 19:55:56 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2000005, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x3, {0x0, 0x1}}, 0x20) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)={0x53, "639367f97849dbcd868e3953472acf5df180258e10d19d567403d0ed1d1e0fb3f13528183ad5500e35685a7c117a0072304bba7df1234134ccd41f129db22b3570129db9f5af4af60a4c0b3aa6c1e1d7de8016"}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}) 19:55:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000a001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:56 executing program 4: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 19:55:56 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x1, 0x8, 0x8, 0x4, 0x5, 0x80000001, 0x2, 0xb}}) 19:55:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x2000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) connect$vsock_dgram(r2, &(0x7f0000000100), 0x10) 19:55:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000e001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:57 executing program 4: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 19:55:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffd, 0x3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r3 = dup(r2) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) write$P9_RLOPEN(r3, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x2, 0x2, 0x7}, 0x80000001}}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x1020, 0x4) [ 396.012933][T17232] serio: Serial port pts1 19:55:57 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x3, 0xffffffffffffff80}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:55:57 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) fcntl$setsig(r1, 0xa, 0x12) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/6, 0x6}], 0x1) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) 19:55:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000f001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0x2, 0x0, 0x6c5f3812, 'queue1\x00', 0x10001}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x7fffffff, 0xf0dc}) [ 396.152008][T17232] serio: Serial port pts2 19:55:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) pipe2$9p(&(0x7f0000000000), 0x4000) 19:55:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) [ 396.333245][T17265] serio: Serial port pts1 19:55:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd001c001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x3000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:55:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400400, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x5, 0x0, [{0x9, 0x2, 0x0, 0x0, @irqchip={0x7, 0x7fff}}, {0x10001, 0x1, 0x0, 0x0, @irqchip={0x3, 0x401}}, {0xe8, 0x7, 0x0, 0x0, @irqchip={0x101, 0x1}}, {0x1, 0x5, 0x0, 0x0, @msi={0x401, 0x7, 0x3}}, {0x5, 0x0, 0x0, 0x0, @adapter={0x0, 0x8, 0x6, 0x3ff, 0x9}}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:55:57 executing program 5: unshare(0x10000000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffffffff80000001, 0x5}]}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000000c0)={0xe, 0x2, 0x8}) 19:55:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @initdev}, &(0x7f0000000200)=0xc) bind$xdp(r1, &(0x7f0000000340)={0x2c, 0x4, r2, 0x14}, 0x10) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x800000002) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r3, r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) 19:55:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0060001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:55:58 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x150, 0x7, 0xf, 0xf00, 0x70bd29, 0x25dfdbfc, {0xc, 0x0, 0x7}, [@nested={0x0, 0x7d, [@typed={0x0, 0x82, @uid=r1}]}, @typed={0x8, 0x88, @u32=0x2}, @generic="8cdf2563d8b3ac4bfff1e9d75d64381fc8641488d3e01bf967725f0e2263c113f11fe15b64f9c6106537e40c1c0af308bf57cb510f46ba83ce004358e501a85d407385f48d7353e67567e0e770d6504ef58ff05f04356446e5cde52f60a52f7e2003", @typed={0x18, 0x49, @str='bdevtrusted\'bdev\x00'}]}, 0xfffffffffffff24b}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000040) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@null=' \x00', 0x6, 'irlan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) [ 396.891767][T17297] serio: Serial port pts1 19:56:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00f0001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x8, 0x10000000200000, 0x9, 0xa, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d2, 0xf4a0, 0x8, 0x49, 0x3, 0x60000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x11, 0x4}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:00 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) 19:56:00 executing program 5: 19:56:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000000)) 19:56:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x4000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 399.260294][T17321] serio: Serial port pts1 19:56:00 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x420000) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)="9179f16b001f34bc08a2c03bffb73ed4daf5f5966312f4e077d549769b9ff4fd4658ce3b51dfa467fd1ee23ce5cbcdd6b4d12ed5440e89502e3fe625ce613820d540da5cac7b54732af79dab03ec4196e9614f52ef6f8d7cf3cd7d83f4c3f0767d0efae5ed67fe56fc3e74af6cdd51b57620cb6334d62de362e1704d41886e0b5e8e0f59fe6538584b30b89699a465b0523165e32c987d0864f848ed19dea7c699529ddbf27dd8d2b0cacc26915b83fec2a51921db8c501302b7cb6b70e1ea") setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TIOCCBRK(r0, 0x5428) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x3ff, 0x3ff, 0x202, 0x7f, 0x2, 0x0, 0x7, 0x3, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1, 0x2}, 0x8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) 19:56:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001440), &(0x7f0000001480)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x5, &(0x7f0000001380)=[{&(0x7f0000000100)="e23fda681ab1ecbf5ecab172144c417fc18cc0022af2191276e5a5df3092f70a224e361c485aaf4ea3a2dd74f04cada668ea4e2d8d0882508163c92069802e6012f2a963ccd5877bc821fb7e8a229d174fc7dea6a1f2917d7c7d2b63d79a40a18c85ba9965cbd33fb3e3ae08b1743c4e0df2", 0x72, 0x8}, {&(0x7f0000000180)="d6ffad88688cc8dd867a93e809e4e10f1580353080a4c4fd7519581a073a", 0x1e, 0x1}, {&(0x7f00000001c0)="85b400331d24dabe16f28a0c16a6b0ef93d1db57aa228df26eef9b1d55e6ceb8f6db1d3c10d859e6531b666567254b5de4a7daf5754ca767dfeb4b014a1a3d0e8cb2094d64418ebf737abaf93b16e31e1f70333a94239be98733b88c6ed69df7931cf5d7ad5b1f7025815485f3ed286175472d33668b950e0d733aac82309250bba63be36d3da85be8dc5849d53268775eb84a288e75dc3be9c2e59934a674b20c3b69af02cc0a807d1830069079fb6aa9526926f81bca755cb9b101df4e92612e6bfd9c1d8fe3235888a91c004c4333687ceeaf60", 0xd5, 0x1f}, {&(0x7f00000002c0)="bcf842b9284abd03ead33ebb7cf8db868b736c4a5f65eb1eaa5b807218d93af812f42e64e3d6c4d7c5e97dd7677d669cab01c44f650c62592ecb98ffa7e2ff64355fc58f315ed4a4640defbabb94e79b0f010956a3aa0d7486c5b1e13e306c6e2bfc4a3c344c6b49de99dde030b739abaec302878b3f363702a70020e8ab1f4ce53dbcf7dab05887c759f29290f5a78b7c07f0e976ecdcce17f9fa0e58e56e417aadade292217a07f231", 0xaa, 0x4}, {&(0x7f0000000380)="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", 0x1000, 0x1}], 0x2400, &(0x7f0000001400)={[], [{@subj_user={'subj_user', 0x3d, 'mime_type\'cpuset'}}]}) 19:56:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000b011000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) 19:56:00 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) dup3(r0, r0, 0x80000) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r2, r1, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 19:56:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x7e0a, 0x2c00) rmdir(&(0x7f0000001500)='./file0\x00') ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001540)) sendmsg$rds(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/115, 0x73}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f0000001440)=""/6, 0x6}], 0x4, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000240)={{0x1000, 0x4}, 'port1\x00', 0x40, 0x80030, 0x8dc7, 0x2, 0x31a06db5, 0x4324, 0x20, 0x0, 0x2, 0xffff}) dup2(r1, r0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000001580)=0x6) 19:56:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)="534d2705c5165a5494da6247a8c63e3371e8143bddaf13d1ca8f7eb0474fa10712d616de422a433b6809f0b6f04ea4cd0c3fa91acd6b8a03a8bfd65091eef296a6cda545818526bf1c892495ebe05dc59be335d79bf7ea92e5fbd0fa7d0f77ca38c434518f734aa107476dbfe1f0c2158ff0e7e38cb4092421c769d2c705983cc994bceacbabfacf612f5e9566dea0c4") 19:56:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000a1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x6, 0x803) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) [ 399.600207][T17361] serio: Serial port pts1 19:56:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sync() 19:56:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0xffffffff, 0x1ff, 0x8, 0x20, 0x10, 0x2, 0x401, 0x5, 0x0, 0x7, 0x6, 0x7fffffff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x103000, 0x0) r1 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000580)=0x10, 0x80000) sendto(r1, &(0x7f0000000700)="c064fcba020423c04cf3972614f4e5a72b3f8077137305127f95e97cccf19c5d832ef85eea1da2d7c6197b328614edbb1e2b8e514d232d5423fa2c653e8051ae2e876c12f071b1ef414627d030b3de6f463b5d992337353bfe51c976b0fe17fe08b78649e27779b353f1cced911b973f143319d86a484c8324b37d4900", 0x7d, 0x1, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e22, 0x9, @mcast2}}}, 0x80) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) getgroups(0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xee01]) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d756e69782c6455f944f60b2b3e666c746769643d", @ANYRESHEX=r3, @ANYBLOB=',cache=fscache,subj_type=[GPL#$(,uid=', @ANYRESDEC=r4, @ANYBLOB="2c726f6f74636f6e746578743d757365725f752c6673757569643d3977373b66647b352d003b32772d373036002d3633007d2d387f7e33003776662c00"]) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) dup2(r2, r0) [ 399.835201][T17385] serio: Serial port pts1 [ 399.895734][T17389] serio: Serial port pts2 19:56:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x5000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00010b1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:01 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/54) 19:56:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readahead(r0, 0x7ff, 0x4) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) signalfd4(r0, &(0x7f0000000080)={0x3}, 0x8, 0x80000) 19:56:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)=0x4) 19:56:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r0) 19:56:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000e1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 400.157724][T17406] serio: Serial port pts1 19:56:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$rfkill(r2, &(0x7f00000002c0)={0xd5e9, 0x6, 0x2, 0x1, 0x1}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x21a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setgroups(0x3, &(0x7f0000000380)=[r5, r3, 0x0, r4]) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) 19:56:01 executing program 5: socketpair(0x8, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:56:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)=0x4) 19:56:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000f1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x6000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:02 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x5, 0x1, 0x0, 0x3, 0x4, 0xa4, 0xc74, 0x401, 0x100, 0x100, 0x3, 0x8001, 0x80000000, 0x8, 0x1, 0x11}}) 19:56:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00001c1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:02 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x521900, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000100)) r2 = dup(r0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)=0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)=0x4) 19:56:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = gettid() ptrace$setsig(0x4203, r2, 0x1, &(0x7f0000000240)={0x34, 0xfffffffffffffb01}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x3, 0xc79b, 0x1, 0x6}) dup2(r1, r0) 19:56:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20080002) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x109802, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000340)={0xc0000000, 0x9, "0316c622575f16d63b07f9bc761ce56783a9f97cc4a54d6d96bc0add8135818f", 0x100000000, 0x38, 0x400000000000000, 0x9, 0x2ac, 0x80000001, 0x10000, 0x3, [0x3, 0x2, 0x80000001, 0xfffffffffffffff8]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x181280, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f00000002c0)) r4 = dup(r2) sendto$llc(r4, &(0x7f0000000140)="dc74fc59094a75d09ba4612d596853a0c6602af0a014f3715bd338d53e8be4e0eeabb89dea10eaabeaa23bd7f44a03330c38ae49c9b035f073edc2e19c6ae0ff8287cacf384f029becd2efb9e27a5a193afb416bf4dd7adc5b2827453f098fa4be7424a75cc9af2efba17bde4916edebac6a9cfdabdf528afb14bae473af8941648ace88ca17845a67633e10f67c77ae500cf6f7949228ec74c6d0be3eb62f5aadaf0c3bc73e0b0b40ff98d78631b90f22df47ab37bf222300ac81b0facc8aecc1", 0xc1, 0x4000000, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 401.119661][T17479] serio: Serial port pts2 19:56:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000601000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:02 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x8000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 401.189652][T17486] serio: Serial port pts1 19:56:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/204, 0xcc, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r2, r3, r4) dup2(r1, r0) 19:56:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0xc850ab88124d9fd5) [ 401.441042][T17509] serio: Serial port pts2 19:56:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000f01000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xffff, 0x8000}, 0x2) 19:56:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x7000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) 19:56:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x1, 'syz0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = dup2(r1, r0) r3 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xa, 0x3, 0x4, 0x3fff800000000, '\x00', 0x1c9c800}, 0x2, 0x30, 0x800, r3, 0x1, 0x7, 'syz0\x00', &(0x7f0000000000)=['/dev/ptmx\x00'], 0xa, [], [0x2, 0x8000, 0xffffffffffffffff, 0x6]}) 19:56:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) [ 401.937032][T17529] serio: Serial port pts2 19:56:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000700020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/200, 0xc8}], 0x2}, 0x2000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x101401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000005c0)={0xf9c0000, 0x10000, 0x7, [], &(0x7f0000000580)={0x990a64, 0x10000, [], @p_u32=&(0x7f0000000540)=0x4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x53, 0x9}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000680)=@assoc_value={r5, 0xfffffffffffffffa}, 0x8) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001200000125bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="08100400800200000c000101000000000000000008001300", @ANYRES32=r4, @ANYBLOB="24000e000100000001000000c606000000000000680b00000000000004ffff0900000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000006c0)={r3, 0x1, 0x6, @random="a52af612e698"}, 0x10) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:03 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x80000000000003, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000002140)=""/4096) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/238) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) 19:56:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x800) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0x6, 0x5, 0xd68, 0x9, 'syz1\x00', 0x6}) r5 = dup2(r2, r4) ioctl(r0, 0x1000008915, &(0x7f0000000040)="0adc1f123c123f3188b070") r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f00000000c0)={0x3, 0x100000000}) 19:56:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000a00020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 402.170874][T17557] serio: Serial port pts2 19:56:03 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x80000) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, r1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xee00]) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x5c0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4, &(0x7f0000000100), {[{{@ipv6={@remote, @rand_addr="eeb07eaf516705044340c568de780019", [0xffffffff, 0xff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'rose0\x00', 'ip_vti0\x00', {}, {0xff}, 0x2b, 0x446, 0x5, 0x2a}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:hostname_exec_t:s0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, [0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xff, 0xff], 'vlan0\x00', 'team_slave_1\x00', {0xff}, {}, 0x4, 0xfffffffffffff001, 0x2, 0x1}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@owner={0x38, 'owner\x00', 0x0, {r2, r3, r4, r5, 0x4}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0xb2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x4}}}, {{@ipv6={@ipv4={[], [], @loopback}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0x0, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'nr0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x33, 0x10000, 0x7, 0x8}, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x3f, 0x6d84, 0x80000000, 0x6, 0x6, @dev={0xfe, 0x80, [], 0x2a}, @dev={0xfe, 0x80, [], 0x28}, @mcast2, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 0x2000, 0x205}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d6, 0xfffffffffffffffc, 0xfff, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x56, 0x4, 0xa4d}, {0x1, 0x589b, 0x6}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x7ff, 0x0, 0xfff}, 0x3, 0x80000000, 0x2}) write$P9_RWALK(r0, &(0x7f0000000040)={0x30, 0x6f, 0x1, {0x3, [{0x83, 0x0, 0x5}, {0x48, 0x4, 0x4}, {0x857bbf5a0ce8925b, 0x0, 0x7}]}}, 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) [ 402.234119][T17563] serio: Serial port pts3 19:56:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x8000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:03 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0xd4002, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x20, 0x9, [0x8, 0x101, 0x3, 0x9, 0x23a2, 0x2, 0x7, 0x33c148af, 0x7fffffff]}, &(0x7f0000000380)=0x1a) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x4, 0x9, 0x40, 0x100000001, 0x12, 0xc19, 0x3, 0x200, 0x0, 0x7631, 0x3f, 0x4f99fedc}) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) sendfile(r3, r0, 0x0, 0xafe) r4 = dup2(r3, r2) time(&(0x7f0000000400)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', r5}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000240)=""/240) 19:56:03 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x8}, 0x2) 19:56:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000021000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:03 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = dup(0xffffffffffffffff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x1f, 0x5, 0x2000}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x2, "b590ff261b78d5dd"}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='Ud/4\x00\xa3\x97\xad\xd5\xd1\x03Y\x1bq\xdbrZN\xdb\xa6I\x92\xa6\x81e\xef\xb0\xe5\x9f\x1d\xb1Q\\\xee\x8b\xfc\xec*\xe8:\xf3\xc7w[\x86\xd6\xd2\xb5\xa5\x9f\xd5\xd4\xdes\x0f\xe6\xf5$\x83\xdc\x86\x8b\xfa\a\xd6\xf7}\x03\xbd\x05\x91\xec\x8c\xf3\x91o\x02-\x16~\x8c\x93{\x1c\x8cy<\xb4 \xfe\xdaY\xcb0x0, @in={{0x2, 0x4e21, @rand_addr=0x1f}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x7, 0x209, 0x9, 0x6, 0x9, 0x5, 0x7fffffff, r2}, 0x20) getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000200)=0x10) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x2) 19:56:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000041000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/236, 0xfffffffffffffcee}], 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10b000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x1c, 0x8]}, 0x8) dup2(r1, r0) 19:56:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000400000000"], &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @local}}}, 0x84) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x400, 0x1) r3 = dup(r1) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000240)=0x4, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xda0c0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x8) setsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0x46800) 19:56:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x9000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2301, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x100}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x17) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xfffffffffffffef0}], 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffd, 0xf1, 0xffffffffffffffff, @buffer={0x0, 0x71, &(0x7f0000000240)=""/113}, &(0x7f00000002c0)="07993815d42c980fd92de654eb405e443128ed9c8d4981027e308958237087637547da7b69333d7d25a9ef9e0cce9e5aad79721cfe1da3ff73651349c0eecbfd30765656958a50bf4a7c38669a3a944ce4a2ace5a45bffb54e5d4f5fdea10163e659356ade7d08cb16faa9774a5b774fa484cb15fc17666f2d46d1ee866b119f724fe4803c4c27a3703d03e4d752091e219fe45bbc172dbc48b85fa215d2cbff6daf8d2023e47aa7c2391621aacc1b286b8cc2164a4cb47ce6d0cf887358ffe64fb394237d90a95e4667b49b09192b461f2c3b7343c374a367f6df8e7d4b4122045114127fe907bbf0a997bd47bb8571fa", &(0x7f00000003c0)=""/209, 0x0, 0x6, 0x0, &(0x7f0000000100)}) dup2(r2, r0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000004c0)=@bcast) 19:56:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000a1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f0000000000)=0xffffffffffffff9e) acct(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) bind$bt_hci(r2, &(0x7f00000016c0)={0x1f, r3, 0x1}, 0xc) sendto$llc(r2, &(0x7f0000000100)="d2cb3471b56659108f098e1cd15f2632182695d26d3113a6f48b2cc64e14d8e649159ceead5c0ec070aa1834388419c14e06097971d4e9b47d4399078d20dc6ac4a18d8fa6757fc559a7651eb70fbf2071693929fa3c5e664f193971f44fc815813bf2b54a6437eb6ac378108df24a6b1fee4913a3d7ba753fd33f878af6565dfe2e206bf6a89773851ab661ce6db911035ac309fc70bbb5ea0c689f1cfafc4f496252fd268c398f275e348d601bcfb9d03f7bafc8f16fa3c649b9ab1d", 0xbd, 0x20000000, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x1) 19:56:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r1 = semget$private(0x0, 0x3, 0x440) semget$private(0x0, 0x7, 0x1) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000000)=""/158) fchdir(r0) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000001740)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001780)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000017c0)={0x0, 0xda}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001840)={r3, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @broadcast}}}}, &(0x7f0000001900)=0x84) 19:56:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000e1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 403.731329][T17651] Unknown ioctl 4 19:56:04 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000029000000050000000000029a"], 0x14}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x6, [0xff, 0x5, 0x8, 0x8, 0xb2, 0x1]}, &(0x7f00000000c0)=0x10) sendmmsg(r1, &(0x7f0000007d80), 0x6, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x4, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x3, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x9ab4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 19:56:04 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x3, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:04 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x6) [ 403.760343][T17651] Unknown ioctl 21539 [ 403.776153][T17651] Unknown ioctl 8837 19:56:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000f1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000000)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x30}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000300)={r3, 0x2}, 0x8) dup2(r1, r0) [ 403.820854][T17662] Unknown ioctl 4 [ 403.830701][T17651] Unknown ioctl 21539 [ 403.839229][T17662] Unknown ioctl 8837 [ 403.965018][T17677] serio: Serial port pts1 19:56:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_crypto(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:05 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x240, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x404240}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250100000000000000024100000010000369623a687773696d30000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x101080, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=""/250, &(0x7f0000000240)=0xfa) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x80) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x100000000, 0x1000, 0x4, 0xd5, 0x16, 0x400}) 19:56:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xa000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00001c1000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x4, 0x20}) 19:56:05 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x6) 19:56:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000000)) ioctl(r1, 0x200, &(0x7f0000000040)="f4c121059862774efa2ee5404c2c8ff5e9e048469a29e5") [ 404.568360][T17691] serio: Serial port pts1 19:56:05 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x6) 19:56:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000601000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:05 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0xd00, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 19:56:05 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:05 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000140)={0x2, 0x7, 0xf7, 0x9, 'syz0\x00', 0x400}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x2) fcntl$dupfd(r0, 0x406, r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) sendfile(r0, r1, &(0x7f00000001c0), 0x80000000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x9, 0x0, [0x6, 0x92, 0x4, 0x1, 0x0, 0x0, 0x100000001, 0x0, 0x4, 0x5, 0x4be2, 0x100, 0x3, 0x1, 0x1, 0xef]}, {0x0, 0x0, [0x101, 0xffffffffffff0001, 0x9, 0xfff, 0x5, 0x200, 0x2, 0x8, 0xef, 0x9, 0x6, 0x0, 0xe, 0xffffffff, 0x1f, 0xfffffffffffffffc]}, {0x2, 0x0, [0x1, 0x7fffffff, 0x6, 0x6, 0x9, 0xffffffff, 0x200, 0x1ad, 0x8001, 0x80000000, 0x400, 0x3, 0x1, 0x9, 0x9, 0xffffffff80000001]}], r3, 0x1, 0x1, 0xd8}}, 0x20) 19:56:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000200020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) [ 404.819627][T17724] serio: Serial port pts1 19:56:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xb000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0x0, 0x5, 0x20, 0x1, 0x3, 0x0, 0x3ff, 0x80000000, 0x3, 0x1, 0x0, 0x20, 0xacbd, 0x3, 0x8]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x6, 0x8200, 0x401, 0x3, 0xeec4, 0x0, 0x1, r3}, &(0x7f0000000240)=0x20) r4 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:06 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x803, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/214, &(0x7f0000000180)=0xd6) 19:56:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000700020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000000a00020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:06 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newaddr={0x48, 0x14, 0x108, 0x70bd2b, 0x25dfdbff, {0x2, 0x7f, 0x8, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x106}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x11) 19:56:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f129a223c12090088") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:06 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) rt_sigsuspend(&(0x7f0000000080)={0x4}, 0x8) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$unix(0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup3(r2, r1, 0x80000) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000000)={0x0, @motion_det}) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x404000, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/.yz0\x00', 0x1ff) ioctl$FS_IOC_FSGETXATTR(r5, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x500}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000200)={{0x77359400}, {r6, r7/1000+10000}}, &(0x7f0000000240)) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f0000000540)=ANY=[]) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000100)={0x9, 0x7, 0x1, 0x1ff, 'syz0\x00', 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000001fd8)=ANY=[@ANYBLOB="fa07000033da0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) socket$kcm(0x10, 0x200080000000002, 0x0) [ 406.055606][T17807] hfs: can't find a HFS filesystem on dev loop5 19:56:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xc000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:07 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x6) 19:56:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000040)="0a4830123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001002020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:07 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x6) 19:56:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001004020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:07 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x6) 19:56:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x0, @remote, 0x4e21, 0x0, 'sed\x00', 0xb, 0x81, 0x26}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x3f, 0x3b4, 0x2}}, 0x44) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100a020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 406.958112][T17862] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 407.042916][T17871] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 19:56:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xd000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:08 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x10000000000fffc, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') accept$packet(r0, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x59c1, 0x7, 0x1ff, 0xc7, 0xfffffffffffffff7, 0x9, 0x20000000, 0x3, 0xfd7, 0x8, 0x794, 0x746, 0x3}, {0x8, 0xa5, 0x0, 0x0, 0x1ff, 0x7fffffff, 0x3f00000000000000, 0x0, 0x8, 0x2, 0x0, 0x7, 0x16}, {0x8, 0x1, 0xffffffffffffffff, 0x7, 0x80000001, 0x5, 0x8, 0x80, 0x7fffffff, 0x6, 0x800, 0x0, 0x2}], 0x8}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x3}, &(0x7f0000000140)=0x3a9) accept4$nfc_llcp(r0, 0x0, &(0x7f00000001c0), 0x80000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r2, 0x7fff}, 0x8) 19:56:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100e020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:56:08 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0xbffffffffffffffb, 0x4) 19:56:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@remote, @empty}, &(0x7f0000000240)=0xfffffffffffffdea) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0xffffffff, 0xffffffff, 0xff0000000000, 0x100, 0x1, 0xa5, 0x6, 0x9b1b, 0x400, 0x20, 0xb682}, 0xb) r4 = accept$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000280)) rseq(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2, 0x40, 0x10000, 0x5}, 0x3}, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={r3, 0x2}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) readahead(r1, 0x81, 0x545) 19:56:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:56:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100f020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/188) [ 408.044214][T17943] gfs2: not a GFS2 filesystem 19:56:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xe000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 19:56:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x7e0000000000, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x20) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)=0xfffffd49) 19:56:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000101c020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:09 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x4ca, 0x2eb) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x82c0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x200) 19:56:09 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) 19:56:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 19:56:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001060020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x40000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xc0000, 0x0) 19:56:09 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 19:56:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000030000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xf000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffc9a) 19:56:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000010002c0000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 19:56:10 executing program 5: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x82, 0x400) ioctl$KDENABIO(r5, 0x4b36) [ 409.399430][T18007] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000030000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:10 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x2) 19:56:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000010002c0000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:10 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffd, 0x2) 19:56:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x10000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) write$9p(r2, &(0x7f0000000000)="74d1e0d64899164be92e97b4df70d9993102ff0e698276a43784cfbf0ba69196334714f5f83c9042e558468f79f70a5a75584be819c630a3fdf620bc0f3d6550", 0x40) 19:56:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:11 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x2) 19:56:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020200000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:11 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) 19:56:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020400000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ppp\x00', 0x0, 0x0) getdents(r2, &(0x7f0000002840)=""/188, 0xbc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) accept$unix(0xffffffffffffff9c, &(0x7f0000002900)=@abs, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000200), 0x0, 0x0, 0xfffffffffffffeaa) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x20) ptrace(0x10, r3) wait4(r3, &(0x7f00000003c0), 0x200000000000, &(0x7f0000000300)) r4 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) dup2(r1, r0) 19:56:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:11 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2000000000007, 0x2) 19:56:11 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) r1 = getegid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x20000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020a00000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:12 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x800) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x3, 0x9, 0x6, 0xfffffffffffffffa, 0x1c, 0x800}) 19:56:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/42, 0x2a) 19:56:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = dup2(r0, r0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000001c0)=0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = dup(r2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x2, '$q'}, 0x3) fstat(r3, &(0x7f0000000040)) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x401) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x5, 0x401, 0x8, 0x8000, 0x0, 0x9, 0x8800, 0x1, 0x3, 0x80000000, 0x0, 0x6, 0x100000000, 0x1, 0x5, 0x3, 0x40, 0x4, 0x0, 0x1336, 0x1, 0x3, 0xff, 0x8, 0x7fffffff, 0x0, 0x8, 0x40b34002, 0xff, 0x10001, 0x0, 0x9, 0x5, 0x401, 0x9, 0x3, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x418, 0x6, 0x1ff, 0x0, 0x10000, 0x8, 0x4}, r1, 0x2, 0xffffffffffffff9c, 0x3) 19:56:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020e00000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:12 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) prctl$PR_SVE_GET_VL(0x33, 0xe3b6) 19:56:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x30000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x7dfe, 0x1c8, 0x3636384b, 0x0, 0x401, 0x82c0, 0x5, 0xfffffffffffffffe, 0x2, 0x0, 0xcc4, 0x8, 0x3, 0x1000, 0x100000000, 0xffffffff, 0x2d, 0xfa, 0xf5, 0x1, 0x100000000, 0x6e2, 0x4, 0x7, 0x8, 0x647e, 0x80, 0xfffffffffffffffd, 0x8, 0x8, 0x401, 0xc108, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x100000001, 0x6, 0x5, 0xbec7, 0x430, 0x2}, r3, 0x10, r2, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020f00000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) 19:56:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$kcm(0x29, 0x2, 0x0) 19:56:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) 19:56:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000021c00000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000000)={0x6, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:13 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) 19:56:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x3f000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000026000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) 19:56:14 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x5, 0x8001, "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", 0x2f, 0xffff, 0x7fff, 0xe21, 0x100000000, 0x6b59, 0x0, 0x1}, r1}}, 0x128) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:14 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0xd9, 0x0, 0xffffffffffffffc9, @broadcast, 'gre0\x00'}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x101, 0x8) 19:56:14 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:14 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) epoll_create(0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 19:56:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x7, 0x1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0) setsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f0000000100)="ec1c4ee9bdd6988a95589b6d7ed240d84c96ee0f7c4a1ff18b0203356558c629b6b2f71cb5c55a8bdf42ec37b6a39032921d3297335c8f2480ba343659fef41722af0e933db36c7f78a148d5efde802713f2b0a270d6bd34b29f92007a179dcfe1cba1ec0fca4f5955d7df738cb9ab2de3eea20baceb0f2914b44a7d06bf47bf1f39f845d7471d", 0x87) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002f000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:14 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x40000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:15 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getdents64(r0, &(0x7f0000000040)=""/152, 0x98) 19:56:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020b01000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getpeername$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:15 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x200000007, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x100) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x5, 0x1, 0x0, 0xc, 0x8000, 0x7, 0x10001, 0x4cc, 0xfff, 0x9, 0xb3}) 19:56:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000a000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x41030, r0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) sendto$inet(r0, &(0x7f0000000440)="f32ce514eaad1f1186a79ab6d27fe6f7ca2a5616407138dadc09a45334bf1a404e5a6a607dec154aa328bd030bc39396273a5f8a07a2fa22d3bae0774c7a2fcf38999633a19ca06329c340c6dc8a9aa9277e8d0e", 0x54, 0x20000000, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10) r2 = fcntl$getown(r0, 0x9) migrate_pages(r2, 0x40, &(0x7f0000000040)=0x8001, &(0x7f0000000240)=0x7) r3 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$sndseq(r3, &(0x7f0000000100)=[{0x503, 0xfff, 0x0, 0x8830, @time={r4, r5+10000000}, {0x200, 0x6}, {0x7825, 0x1}, @quote={{0x1, 0x5}, 0x1}}, {0x100, 0xf95, 0x9, 0x2, @time, {0xa, 0x3}, {0x0, 0xfff}, @raw8={"b0a42b42dd766a73add8a15d"}}, {0xbbc1, 0x656, 0x20, 0x0, @time={0x0, 0x1c9c380}, {0xb75, 0x5}, {0xffffffffffffff01, 0xffff}, @queue={0x3, {0x2, 0xfffffffffffff800}}}, {0x6, 0x3, 0x6, 0x4, @time, {0x3, 0xffffffffffff8001}, {0x9, 0x6}, @time=@time={0x0, 0x989680}}, {0x8, 0x2, 0x8000, 0x196, @time={0x77359400}, {0xfffffffffffffffe, 0x2}, {0x9, 0x2ae5}, @raw32={[0x3, 0x400, 0x8001]}}, {0xac71, 0x100, 0x21, 0x1b, @tick=0x20, {0x3f, 0x1ff}, {0x2, 0x7}, @queue={0x8, {0x3, 0xfffffffffffffffa}}}], 0x120) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x3, 'syz0\x00'}, 0x3, 0x2, 0x33, r2, 0x2, 0x5, 'syz1\x00', &(0x7f0000000280)=['&\x00', 'trusted'], 0x9, [], [0xda2, 0x0, 0x5]}) 19:56:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x60000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:16 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0xe8c7) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000180)={[], 0x4, 0x7c, 0x1, 0x0, 0x7, 0x0, 0x2000, [], 0x6de}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x6, @addr=0x7}, 0x8, 0x2, 0x5}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 19:56:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002010b000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:16 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) 19:56:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r2 = dup(r1) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000e000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:16 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x80000000, 0x4) 19:56:16 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) 19:56:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001600)={'rose0\x00', 0x1000}) r2 = dup(r1) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000001500)=[{&(0x7f0000000100)="5218f9dffc73629f24413790476a03d5d86e39a12d31daa1d40b2835bce72ef55dd628950ce201206b128a0fec04783fcbc241348c7175e2d10de4741a35b12f7ab20cf265df4788cd700cea08cae8615aee4303b6ac654d681d29b88ee77b6812e2735bd7056eec45952d9d81308686085d2039f8d69c9c4a0f241b43b6501dff1f6f5e347754f1f2da05c9cdc1bcb7df4b323ffbd558e3eed79e", 0x9b, 0x6}, {&(0x7f00000001c0)="0f7bd17c26a614397727456754c4e9610c391265e7c404e9f696d5f54077c6aa799668a2f933499518baed8d96a4c6467927fff2cc993dc4627eda90129d3bf472a8c4721241a8207410c5b73d65ae87924d16dd4ff25ebf16dbb86372575a", 0x5f, 0x10001}, {&(0x7f0000000240)="3d64113340f5a190fd80146eac1c7b0986fa31b277caa22822f38039b5416814bb955e9153302e24051eb04ce5c5083e589d75392f8de408854e0ac8f1a4a8f13e9e0a5f83b597ca00d08e797edfb4c901ed911e4fd099edd67e2db2552f99276f9d39aba4f3ea701d996639d34d1cd1c04d3632d6516aca514a0adb49dcc5296d6034344e92b6c77e4a0cb09420448f629b51e2a611aa76dc", 0x99, 0x1}, {&(0x7f0000000300)="1b0a6bdb49c3c0e91f65fd193994ea7d62c70c9d60b4d8083dc922641285e3bcdfa6d7ec4934a3acbf644388b47fdbe44bea39d38461ce1d5db99938cca9a2e117963ef4d061f7a554ef94dabcb56965247fd4584e65a00d1299f0100022ad3f366255e733aaf1f11360eec5c9523d456019efabdc68732f9f3202cfe1848142f5fb3a9bd9e06ea0d1802ab95a4c03605e81eeb4e72fcb1944fe587b1ed1e365460640e2", 0xa4, 0x9}, {&(0x7f00000003c0)="a05954826dcaf0ac7afbd5cd91aafd43f019a320ec5a495894f4273fd38f03b007542a3bc15c2c84", 0x28, 0x4}, {&(0x7f0000000400)="7b68593e60a6e1ad51af72a214acffdebb80bd1ae9a99e8796e563c844c3b9e3295338629051796b65", 0x29, 0x6}, {&(0x7f0000000440)="7acbe03fdb305daaf1e7445ca63345f76b6c067f29181be4f793246811f842359fbf015d9507d8225d280a4953120bf3db9879a659e1ae18acf68a64ad015c598ef11bbb814072bf956b57ecc10620266bba81d0efe18d69e6281d38c6ac4624fed8d5040ca4d50b57965ffa556a887b02e7f913e755004da68550a2afec579f24ce681e48e3c1d08c4d3814d4e14896f23dfa036d777023392c1995b75e665adca76d7c90f941ff6ab3392c59e74efdea51195deec0d1db23ec6f9d66ca12be6bef0c94aca6e68cfbd05f965061c60f3d6549bc3ef657bbbdd898cf26cf31b775602d627db94456e6813c56aa99fa09a6ad24650c2848a9e7199bfb934593485da732ed2c923f0a8ab509ddeed66da744d0fa7a664bcd965696da2ecdc3cdab313eba2250ea655117cee48f3363434c10e89bc68702680c56acbac110d25c17a370b8be36bc7cfffb520734da89cfc2ec65b021609c4bde9adf2f17d5e16c1d3fa54e6b4e52a89a0746ddf54004756989115db8c1eb4aacf8a1ca02a614cecc03b767d4f8323f39212be61fbf0ca6f1d7f0770a00607affc45daf2fb929d0dd70aff3646991f6447b8791baa3c9f8566bdcca1abbc75c96e79d5e2b1d6d473cc2b3a356a34ed9c087ff55e3cd05fd148d4c738ed6a2a22027d4b0ce3722e1f1c997b24d1c9c78466fa50764e96bce8a32933211c8c4c08539b8fc6554821d23a90001a7d2d618f424e3ee688c3d43d638764a53d987db979f7edc48b17ed91daf99fa353cc27752fff799a442d3ec49148b7c1ac93198b7008970f83b3241ffccce038570258afef2ba75ff84cab5856adcd3490faf28e2393f540723541b4a8dcda48c52bd463cc5df3cd54b1ad8d78a462578846937a02d2bafefee823914298a6ff2c0990ea8d402ea1e15b108aa647d5ec1b5a64aeb30ab8f93201c6634e3f3acf84b7320106a1c497036da4f3c97f180e246f6fadd6d99bf5866eaeef72e40e0d6be91d2b42c4698b395a6e84a24bcc78aaca39c8046d7a104d025a521e3f66bbc7297722e6e60e985af7fb8d42ec39b1fc48dbfb172893bbfc24fc6aa31a010c20a09c32a3873e4564da2800874c35df067a4b23be0938154339ffcaec5450af7fabf13d668fe142daa778d1682f855382c937e352a97c7bf73738b62aa42eefad40d887f393de01b92363be8acf1340fadb8cf71188db608441712122d9cca00db4ebab297421d43de90fc601a88470ad71f549cd3a00d099819c60a1644687663eabb4f6e12bbe25231cf4afdc551f6f529a665548fc3fbf072c8ac1b1d3b947e31a6453e37e06a1df0de529993150c959651bbf09a341f51a3f88fe2e65dce35ef9001244a8e005cdc5378088cf9a1c2093dca56f6493ec86472ec018b90bfbdebddbdab2cf6611176167d125b016b1ced96378b1e90a2af7f5c2884212804b0bbd23b390344de88bba63187fcbbcc8a679fabc8969e02c395df43bc1819013e4164393b35774e5a30b48afb39d3e19a9ce03bab19cc4c4f8b6956ae344572d5a5d9eedb32fcb02b42fdbef6dc53b6be9493c23735a2349eb05ae5e8ae9906e6c6acf35506f6434687ee4b8978f0a387b6e65a30748bcec1b7adabf915be83cd4f7153946c444fdd8563da96935e32a8fba2bcd9df0bf61593309c19014ac11c7f289820c98e47c5a5f83288ef664a43a614df85923f03be383a6c1f3d1f67c9dcd3179a2c6f80392a7b82d5075fe1386d8fbe2dd3397d8296f07d03777fba3bd1b112cd41145eefd00fd6695f4c466608d70d693bc0167d77abf970be544cde3dfe0153d48ec67dfebcf41904046efaab993fd5f85baac877b2d57268d37a5d5c1bccf1604a34a8abdf03ff83a3c6a4dbc1aa10dd3a48730051978066f646790dca4f9b949e7bcb0760971a49530aff95564b7816f1bf00f1ed2f5e069f5ebf82becb351b8bf0d71eb8cea8469e00ab98028d87d65b29e24236b3909470ea639a8d4e5845a135464fce30a44f4dea164b859ceb5c2cb8c368e70d1c848d333f317adbf9b9fa9d2d507cdd8e4d11f879ebf14026d6d2d35fd7b825cf52ef4299fe58ab21a2d51d94bb9855f46648f7861e79a7b7a8360899ff3591c63e7ec2ccf3bcfed0e8b68baf52e1ee42546e74e4e13706a1903c04d0b87c2bf4a4f3ca780c4e164549a5dd075cc9448c85cbe9e330f8ee9b87f3e06a758e9edb76d33a5d8bacbd8964f8b8861cf0bb626c0a96849b2772c23a9e12991a97e18e904260b282996dd7073e4bbf8a7d64f281d213331045566d2b374efb282fe4b9434d04c6d2d1904fbcf57a7aa623742c1ad329c55f2d8762d31d4e85b66174e7c247dd420fd13dc3ff24b65996cc32ed64750a8643d638672591f0c1afa67d64e9c1228fef3a60cfe80d57fbc126ddea6f3a4cc7d2f3b2109cee984e8735648b2754f7bf26df46471c1a185b4d22429ebff676f87f598820ad7196d54166926ab3ea1646f8720e13fbf8138dfcdacb25257026bd6eaf95dddcdfcc1fe0eefaef8d158af40c7a57cf30d701aac8eb051a5aef37718cebd3a9844d641641c8e982acec94c6b747921b0b072d0ae5f763a63a580ba7ed4ada91c3e17b4e7799f333e127456735aef5b3d7998ee2a8f10141dbd6a869898f02a9981ebcc26a83ee2346ceb0503112982bfbf2b44cb81d49e8beb248af5f11a689ab66bef22c7c96ddff943186e12b1ee7ac08c5fa64ba61f88a88ecb804bae21bfd4798b7ab2e4c98e4aaef18519371cc06a15cf82247c0c7b8f4c1b8e63bb277c0a70d49e8f185e489cdface869e29cd9c8cc5b60656deab2928ff90c1b4671ca346fd5b9101b3d60eaa591185cdb2cdc1e2b7e5a3710ae1b89d0061cc955e6a3fb4bb7b750af64fb258b0583849a94fd8790d1d9bbd7c4801868f75e54da12ea20336d863eeba580a9d8836c9380d767ea2e11faf97bd4fcba473b33f5efe3a5113a12d3f77bea224fc25ff63eb1ac3484e91ce3066dc47a1560b269e3c5085efdc69465fd3e5a634a64eb5b7a0d44c4e7625188caf1074ee30b1e04820ae201fdb5c29db56f8bfbcf810d45c1d9b0a8163eddbe2e7de03e79518cdae53ee5986bea1e0924648f13beb3a6e527192e95a490722350f21ce6af7de005da8009d03549d852706010415bcba9389778a6e6c3b22b46d5d1d9fb7b39359fb0d01fdebeb117c187b3da0f2066a0f62ff7866415a9f9327c3ee174c19319de7be35d75eb2a4678c21d6f4a3db2df09c2c64467797af7da252f4658aff20834bea5a453d70c794530048a49cf845b6552b95bd48ba5e84fba58c7a4e8195088f5158bae7157723854101703ae1eb6c254d71fa3264a19d070b9ce3134bba93aef9c9f6a3146e71bd2a55695d2b4b18a1f60c805df187323264ee40956c17dba18b495999b38d66e17531bd6183f66827da3bb9284ce642213ffd3218c79ffd1e36ae5eecfdb26575d51ac02a2cfd4e7ba307c5f215a14ad1948724c8e454c4fe541b2b07160c71a62333689c1b481013f6d3fc8fb7a155a271efbfb65e6c1aa52f0035d52b2d4f30033a1d33e93a74841af5ad05b1e676367974c728debf6ec9441a75aed9114bc2745cd3c23b318330598a3b79bbaac6af4ce88fe86593142c4ea425ee85e1976e27377d3384cda62174b8f6d20227ceea31ab72cc9c89066abc4838044516f085ae7b9a24a8921bd5421f1a9d9ffb1b959023ba0e3a43b70284b8b1aeeee016a8fe5b4f3cc3a3f3dd5848a170b0320a2e3a7257efeda130654224ae8394c9ea20ecbdf8dd1ea3e014ae01c7fb7ad23cfe9ec5fc61d53636c626158dcdc97a26b9dfe1222f3dc603e939faf7ad7dcbe2cb511dbc1735539c8acc28f6a15c5c001eb63abccb16990c64d2a06aa22c2e9820b79721984dfc9030c116f2d8ece17cac9b30abb7c632c837403a8299c3060f360e0621b34cb6e8c872747b6ca69178bc7f6bafb2624d11e05c2d74bfb5fc465ae342c7caa03c8f2b30f68e901641d2ccb050fd4ca3f81c8bb6bd106010394ef58cc7ee31c6ddc9b42271a4e1e47f404a28d19e7836abeb05e2238992a3d93db374c5c8b456457ada0b197dcc4106873d6b84c7953c2bdfe466ca30485d6b83699c64e54e5c46efde379d85123845850a77de0f4f35a3f65bfa006d69e218c590ad670c79732633326c69e9dd739d587e000fffdd4c415c84372047f16e67813155c3f46dead175fcb2309d0c1bee890d21bb7be7624df592974d86e7298e8e650cf6d029e2f23a97ad2c391d2f93100e5274f8a48fb6236b6c7b3f3fbe2e03bbaace497357c351ffe69f277f4b287be551ce314eb09b328ccf3766900ef0620c44a3339307274b65fb88358acb27a36a8e4bdee212b14f86fe2c8646316ce343bc70075cb8be9e4c8bec933b8d5f69522fa9fbd86b3b61e4a9d07755c75ab5babef0f97d38a5752f2058d163a4ee9bb110478803e6d975d4654693397708b6d425fb6d2c2950572e888bb8b52af4d9aaa01a976a1c026864962e70883a0730b6b6e9aaacd93b0eb3a43304b27fd29d730c478cb40c8ffc7551860788d98f32e9a1ba1d3a200343e03de9ce35d2850f808da4ffb710ddaece4454a14e3e251dc38078ab698892b337b645d01ab113af7b2205d4eeccc306e9997528b4ef6b91aed34fd5cddbc67c4a81f94808b9e5e7e39dccfd863a5aad8af9de4ca44b2df4cc030ee566a24c25feb5c6d9c3ed0e0f1947006f4a2d138b1e06652a61b964485a01afe32cdea3e1109df1047328ae197f746827cd8e80f6df860d8557429d967758515c478e5403d458253d1ee6401734256ea35cca4985d25d94188760ea497ef4d71229407504a5caf3d7a97a4ad566252348112546dc0eeb99ebc8ee78ea66728f4b5e48e5b78ad63a1054077a5158885462e157c441f1d62dc5a88cbd861139d4fbe2f98769078fcf53498f60cc9e6d6950596600e7aaab6d322ba055eeabe473f35bfe00bbe66cca67d993c33094a18fc8e00d7feead3823afb33276a45ce22f7e471500f6735382539b5248ea91bdd22d220f384ab46ac8ebb7703b173da69139e858b05660bb97ea6893d43a15887ff547b497debc4b3bae02517b741b10172a513c67aa394a408359f5ca729acffa5473e2020f4d8bdc30c3a22b69c34dbddb7e90df7fdd7ead8dd07fbd82e84689a00de3c0e1d30cbfb64b0f484d5cd85802aa8316af815a931fe3ae0354d7cad3ba24da8ffb03d2513a09165e8d91d62c7f00d0c39268fa7fd4792857ca190f6d67b799aaca605b4d90d8afbd35104881d19a86cdf4614aa8906a97286f9658c1d8e2bb6e5bce4e2208cb514535f29adb9579aabe2e703663225c207a008ec57cdd0f5e66645215dc53a1e1c37ae77e4c3ba11c1b3392e03cd62e85d0eab0a46fe38bd7117547fa5a0b2c2a85318c4cdb0d4e265318879d39febd3c80bba4e2a6494ac5067e9bb45ce6298db198bb8d33e87eda67ce95021c56601601f69720e406f615435143af72f573c5867845eaa5c82f395e4c9047d4e5e9a88a0f068f4a4416d93d6a79bbcb52d9fe748a86f62bf0425908bf9699e582a35a1e62945d47a22fbd0f34b6e784f4d947f65e5687adff98c8bca098f5d7c462b72fdd02fafef90e81c6a2187580d61616becf236b6cb5f50b9c7e2286996b7618c6f15a7eebde9ce40b9f52f6622ff155e0a7636e6aeb1857c01426c225cb821526ac5a15e2edbabf86cc1a09222c11d40ae0721d11da25f515f13a8d25305a1c331c023be0", 0x1000, 0x7}, {&(0x7f0000001440)="a6e563ec0be22384a051dc12401904174da39a8df7249ff59c34734e0efdc4f5cf649f122a2c9f17d502474a81edea661c3679ecbe45394a5613f5fec81507b9b1cf89d6ba5dd9c69f2c1bf70cb6a4c6020e47bbaf18361818c7d8678413b759328b5524c0c7b598c9329cc6309e2511a633e6ae39891205eb73a5d938c50bd247e8d41fce3972ac8799df9768487ff66addeaa3b9912d51db21e19bd80a2c75259a668e21f32ac0d57d8aee01a421c6035156d499a615ad0b7998b6ed6f8a", 0xbf, 0xfffffffffffff000}], 0x20000, &(0x7f00000015c0)='$}vboxnet1cgroupsystem\xe6vmnet1-\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xf0ffffff) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:17 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) 19:56:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000f000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r1 = dup3(r0, r0, 0x80000) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x4) 19:56:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f0000000000), 0x4800) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:17 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 19:56:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xf6ffffff) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x3) r2 = dup(r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f00000000c0)) 19:56:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002001c000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xff600000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:17 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x82, 0x400) ioctl$KDENABIO(r5, 0x4b36) 19:56:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020060000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3ff, 0x800) ioctl$TCSBRKP(r0, 0x5425, 0xe1af) 19:56:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) [ 416.467043][T18421] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:17 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x82, 0x400) ioctl$KDENABIO(r5, 0x4b36) 19:56:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000010000200f0000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xfffffff0) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x2) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:56:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) [ 416.690032][T18439] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020040030000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:17 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x82, 0x400) ioctl$KDENABIO(r5, 0x4b36) 19:56:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x59, "8ba24c32a33d564a277d3e1c7066bda05e53ab7b7062a84720f0b5b1db23a3ee37828d6a5673fd30d6034336ba36d40cecde7a563db2070ee69af1eb53ab7374eb0a37eaef7393fab5636bdb41147cdc23a45778ad61f7ac25"}, &(0x7f0000000080)=0x61) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x2, 0x1000, "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"}, 0x1008) 19:56:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xfffffff6) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020003400000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) [ 416.994398][T18465] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:18 executing program 5: 19:56:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x400000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:18 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x82, 0x400) 19:56:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002fffff00000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40500, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x7fffffff, 0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r2, r0) 19:56:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) [ 417.325243][T18491] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000100000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:18 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) [ 417.411983][T18497] serio: Serial port pts1 19:56:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) membarrier(0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 417.539786][T18509] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:19 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x60ffffffffff) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x900) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000200000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:19 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000400000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x900) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x740000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:19 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000a00000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x900) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:19 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) [ 418.602318][T18577] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000010b00000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:19 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@local}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000e00000000cfb193e7ee00"/88, 0x58}], 0x1) [ 418.960311][T18586] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:20 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) [ 419.123514][T18597] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x7fffffffefff) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) 19:56:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000f00000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:20 executing program 2: prctl$PR_GET_SECCOMP(0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1) dup2(r1, r0) [ 419.278473][T18604] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000001c00000000cfb193e7ee00"/88, 0x58}], 0x1) [ 419.450233][T18616] serio: Serial port pts1 19:56:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:20 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) 19:56:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x940000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000006000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000a80000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:20 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) 19:56:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002ffffff9e00000000cfb193e7ee00"/88, 0x58}], 0x1) [ 419.855618][T18635] rtc_cmos 00:00: Alarms can be up to one day in the future 19:56:21 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) [ 419.987015][T18646] FAULT_INJECTION: forcing a failure. [ 419.987015][T18646] name failslab, interval 1, probability 0, space 0, times 0 [ 420.022760][T18646] CPU: 0 PID: 18646 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 420.030763][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.040819][T18646] Call Trace: [ 420.044133][T18646] dump_stack+0x172/0x1f0 [ 420.047172][T18650] rtc_cmos 00:00: Alarms can be up to one day in the future [ 420.048489][T18646] should_fail.cold+0xa/0x15 [ 420.060407][T18646] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 420.066223][T18646] ? ___might_sleep+0x163/0x280 [ 420.071103][T18646] __should_failslab+0x121/0x190 [ 420.076050][T18646] should_failslab+0x9/0x14 [ 420.080573][T18646] __kmalloc+0x2dc/0x740 [ 420.084823][T18646] ? mutex_unlock+0xd/0x10 [ 420.089252][T18646] ? tty_buffer_flush+0x237/0x2d0 [ 420.094343][T18646] ? x25_asy_open_tty+0x450/0x841 [ 420.094365][T18646] x25_asy_open_tty+0x450/0x841 [ 420.104477][T18646] ? x25_asy_close_tty+0x220/0x220 [ 420.104493][T18646] ? lock_downgrade+0x880/0x880 [ 420.104516][T18646] ? x25_asy_close_tty+0x220/0x220 [ 420.104534][T18646] tty_ldisc_open.isra.0+0x8b/0xe0 [ 420.104552][T18646] tty_set_ldisc+0x2d7/0x690 [ 420.104575][T18646] tty_ioctl+0x5dc/0x15c0 19:56:21 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) [ 420.129287][T18646] ? tty_register_device+0x40/0x40 [ 420.129306][T18646] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.129381][T18646] ? tomoyo_init_request_info+0x105/0x1d0 [ 420.129402][T18646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.138819][T18646] ? tomoyo_path_number_perm+0x263/0x520 [ 420.138839][T18646] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 420.138855][T18646] ? __lockdep_free_key_range+0x120/0x120 [ 420.138885][T18646] ? __fget+0x35a/0x550 [ 420.178298][T18646] ? tty_register_device+0x40/0x40 [ 420.183424][T18646] do_vfs_ioctl+0xd6e/0x1390 [ 420.188029][T18646] ? ioctl_preallocate+0x210/0x210 [ 420.193167][T18646] ? __fget+0x381/0x550 [ 420.197348][T18646] ? ksys_dup3+0x3e0/0x3e0 [ 420.201770][T18646] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.208012][T18646] ? fput_many+0x12c/0x1a0 [ 420.212437][T18646] ? tomoyo_file_ioctl+0x23/0x30 [ 420.217382][T18646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.223631][T18646] ? security_file_ioctl+0x93/0xc0 [ 420.228756][T18646] ksys_ioctl+0xab/0xd0 [ 420.232927][T18646] __x64_sys_ioctl+0x73/0xb0 [ 420.237531][T18646] do_syscall_64+0x103/0x610 [ 420.242127][T18646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.242140][T18646] RIP: 0033:0x4582b9 [ 420.242155][T18646] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 420.242163][T18646] RSP: 002b:00007f015d5f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.279983][T18646] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 00000000004582b9 [ 420.287966][T18646] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 420.295943][T18646] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 420.303917][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f015d5f66d4 [ 420.311891][T18646] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000004 19:56:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:21 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002fffffff000000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 19:56:21 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x1000000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:21 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) [ 420.736529][T18670] FAULT_INJECTION: forcing a failure. [ 420.736529][T18670] name failslab, interval 1, probability 0, space 0, times 0 [ 420.820057][T18670] CPU: 1 PID: 18670 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 420.828098][T18670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.838161][T18670] Call Trace: [ 420.838189][T18670] dump_stack+0x172/0x1f0 [ 420.838215][T18670] should_fail.cold+0xa/0x15 [ 420.838238][T18670] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 420.845836][T18670] ? ___might_sleep+0x163/0x280 [ 420.861036][T18670] __should_failslab+0x121/0x190 [ 420.866001][T18670] should_failslab+0x9/0x14 19:56:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) [ 420.870519][T18670] __kmalloc+0x2dc/0x740 [ 420.874774][T18670] ? mutex_unlock+0xd/0x10 [ 420.879202][T18670] ? tty_buffer_flush+0x237/0x2d0 [ 420.884244][T18670] ? x25_asy_open_tty+0x498/0x841 [ 420.889281][T18670] x25_asy_open_tty+0x498/0x841 [ 420.894145][T18670] ? x25_asy_close_tty+0x220/0x220 [ 420.899263][T18670] ? lock_downgrade+0x880/0x880 [ 420.904138][T18670] ? x25_asy_close_tty+0x220/0x220 [ 420.909260][T18670] tty_ldisc_open.isra.0+0x8b/0xe0 [ 420.914379][T18670] tty_set_ldisc+0x2d7/0x690 19:56:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) [ 420.918981][T18670] tty_ioctl+0x5dc/0x15c0 [ 420.923318][T18670] ? tty_register_device+0x40/0x40 [ 420.928441][T18670] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.934687][T18670] ? tomoyo_init_request_info+0x105/0x1d0 [ 420.940410][T18670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.940426][T18670] ? tomoyo_path_number_perm+0x263/0x520 [ 420.940444][T18670] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 420.940464][T18670] ? __lockdep_free_key_range+0x120/0x120 [ 420.952328][T18670] ? __fget+0x35a/0x550 19:56:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) [ 420.952351][T18670] ? tty_register_device+0x40/0x40 [ 420.952370][T18670] do_vfs_ioctl+0xd6e/0x1390 [ 420.952399][T18670] ? ioctl_preallocate+0x210/0x210 [ 420.982798][T18670] ? __fget+0x381/0x550 [ 420.986972][T18670] ? ksys_dup3+0x3e0/0x3e0 [ 420.991396][T18670] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.997637][T18670] ? fput_many+0x12c/0x1a0 [ 421.002062][T18670] ? tomoyo_file_ioctl+0x23/0x30 [ 421.007013][T18670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.013264][T18670] ? security_file_ioctl+0x93/0xc0 19:56:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) [ 421.018389][T18670] ksys_ioctl+0xab/0xd0 [ 421.022554][T18670] __x64_sys_ioctl+0x73/0xb0 [ 421.027166][T18670] do_syscall_64+0x103/0x610 [ 421.031770][T18670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.037669][T18670] RIP: 0033:0x4582b9 [ 421.041566][T18670] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.061177][T18670] RSP: 002b:00007f015d5f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:56:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000010000200f0ffff00000000cfb193e7ee00"/88, 0x58}], 0x1) [ 421.069640][T18670] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 00000000004582b9 [ 421.077616][T18670] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 421.085608][T18670] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 421.093590][T18670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f015d5f66d4 [ 421.101557][T18670] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000004 19:56:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:22 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:22 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000029effffff00000000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:22 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x4000000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 421.648136][T18710] FAULT_INJECTION: forcing a failure. [ 421.648136][T18710] name failslab, interval 1, probability 0, space 0, times 0 [ 421.659619][T18711] FAULT_INJECTION: forcing a failure. [ 421.659619][T18711] name failslab, interval 1, probability 0, space 0, times 0 [ 421.661135][T18710] CPU: 0 PID: 18710 Comm: syz-executor.5 Not tainted 5.1.0-rc3+ #54 [ 421.681878][T18710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.691936][T18710] Call Trace: [ 421.695237][T18710] dump_stack+0x172/0x1f0 [ 421.699581][T18710] should_fail.cold+0xa/0x15 [ 421.704560][T18710] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 421.710390][T18710] __should_failslab+0x121/0x190 [ 421.715332][T18710] should_failslab+0x9/0x14 [ 421.719844][T18710] kmem_cache_alloc_trace+0x4b/0x760 [ 421.725137][T18710] ? rcu_read_lock_sched_held+0x110/0x130 [ 421.730925][T18710] lapb_register+0xba/0x5d0 [ 421.735440][T18710] x25_asy_open_tty+0x5d7/0x841 [ 421.740299][T18710] ? x25_asy_close_tty+0x220/0x220 [ 421.745414][T18710] ? lock_downgrade+0x880/0x880 [ 421.750272][T18710] ? x25_asy_close_tty+0x220/0x220 [ 421.755395][T18710] tty_ldisc_open.isra.0+0x8b/0xe0 [ 421.760513][T18710] tty_set_ldisc+0x2d7/0x690 [ 421.765120][T18710] tty_ioctl+0x5dc/0x15c0 [ 421.769452][T18710] ? tty_register_device+0x40/0x40 [ 421.774561][T18710] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 421.780810][T18710] ? tomoyo_init_request_info+0x105/0x1d0 [ 421.786536][T18710] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.792779][T18710] ? tomoyo_path_number_perm+0x263/0x520 [ 421.798418][T18710] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 421.804228][T18710] ? __lockdep_free_key_range+0x120/0x120 [ 421.809959][T18710] ? __fget+0x35a/0x550 [ 421.814124][T18710] ? tty_register_device+0x40/0x40 [ 421.819241][T18710] do_vfs_ioctl+0xd6e/0x1390 [ 421.823842][T18710] ? ioctl_preallocate+0x210/0x210 [ 421.828962][T18710] ? __fget+0x381/0x550 [ 421.833128][T18710] ? ksys_dup3+0x3e0/0x3e0 [ 421.837548][T18710] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 421.843785][T18710] ? fput_many+0x12c/0x1a0 [ 421.848213][T18710] ? tomoyo_file_ioctl+0x23/0x30 [ 421.853157][T18710] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.859400][T18710] ? security_file_ioctl+0x93/0xc0 [ 421.864525][T18710] ksys_ioctl+0xab/0xd0 [ 421.868691][T18710] __x64_sys_ioctl+0x73/0xb0 [ 421.873285][T18710] do_syscall_64+0x103/0x610 [ 421.877885][T18710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.883773][T18710] RIP: 0033:0x4582b9 [ 421.887671][T18710] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.907271][T18710] RSP: 002b:00007f015d5f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.915680][T18710] RAX: ffffffffffffffda RBX: 00007f015d5f5c90 RCX: 00000000004582b9 [ 421.923652][T18710] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 421.931625][T18710] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 421.939594][T18710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f015d5f66d4 [ 421.947570][T18710] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000004 [ 421.955569][T18711] CPU: 1 PID: 18711 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 421.963563][T18711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.973624][T18711] Call Trace: [ 421.976924][T18711] dump_stack+0x172/0x1f0 [ 421.981273][T18711] should_fail.cold+0xa/0x15 [ 421.985875][T18711] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 421.991694][T18711] ? ___might_sleep+0x163/0x280 [ 421.996550][T18711] __should_failslab+0x121/0x190 [ 422.001501][T18711] should_failslab+0x9/0x14 [ 422.006015][T18711] kmem_cache_alloc_node_trace+0x270/0x720 [ 422.011834][T18711] ? mutex_trylock+0x1e0/0x1e0 [ 422.016633][T18711] __kmalloc_node+0x3d/0x70 [ 422.021210][T18711] kvmalloc_node+0x68/0x100 [ 422.025747][T18711] alloc_netdev_mqs+0x98/0xd30 [ 422.030563][T18711] ? sl_free_netdev+0x70/0x70 [ 422.035258][T18711] slip_open+0x38e/0x1138 [ 422.039608][T18711] ? sl_uninit+0x20/0x20 [ 422.039625][T18711] ? lock_downgrade+0x880/0x880 19:56:23 executing program 5 (fault-call:1 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) [ 422.039648][T18711] ? sl_uninit+0x20/0x20 [ 422.039670][T18711] tty_ldisc_open.isra.0+0x8b/0xe0 [ 422.048739][T18711] tty_set_ldisc+0x2d7/0x690 [ 422.062651][T18711] tty_ioctl+0x5dc/0x15c0 [ 422.066987][T18711] ? tty_register_device+0x40/0x40 [ 422.072112][T18711] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.078360][T18711] ? tomoyo_init_request_info+0x105/0x1d0 [ 422.084096][T18711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.090341][T18711] ? tomoyo_path_number_perm+0x263/0x520 [ 422.095985][T18711] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 422.101797][T18711] ? __lockdep_free_key_range+0x120/0x120 [ 422.107537][T18711] ? __fget+0x35a/0x550 [ 422.111713][T18711] ? tty_register_device+0x40/0x40 [ 422.116830][T18711] do_vfs_ioctl+0xd6e/0x1390 [ 422.121440][T18711] ? ioctl_preallocate+0x210/0x210 [ 422.126554][T18711] ? __fget+0x381/0x550 [ 422.130734][T18711] ? ksys_dup3+0x3e0/0x3e0 [ 422.135149][T18711] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.141379][T18711] ? fput_many+0x12c/0x1a0 [ 422.145793][T18711] ? tomoyo_file_ioctl+0x23/0x30 [ 422.150713][T18711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.156935][T18711] ? security_file_ioctl+0x93/0xc0 [ 422.162047][T18711] ksys_ioctl+0xab/0xd0 [ 422.166208][T18711] __x64_sys_ioctl+0x73/0xb0 [ 422.170782][T18711] do_syscall_64+0x103/0x610 [ 422.175357][T18711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.181238][T18711] RIP: 0033:0x4582b9 [ 422.185142][T18711] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.204753][T18711] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.213169][T18711] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 [ 422.221150][T18711] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 422.229112][T18711] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.237071][T18711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 19:56:23 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) [ 422.245030][T18711] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 19:56:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 19:56:23 executing program 4 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:23 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002f0ffffff00000000cfb193e7ee00"/88, 0x58}], 0x1) [ 422.458088][T18735] FAULT_INJECTION: forcing a failure. [ 422.458088][T18735] name failslab, interval 1, probability 0, space 0, times 0 [ 422.497818][T18735] CPU: 1 PID: 18735 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 422.505836][T18735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.505844][T18735] Call Trace: [ 422.505870][T18735] dump_stack+0x172/0x1f0 [ 422.505896][T18735] should_fail.cold+0xa/0x15 [ 422.505919][T18735] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 422.535815][T18735] __should_failslab+0x121/0x190 [ 422.540765][T18735] should_failslab+0x9/0x14 [ 422.545283][T18735] kmem_cache_alloc_trace+0x4b/0x760 [ 422.550656][T18735] __hw_addr_create_ex+0x5e/0x310 [ 422.555701][T18735] __hw_addr_add_ex+0x1ef/0x2b0 [ 422.560573][T18735] dev_addr_init+0x118/0x200 [ 422.565189][T18735] ? dev_mc_flush+0x40/0x40 [ 422.570006][T18735] ? __kmalloc_node+0x4e/0x70 [ 422.574671][T18735] alloc_netdev_mqs+0x142/0xd30 [ 422.579517][T18735] ? sl_free_netdev+0x70/0x70 [ 422.584197][T18735] slip_open+0x38e/0x1138 [ 422.588586][T18735] ? sl_uninit+0x20/0x20 [ 422.592840][T18735] ? lock_downgrade+0x880/0x880 [ 422.597700][T18735] ? sl_uninit+0x20/0x20 [ 422.601942][T18735] tty_ldisc_open.isra.0+0x8b/0xe0 [ 422.607049][T18735] tty_set_ldisc+0x2d7/0x690 [ 422.611636][T18735] tty_ioctl+0x5dc/0x15c0 [ 422.615949][T18735] ? tty_register_device+0x40/0x40 [ 422.621042][T18735] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.627273][T18735] ? tomoyo_init_request_info+0x105/0x1d0 [ 422.632975][T18735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.639196][T18735] ? tomoyo_path_number_perm+0x263/0x520 [ 422.644824][T18735] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 422.650626][T18735] ? __lockdep_free_key_range+0x120/0x120 [ 422.656347][T18735] ? __fget+0x35a/0x550 [ 422.660487][T18735] ? tty_register_device+0x40/0x40 [ 422.665591][T18735] do_vfs_ioctl+0xd6e/0x1390 [ 422.670166][T18735] ? ioctl_preallocate+0x210/0x210 [ 422.675259][T18735] ? __fget+0x381/0x550 [ 422.679405][T18735] ? ksys_dup3+0x3e0/0x3e0 [ 422.683846][T18735] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.690082][T18735] ? fput_many+0x12c/0x1a0 [ 422.694498][T18735] ? tomoyo_file_ioctl+0x23/0x30 [ 422.699416][T18735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.705639][T18735] ? security_file_ioctl+0x93/0xc0 [ 422.710733][T18735] ksys_ioctl+0xab/0xd0 [ 422.714884][T18735] __x64_sys_ioctl+0x73/0xb0 [ 422.719486][T18735] do_syscall_64+0x103/0x610 [ 422.724094][T18735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.729969][T18735] RIP: 0033:0x4582b9 [ 422.733843][T18735] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:56:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000034000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:23 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 19:56:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x2, &(0x7f00000000c0)=0x6) [ 422.753432][T18735] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.761838][T18735] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 [ 422.769804][T18735] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 422.777754][T18735] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.785717][T18735] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 [ 422.793688][T18735] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 19:56:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x30710000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:23 executing program 4 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002fffffffffffff000cfb193e7ee00"/88, 0x58}], 0x1) 19:56:24 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 19:56:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5409, &(0x7f00000000c0)=0x6) [ 423.038992][T18762] FAULT_INJECTION: forcing a failure. [ 423.038992][T18762] name failslab, interval 1, probability 0, space 0, times 0 [ 423.057849][T18762] CPU: 1 PID: 18762 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 423.065850][T18762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.075907][T18762] Call Trace: [ 423.079216][T18762] dump_stack+0x172/0x1f0 [ 423.083566][T18762] should_fail.cold+0xa/0x15 19:56:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x540b, &(0x7f00000000c0)=0x6) [ 423.088176][T18762] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 423.093991][T18762] ? ___might_sleep+0x163/0x280 [ 423.098851][T18762] __should_failslab+0x121/0x190 [ 423.103796][T18762] should_failslab+0x9/0x14 [ 423.108310][T18762] kmem_cache_alloc_node_trace+0x270/0x720 [ 423.114127][T18762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.120374][T18762] ? dev_addr_init+0x17f/0x200 [ 423.125148][T18762] __kmalloc_node+0x3d/0x70 [ 423.129662][T18762] kvmalloc_node+0x68/0x100 [ 423.134218][T18762] alloc_netdev_mqs+0x67f/0xd30 [ 423.139098][T18762] ? sl_free_netdev+0x70/0x70 [ 423.143789][T18762] slip_open+0x38e/0x1138 [ 423.148127][T18762] ? sl_uninit+0x20/0x20 [ 423.152381][T18762] ? lock_downgrade+0x880/0x880 [ 423.157241][T18762] ? sl_uninit+0x20/0x20 [ 423.157261][T18762] tty_ldisc_open.isra.0+0x8b/0xe0 [ 423.157280][T18762] tty_set_ldisc+0x2d7/0x690 [ 423.157300][T18762] tty_ioctl+0x5dc/0x15c0 [ 423.157318][T18762] ? tty_register_device+0x40/0x40 [ 423.157340][T18762] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.187078][T18762] ? tomoyo_init_request_info+0x105/0x1d0 [ 423.192814][T18762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.199072][T18762] ? tomoyo_path_number_perm+0x263/0x520 [ 423.204712][T18762] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 423.210521][T18762] ? __lockdep_free_key_range+0x120/0x120 [ 423.216262][T18762] ? __fget+0x35a/0x550 [ 423.220436][T18762] ? tty_register_device+0x40/0x40 [ 423.225556][T18762] do_vfs_ioctl+0xd6e/0x1390 [ 423.230160][T18762] ? ioctl_preallocate+0x210/0x210 [ 423.235280][T18762] ? __fget+0x381/0x550 19:56:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x540c, &(0x7f00000000c0)=0x6) [ 423.239447][T18762] ? ksys_dup3+0x3e0/0x3e0 [ 423.243873][T18762] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.250117][T18762] ? fput_many+0x12c/0x1a0 [ 423.254553][T18762] ? tomoyo_file_ioctl+0x23/0x30 [ 423.259506][T18762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.265756][T18762] ? security_file_ioctl+0x93/0xc0 [ 423.270883][T18762] ksys_ioctl+0xab/0xd0 [ 423.275052][T18762] __x64_sys_ioctl+0x73/0xb0 [ 423.279666][T18762] do_syscall_64+0x103/0x610 [ 423.284276][T18762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.290169][T18762] RIP: 0033:0x4582b9 [ 423.294082][T18762] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.313686][T18762] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.322105][T18762] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 [ 423.330084][T18762] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 19:56:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x540d, &(0x7f00000000c0)=0x6) [ 423.338056][T18762] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.346039][T18762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 [ 423.354023][T18762] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 19:56:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:24 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 19:56:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000001cfb193e7ee00"/88, 0x58}], 0x1) 19:56:24 executing program 4 (fault-call:3 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) [ 423.766247][T18788] FAULT_INJECTION: forcing a failure. [ 423.766247][T18788] name failslab, interval 1, probability 0, space 0, times 0 [ 423.800590][T18788] CPU: 0 PID: 18788 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 423.808601][T18788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.818663][T18788] Call Trace: [ 423.821974][T18788] dump_stack+0x172/0x1f0 [ 423.826311][T18788] should_fail.cold+0xa/0x15 [ 423.830895][T18788] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 423.836720][T18788] ? ___might_sleep+0x163/0x280 [ 423.841554][T18788] __should_failslab+0x121/0x190 [ 423.846488][T18788] should_failslab+0x9/0x14 [ 423.850993][T18788] kmem_cache_alloc_node_trace+0x270/0x720 [ 423.856783][T18788] ? kasan_unpoison_shadow+0x35/0x50 [ 423.862083][T18788] __kmalloc_node+0x3d/0x70 [ 423.866619][T18788] kvmalloc_node+0x68/0x100 [ 423.871130][T18788] alloc_netdev_mqs+0x821/0xd30 [ 423.875981][T18788] slip_open+0x38e/0x1138 [ 423.880313][T18788] ? sl_uninit+0x20/0x20 [ 423.884565][T18788] ? lock_downgrade+0x880/0x880 [ 423.889425][T18788] ? sl_uninit+0x20/0x20 [ 423.893674][T18788] tty_ldisc_open.isra.0+0x8b/0xe0 [ 423.898795][T18788] tty_set_ldisc+0x2d7/0x690 [ 423.903398][T18788] tty_ioctl+0x5dc/0x15c0 [ 423.907738][T18788] ? tty_register_device+0x40/0x40 [ 423.912853][T18788] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.919113][T18788] ? tomoyo_init_request_info+0x105/0x1d0 [ 423.924843][T18788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.931103][T18788] ? tomoyo_path_number_perm+0x263/0x520 [ 423.936750][T18788] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 423.942563][T18788] ? __lockdep_free_key_range+0x120/0x120 [ 423.948302][T18788] ? __fget+0x35a/0x550 [ 423.952478][T18788] ? tty_register_device+0x40/0x40 [ 423.957603][T18788] do_vfs_ioctl+0xd6e/0x1390 [ 423.962209][T18788] ? ioctl_preallocate+0x210/0x210 19:56:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xa0700000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x6) 19:56:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000002cfb193e7ee00"/88, 0x58}], 0x1) 19:56:24 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe4}}) 19:56:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000004cfb193e7ee00"/88, 0x58}], 0x1) [ 423.967330][T18788] ? __fget+0x381/0x550 [ 423.971500][T18788] ? ksys_dup3+0x3e0/0x3e0 [ 423.975920][T18788] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.982164][T18788] ? fput_many+0x12c/0x1a0 [ 423.982187][T18788] ? tomoyo_file_ioctl+0x23/0x30 [ 423.982203][T18788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.982220][T18788] ? security_file_ioctl+0x93/0xc0 [ 423.982241][T18788] ksys_ioctl+0xab/0xd0 [ 423.982262][T18788] __x64_sys_ioctl+0x73/0xb0 [ 423.982284][T18788] do_syscall_64+0x103/0x610 19:56:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000000000000000acfb193e7ee00"/88, 0x58}], 0x1) [ 423.991611][T18788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.991624][T18788] RIP: 0033:0x4582b9 [ 423.991639][T18788] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.991653][T18788] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.054062][T18788] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 19:56:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5413, &(0x7f00000000c0)=0x6) [ 424.062051][T18788] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 424.070042][T18788] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 424.078048][T18788] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 [ 424.086033][T18788] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 19:56:25 executing program 4 (fault-call:3 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) [ 424.283446][T18818] FAULT_INJECTION: forcing a failure. [ 424.283446][T18818] name failslab, interval 1, probability 0, space 0, times 0 [ 424.307754][T18818] CPU: 0 PID: 18818 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 424.315782][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.325836][T18818] Call Trace: [ 424.329112][T18818] dump_stack+0x172/0x1f0 [ 424.333435][T18818] should_fail.cold+0xa/0x15 [ 424.338011][T18818] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 424.343800][T18818] ? ___might_sleep+0x163/0x280 [ 424.348678][T18818] __should_failslab+0x121/0x190 [ 424.353626][T18818] should_failslab+0x9/0x14 [ 424.358127][T18818] kmem_cache_alloc_trace+0x2d1/0x760 [ 424.363504][T18818] ? init_timer_key+0x122/0x370 [ 424.368358][T18818] slip_open+0x8ed/0x1138 [ 424.372676][T18818] ? sl_uninit+0x20/0x20 [ 424.376897][T18818] ? lock_downgrade+0x880/0x880 [ 424.381739][T18818] ? sl_uninit+0x20/0x20 [ 424.385969][T18818] tty_ldisc_open.isra.0+0x8b/0xe0 [ 424.391073][T18818] tty_set_ldisc+0x2d7/0x690 [ 424.395653][T18818] tty_ioctl+0x5dc/0x15c0 [ 424.399966][T18818] ? tty_register_device+0x40/0x40 [ 424.405058][T18818] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.411341][T18818] ? tomoyo_init_request_info+0x105/0x1d0 [ 424.417047][T18818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.423297][T18818] ? tomoyo_path_number_perm+0x263/0x520 [ 424.428915][T18818] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 424.434728][T18818] ? __lockdep_free_key_range+0x120/0x120 [ 424.440468][T18818] ? __fget+0x35a/0x550 [ 424.444627][T18818] ? tty_register_device+0x40/0x40 [ 424.449723][T18818] do_vfs_ioctl+0xd6e/0x1390 [ 424.454311][T18818] ? ioctl_preallocate+0x210/0x210 [ 424.459409][T18818] ? __fget+0x381/0x550 [ 424.463553][T18818] ? ksys_dup3+0x3e0/0x3e0 [ 424.467951][T18818] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.474174][T18818] ? fput_many+0x12c/0x1a0 [ 424.478577][T18818] ? tomoyo_file_ioctl+0x23/0x30 [ 424.483508][T18818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.489744][T18818] ? security_file_ioctl+0x93/0xc0 [ 424.494850][T18818] ksys_ioctl+0xab/0xd0 [ 424.498996][T18818] __x64_sys_ioctl+0x73/0xb0 [ 424.503592][T18818] do_syscall_64+0x103/0x610 [ 424.508175][T18818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.514062][T18818] RIP: 0033:0x4582b9 [ 424.517966][T18818] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.537553][T18818] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.545944][T18818] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 [ 424.553896][T18818] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 424.561855][T18818] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 424.570262][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 19:56:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:25 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}}) 19:56:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000000000000010bcfb193e7ee00"/88, 0x58}], 0x1) 19:56:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5414, &(0x7f00000000c0)=0x6) [ 424.578320][T18818] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 19:56:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xb0500000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5415, &(0x7f00000000c0)=0x6) 19:56:25 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}}) 19:56:25 executing program 4 (fault-call:3 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000000000000000ecfb193e7ee00"/88, 0x58}], 0x1) [ 424.889398][T18842] FAULT_INJECTION: forcing a failure. [ 424.889398][T18842] name failslab, interval 1, probability 0, space 0, times 0 [ 424.916157][T18842] CPU: 0 PID: 18842 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 424.924157][T18842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.924164][T18842] Call Trace: 19:56:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5416, &(0x7f00000000c0)=0x6) [ 424.924191][T18842] dump_stack+0x172/0x1f0 [ 424.924218][T18842] should_fail.cold+0xa/0x15 [ 424.937548][T18842] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 424.952273][T18842] ? ___might_sleep+0x163/0x280 [ 424.957145][T18842] __should_failslab+0x121/0x190 [ 424.962105][T18842] should_failslab+0x9/0x14 [ 424.966619][T18842] kmem_cache_alloc_trace+0x2d1/0x760 [ 424.972010][T18842] slip_open+0x933/0x1138 [ 424.976358][T18842] ? sl_uninit+0x20/0x20 [ 424.980618][T18842] ? lock_downgrade+0x880/0x880 [ 424.985485][T18842] ? sl_uninit+0x20/0x20 19:56:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5418, &(0x7f00000000c0)=0x6) [ 424.989746][T18842] tty_ldisc_open.isra.0+0x8b/0xe0 [ 424.994864][T18842] tty_set_ldisc+0x2d7/0x690 [ 424.999469][T18842] tty_ioctl+0x5dc/0x15c0 [ 425.003832][T18842] ? tty_register_device+0x40/0x40 [ 425.008951][T18842] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 425.015200][T18842] ? tomoyo_init_request_info+0x105/0x1d0 [ 425.020930][T18842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.027175][T18842] ? tomoyo_path_number_perm+0x263/0x520 [ 425.032825][T18842] ? tomoyo_execute_permission+0x4a0/0x4a0 19:56:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541d, &(0x7f00000000c0)=0x6) [ 425.038666][T18842] ? __lockdep_free_key_range+0x120/0x120 [ 425.044402][T18842] ? __fget+0x35a/0x550 [ 425.048656][T18842] ? tty_register_device+0x40/0x40 [ 425.053874][T18842] do_vfs_ioctl+0xd6e/0x1390 [ 425.058491][T18842] ? ioctl_preallocate+0x210/0x210 [ 425.063618][T18842] ? __fget+0x381/0x550 [ 425.067790][T18842] ? ksys_dup3+0x3e0/0x3e0 [ 425.072214][T18842] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 425.078494][T18842] ? fput_many+0x12c/0x1a0 [ 425.082924][T18842] ? tomoyo_file_ioctl+0x23/0x30 [ 425.087866][T18842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.087885][T18842] ? security_file_ioctl+0x93/0xc0 [ 425.087906][T18842] ksys_ioctl+0xab/0xd0 [ 425.087925][T18842] __x64_sys_ioctl+0x73/0xb0 [ 425.087948][T18842] do_syscall_64+0x103/0x610 [ 425.103427][T18842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.103440][T18842] RIP: 0033:0x4582b9 [ 425.103455][T18842] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 425.103464][T18842] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.103479][T18842] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 [ 425.103489][T18842] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 425.103498][T18842] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 425.103507][T18842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 [ 425.103515][T18842] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 19:56:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000000000000000fcfb193e7ee00"/88, 0x58}], 0x1) 19:56:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f00000000c0)=0x6) 19:56:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}}) 19:56:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x100000000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:26 executing program 4 (fault-call:3 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) 19:56:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541f, &(0x7f00000000c0)=0x6) 19:56:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd000000100002000000000000001ccfb193e7ee00"/88, 0x58}], 0x1) 19:56:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:27 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) 19:56:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000060cfb193e7ee00"/88, 0x58}], 0x1) [ 425.900774][T18893] FAULT_INJECTION: forcing a failure. [ 425.900774][T18893] name failslab, interval 1, probability 0, space 0, times 0 [ 425.961083][T18893] CPU: 1 PID: 18893 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 425.969099][T18893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.979160][T18893] Call Trace: [ 425.982475][T18893] dump_stack+0x172/0x1f0 [ 425.986828][T18893] should_fail.cold+0xa/0x15 [ 425.991437][T18893] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 425.997257][T18893] ? ___might_sleep+0x163/0x280 [ 426.002129][T18893] __should_failslab+0x121/0x190 [ 426.007086][T18893] should_failslab+0x9/0x14 [ 426.011608][T18893] kmem_cache_alloc_trace+0x2d1/0x760 [ 426.017000][T18893] ? init_timer_key+0x122/0x370 [ 426.021868][T18893] slip_open+0x933/0x1138 [ 426.026219][T18893] ? sl_uninit+0x20/0x20 [ 426.030469][T18893] ? lock_downgrade+0x880/0x880 [ 426.035333][T18893] ? sl_uninit+0x20/0x20 [ 426.039599][T18893] tty_ldisc_open.isra.0+0x8b/0xe0 [ 426.044726][T18893] tty_set_ldisc+0x2d7/0x690 [ 426.049330][T18893] tty_ioctl+0x5dc/0x15c0 [ 426.053677][T18893] ? tty_register_device+0x40/0x40 [ 426.058795][T18893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 426.065045][T18893] ? tomoyo_init_request_info+0x105/0x1d0 [ 426.070784][T18893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.077031][T18893] ? tomoyo_path_number_perm+0x263/0x520 [ 426.082687][T18893] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 426.088504][T18893] ? __lockdep_free_key_range+0x120/0x120 [ 426.094245][T18893] ? __fget+0x35a/0x550 [ 426.098417][T18893] ? tty_register_device+0x40/0x40 [ 426.103538][T18893] do_vfs_ioctl+0xd6e/0x1390 [ 426.108141][T18893] ? ioctl_preallocate+0x210/0x210 [ 426.113261][T18893] ? __fget+0x381/0x550 [ 426.117430][T18893] ? ksys_dup3+0x3e0/0x3e0 [ 426.121853][T18893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 426.128108][T18893] ? fput_many+0x12c/0x1a0 [ 426.132538][T18893] ? tomoyo_file_ioctl+0x23/0x30 [ 426.137494][T18893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.143742][T18893] ? security_file_ioctl+0x93/0xc0 [ 426.148867][T18893] ksys_ioctl+0xab/0xd0 [ 426.153040][T18893] __x64_sys_ioctl+0x73/0xb0 [ 426.157656][T18893] do_syscall_64+0x103/0x610 [ 426.162258][T18893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.168156][T18893] RIP: 0033:0x4582b9 [ 426.172058][T18893] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 426.191678][T18893] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.200100][T18893] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 19:56:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000010000200000000ffffff9ecfb193e7ee00"/88, 0x58}], 0x1) 19:56:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5421, &(0x7f00000000c0)=0x6) [ 426.208086][T18893] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 426.216063][T18893] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 426.224053][T18893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 [ 426.232045][T18893] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 19:56:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000010000200000000fffffff0cfb193e7ee00"/88, 0x58}], 0x1) 19:56:27 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) 19:56:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x200000000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:56:27 executing program 4 (fault-call:3 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 19:56:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5424, &(0x7f00000000c0)=0x6) 19:56:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) 19:56:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5413, &(0x7f00000000c0)=0x6) 19:56:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd00000010000200000000ffffffffcfb193e7ee00"/88, 0x58}], 0x1) [ 426.924256][T18950] FAULT_INJECTION: forcing a failure. [ 426.924256][T18950] name failslab, interval 1, probability 0, space 0, times 0 [ 426.967078][T18950] CPU: 1 PID: 18950 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 426.975091][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.985152][T18950] Call Trace: [ 426.988459][T18950] dump_stack+0x172/0x1f0 [ 426.992807][T18950] should_fail.cold+0xa/0x15 [ 426.997409][T18950] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 427.003228][T18950] ? ___might_sleep+0x163/0x280 [ 427.008103][T18950] __should_failslab+0x121/0x190 [ 427.013053][T18950] should_failslab+0x9/0x14 [ 427.017583][T18950] kmem_cache_alloc_trace+0x2d1/0x760 [ 427.022967][T18950] ? slip_open+0x976/0x1138 [ 427.027477][T18950] ? rcu_read_lock_sched_held+0x110/0x130 [ 427.033202][T18950] ? kmem_cache_alloc_trace+0x354/0x760 [ 427.038757][T18950] slhc_init+0xa2/0x52a [ 427.042931][T18950] slip_open+0x99a/0x1138 [ 427.047284][T18950] ? sl_uninit+0x20/0x20 [ 427.051537][T18950] ? lock_downgrade+0x880/0x880 [ 427.056409][T18950] ? sl_uninit+0x20/0x20 [ 427.060660][T18950] tty_ldisc_open.isra.0+0x8b/0xe0 [ 427.065783][T18950] tty_set_ldisc+0x2d7/0x690 [ 427.070384][T18950] tty_ioctl+0x5dc/0x15c0 [ 427.074727][T18950] ? tty_register_device+0x40/0x40 [ 427.079839][T18950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.086095][T18950] ? tomoyo_init_request_info+0x105/0x1d0 [ 427.091829][T18950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.098086][T18950] ? tomoyo_path_number_perm+0x263/0x520 [ 427.103730][T18950] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 427.109544][T18950] ? __lockdep_free_key_range+0x120/0x120 19:56:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5425, &(0x7f00000000c0)=0x6) 19:56:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5427, &(0x7f00000000c0)=0x6) 19:56:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5428, &(0x7f00000000c0)=0x6) 19:56:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f00000000c0)=0x6) [ 427.115286][T18950] ? __fget+0x35a/0x550 [ 427.119455][T18950] ? tty_register_device+0x40/0x40 [ 427.124575][T18950] do_vfs_ioctl+0xd6e/0x1390 [ 427.129181][T18950] ? ioctl_preallocate+0x210/0x210 [ 427.134298][T18950] ? __fget+0x381/0x550 [ 427.138469][T18950] ? ksys_dup3+0x3e0/0x3e0 [ 427.142890][T18950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.149138][T18950] ? fput_many+0x12c/0x1a0 [ 427.153569][T18950] ? tomoyo_file_ioctl+0x23/0x30 [ 427.158530][T18950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 19:56:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5441, &(0x7f00000000c0)=0x6) [ 427.164778][T18950] ? security_file_ioctl+0x93/0xc0 [ 427.169907][T18950] ksys_ioctl+0xab/0xd0 [ 427.174086][T18950] __x64_sys_ioctl+0x73/0xb0 [ 427.178686][T18950] do_syscall_64+0x103/0x610 [ 427.183290][T18950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.183303][T18950] RIP: 0033:0x4582b9 [ 427.183318][T18950] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:56:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5413, &(0x7f00000000c0)=0x6) [ 427.183326][T18950] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.183340][T18950] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 [ 427.183349][T18950] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 427.183364][T18950] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 427.245026][T18950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 [ 427.253009][T18950] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 [ 427.275499][T18950] BUG: unable to handle kernel paging request at fffffffffffffff4 [ 427.283330][T18950] #PF error: [normal kernel read fault] [ 427.288875][T18950] PGD 8874067 P4D 8874067 PUD 8876067 PMD 0 [ 427.294870][T18950] Oops: 0000 [#1] PREEMPT SMP KASAN [ 427.300092][T18950] CPU: 0 PID: 18950 Comm: syz-executor.4 Not tainted 5.1.0-rc3+ #54 [ 427.308063][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.318150][T18950] RIP: 0010:slhc_free+0x31/0xb0 [ 427.323006][T18950] Code: 54 49 89 fc e8 b0 35 1c fd 4d 85 e4 74 77 e8 a6 35 1c fd 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d <4d> 8b 2c 24 4d 85 ed 74 0d e8 81 35 1c fd 4c 89 ef e8 89 02 54 fd [ 427.340401][ T3877] kobject: 'loop2' (0000000060baa2aa): kobject_uevent_env [ 427.342617][T18950] RSP: 0018:ffff88805da4f9f0 EFLAGS: 00010246 [ 427.342630][T18950] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90012a91000 [ 427.342640][T18950] RDX: 1ffffffffffffffe RSI: ffffffff8454595a RDI: fffffffffffffff4 [ 427.342649][T18950] RBP: ffff88805da4fa00 R08: ffff888099f964c0 R09: ffff888099f96db0 [ 427.342656][T18950] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffff4 [ 427.342665][T18950] R13: ffff8880a616b200 R14: 00000000ffffff97 R15: ffff8880631280c0 [ 427.342676][T18950] FS: 00007f61a5084700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 427.342685][T18950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.342693][T18950] CR2: fffffffffffffff4 CR3: 0000000097ba0000 CR4: 00000000001426f0 [ 427.342713][T18950] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.349947][ T3877] kobject: 'loop2' (0000000060baa2aa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 427.355858][T18950] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.355863][T18950] Call Trace: [ 427.355886][T18950] slip_open+0xe16/0x1138 [ 427.355906][T18950] ? sl_uninit+0x20/0x20 [ 427.355921][T18950] ? lock_downgrade+0x880/0x880 [ 427.355938][T18950] ? sl_uninit+0x20/0x20 [ 427.355955][T18950] tty_ldisc_open.isra.0+0x8b/0xe0 [ 427.355971][T18950] tty_set_ldisc+0x2d7/0x690 [ 427.355990][T18950] tty_ioctl+0x5dc/0x15c0 [ 427.371208][ T3877] kobject: 'loop5' (00000000a45e6631): kobject_uevent_env [ 427.371913][T18950] ? tty_register_device+0x40/0x40 [ 427.371930][T18950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.371945][T18950] ? tomoyo_init_request_info+0x105/0x1d0 [ 427.371965][T18950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.380049][ T3877] kobject: 'loop5' (00000000a45e6631): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 427.387883][T18950] ? tomoyo_path_number_perm+0x263/0x520 [ 427.387899][T18950] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 427.387914][T18950] ? __lockdep_free_key_range+0x120/0x120 [ 427.387935][T18950] ? __fget+0x35a/0x550 [ 427.387953][T18950] ? tty_register_device+0x40/0x40 [ 427.387969][T18950] do_vfs_ioctl+0xd6e/0x1390 [ 427.387990][T18950] ? ioctl_preallocate+0x210/0x210 [ 427.556784][T18950] ? __fget+0x381/0x550 [ 427.560955][T18950] ? ksys_dup3+0x3e0/0x3e0 [ 427.565381][T18950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.571622][T18950] ? fput_many+0x12c/0x1a0 [ 427.576043][T18950] ? tomoyo_file_ioctl+0x23/0x30 [ 427.581004][T18950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.587260][T18950] ? security_file_ioctl+0x93/0xc0 [ 427.592389][T18950] ksys_ioctl+0xab/0xd0 [ 427.596548][T18950] __x64_sys_ioctl+0x73/0xb0 [ 427.601148][T18950] do_syscall_64+0x103/0x610 [ 427.605743][T18950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.611641][T18950] RIP: 0033:0x4582b9 [ 427.615538][T18950] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.635134][T18950] RSP: 002b:00007f61a5083c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.643523][T18950] RAX: ffffffffffffffda RBX: 00007f61a5083c90 RCX: 00000000004582b9 [ 427.651479][T18950] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000004 [ 427.659440][T18950] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 427.667387][T18950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a50846d4 [ 427.675336][T18950] R13: 00000000004c2564 R14: 00000000004d52d0 R15: 0000000000000005 [ 427.683297][T18950] Modules linked in: [ 427.687186][T18950] CR2: fffffffffffffff4 [ 427.691334][T18950] ---[ end trace 4bb1299913c4d71b ]--- [ 427.696793][T18950] RIP: 0010:slhc_free+0x31/0xb0 [ 427.701964][T18950] Code: 54 49 89 fc e8 b0 35 1c fd 4d 85 e4 74 77 e8 a6 35 1c fd 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d <4d> 8b 2c 24 4d 85 ed 74 0d e8 81 35 1c fd 4c 89 ef e8 89 02 54 fd [ 427.721548][T18950] RSP: 0018:ffff88805da4f9f0 EFLAGS: 00010246 [ 427.727591][T18950] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90012a91000 [ 427.735547][T18950] RDX: 1ffffffffffffffe RSI: ffffffff8454595a RDI: fffffffffffffff4 [ 427.743507][T18950] RBP: ffff88805da4fa00 R08: ffff888099f964c0 R09: ffff888099f96db0 [ 427.751464][T18950] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffff4 [ 427.759434][T18950] R13: ffff8880a616b200 R14: 00000000ffffff97 R15: ffff8880631280c0 [ 427.767413][T18950] FS: 00007f61a5084700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 19:56:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x300000000000000) r1 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 427.776336][T18950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.782920][T18950] CR2: fffffffffffffff4 CR3: 0000000097ba0000 CR4: 00000000001426f0 [ 427.790889][T18950] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.798854][T18950] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.806803][T18950] Kernel panic - not syncing: Fatal exception [ 427.813586][T18950] Kernel Offset: disabled [ 427.817906][T18950] Rebooting in 86400 seconds..