[ 52.809929][ T26] audit: type=1800 audit(1568503826.748:21): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 52.857675][ T26] audit: type=1800 audit(1568503826.748:22): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 53.762295][ T9182] sshd (9182) used greatest stack depth: 24584 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. 2019/09/14 23:30:35 fuzzer started 2019/09/14 23:30:37 dialing manager at 10.128.0.26:32883 2019/09/14 23:30:37 syscalls: 2487 2019/09/14 23:30:37 code coverage: enabled 2019/09/14 23:30:37 comparison tracing: enabled 2019/09/14 23:30:37 extra coverage: extra coverage is not supported by the kernel 2019/09/14 23:30:37 setuid sandbox: enabled 2019/09/14 23:30:37 namespace sandbox: enabled 2019/09/14 23:30:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/14 23:30:37 fault injection: enabled 2019/09/14 23:30:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/14 23:30:37 net packet injection: enabled 2019/09/14 23:30:37 net device setup: enabled 23:32:11 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) syz_open_dev$audion(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREAD(r0, &(0x7f00000002c0)={0xb}, 0xb) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) close(r1) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) syzkaller login: [ 157.859028][ T9277] IPVS: ftp: loaded support on port[0] = 21 23:32:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000000c0)={0x6da, 0x0, 0x0, 0x76fb}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0xfff}) [ 157.927044][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 157.955713][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.963277][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.973779][ T9277] device bridge_slave_0 entered promiscuous mode [ 157.982006][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.990161][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.998279][ T9277] device bridge_slave_1 entered promiscuous mode [ 158.017404][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.028741][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.047563][ T9277] team0: Port device team_slave_0 added [ 158.054973][ T9277] team0: Port device team_slave_1 added [ 158.081515][ T9280] IPVS: ftp: loaded support on port[0] = 21 23:32:12 executing program 2: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpid() semget$private(0x0, 0x0, 0x100) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000080)) sync() ftruncate(0xffffffffffffffff, 0x208200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) unlink(0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) [ 158.154887][ T9277] device hsr_slave_0 entered promiscuous mode 23:32:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600610000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000a00000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x6) [ 158.253101][ T9277] device hsr_slave_1 entered promiscuous mode 23:32:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) [ 158.423516][ T9284] IPVS: ftp: loaded support on port[0] = 21 [ 158.432523][ T9282] IPVS: ftp: loaded support on port[0] = 21 [ 158.458013][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.465376][ T9277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.472850][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.479900][ T9277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.532238][ T9286] IPVS: ftp: loaded support on port[0] = 21 23:32:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=ANY=[]}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 158.684943][ T9284] chnl_net:caif_netlink_parms(): no params data found [ 158.707245][ T9280] chnl_net:caif_netlink_parms(): no params data found [ 158.724096][ T9282] chnl_net:caif_netlink_parms(): no params data found [ 158.754394][ T9277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.797596][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.806992][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.814660][ T9282] device bridge_slave_0 entered promiscuous mode [ 158.821747][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.829807][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.837452][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.845687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 158.856255][ T9277] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.863916][ T9284] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.870966][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.878685][ T9284] device bridge_slave_0 entered promiscuous mode [ 158.888934][ T9284] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.896079][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.903811][ T9284] device bridge_slave_1 entered promiscuous mode [ 158.920517][ T9284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.930689][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.938065][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.945858][ T9282] device bridge_slave_1 entered promiscuous mode [ 158.961816][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.975849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.984688][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.992001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.001798][ T9284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.016252][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.028661][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.036088][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.044219][ T9280] device bridge_slave_0 entered promiscuous mode [ 159.056788][ T9292] IPVS: ftp: loaded support on port[0] = 21 [ 159.074851][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.084654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.093075][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.100234][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.113680][ T9282] team0: Port device team_slave_0 added [ 159.119676][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.127023][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.135306][ T9280] device bridge_slave_1 entered promiscuous mode [ 159.152869][ T9284] team0: Port device team_slave_0 added [ 159.160432][ T9284] team0: Port device team_slave_1 added [ 159.167527][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.176112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.185778][ T9282] team0: Port device team_slave_1 added [ 159.206115][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.217236][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.229234][ T9286] chnl_net:caif_netlink_parms(): no params data found [ 159.254437][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.263930][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.273383][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.290207][ T9280] team0: Port device team_slave_0 added [ 159.299632][ T9280] team0: Port device team_slave_1 added [ 159.308407][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.317946][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.364196][ T9282] device hsr_slave_0 entered promiscuous mode [ 159.403088][ T9282] device hsr_slave_1 entered promiscuous mode [ 159.482877][ T9282] debugfs: Directory 'hsr0' with parent '/' already present! [ 159.524937][ T9284] device hsr_slave_0 entered promiscuous mode [ 159.593096][ T9284] device hsr_slave_1 entered promiscuous mode [ 159.642968][ T9284] debugfs: Directory 'hsr0' with parent '/' already present! [ 159.653521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.662038][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.744961][ T9280] device hsr_slave_0 entered promiscuous mode [ 159.783205][ T9280] device hsr_slave_1 entered promiscuous mode [ 159.822937][ T9280] debugfs: Directory 'hsr0' with parent '/' already present! [ 159.830515][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.837644][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.846192][ T9286] device bridge_slave_0 entered promiscuous mode [ 159.854130][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.861160][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.869366][ T9286] device bridge_slave_1 entered promiscuous mode [ 159.878893][ T9277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.890036][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.910685][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.919377][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.965428][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.977302][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.990452][ T9292] chnl_net:caif_netlink_parms(): no params data found [ 160.007938][ T9286] team0: Port device team_slave_0 added [ 160.015353][ T9286] team0: Port device team_slave_1 added [ 160.054572][ T9277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.062058][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.069461][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.077324][ T9292] device bridge_slave_0 entered promiscuous mode [ 160.086128][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.093385][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.100825][ T9292] device bridge_slave_1 entered promiscuous mode [ 160.115511][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.138406][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.214726][ T9286] device hsr_slave_0 entered promiscuous mode [ 160.253118][ T9286] device hsr_slave_1 entered promiscuous mode [ 160.293001][ T9286] debugfs: Directory 'hsr0' with parent '/' already present! [ 160.313349][ T9292] team0: Port device team_slave_0 added [ 160.319988][ T9292] team0: Port device team_slave_1 added [ 160.331072][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.374842][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.404980][ T9292] device hsr_slave_0 entered promiscuous mode [ 160.443033][ T9292] device hsr_slave_1 entered promiscuous mode [ 160.482807][ T9292] debugfs: Directory 'hsr0' with parent '/' already present! [ 160.492153][ T9284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.507299][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.518602][ T9280] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.529244][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.537635][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.545842][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.553758][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.567658][ T9284] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.591808][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.599955][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.609623][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.619084][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.627495][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.634573][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.642513][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.651290][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.659741][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.666788][ T9287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.674589][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.683173][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.691495][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.700164][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.708526][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.716916][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.725180][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.733595][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.741918][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.749691][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.762163][ T9282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.773495][ T9282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:32:14 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) syz_open_dev$audion(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREAD(r0, &(0x7f00000002c0)={0xb}, 0xb) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) close(r1) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 160.805404][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.815833][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.824284][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.836468][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.845852][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.853085][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.863439][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.872031][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.880695][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.887870][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.895893][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.904377][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.913930][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.922242][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.930671][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.939118][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.947534][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.955645][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.963909][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.971991][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.980252][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.988752][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.997260][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.004522][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.019981][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.030141][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.048326][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 23:32:15 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) syz_open_dev$audion(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREAD(r0, &(0x7f00000002c0)={0xb}, 0xb) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) close(r1) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 161.056297][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.065877][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.076507][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.084403][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.096560][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.107344][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.114447][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.122447][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.138737][ T9280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.148516][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.173129][ C1] hrtimer: interrupt took 24335 ns [ 161.180662][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.190080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.201711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 23:32:15 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) syz_open_dev$audion(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREAD(r0, &(0x7f00000002c0)={0xb}, 0xb) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) close(r1) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 161.218450][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.227031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.236813][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.245272][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.253860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.262084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.270600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.283708][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.292916][ T9284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.304596][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:32:15 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() capset(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x40040000) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) connect$unix(r1, &(0x7f000066fff4)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) [ 161.323669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.331640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.341888][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.349560][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.359199][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.369926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.386900][ T9348] IPVS: ftp: loaded support on port[0] = 21 [ 161.393425][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.401622][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.408844][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.417174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.426579][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.434985][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.442108][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.449775][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.458389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.467112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.475681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.499776][ T9284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.511628][ T9292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.530110][ T9292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.565729][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.577332][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.586702][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.595785][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.605178][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.612613][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.620443][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.629410][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.637869][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.645096][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.656920][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.666460][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.675626][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.685097][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.693800][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.702407][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.710858][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.719307][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.727598][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.735930][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.745649][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.753479][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.761003][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.768564][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.776940][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.815235][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.907572][ T9286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.929058][ T9286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 23:32:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_delroute={0x28, 0x19, 0x71d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) [ 161.952346][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.964209][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.979827][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.993404][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 23:32:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000013c0)=""/4096, 0x400c}], 0x1}, 0x0) [ 162.001961][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:32:16 executing program 1: syz_open_dev$loop(0x0, 0x1, 0x0) creat(0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@rthdr={{0x48, 0x29, 0x39, {0x2, 0x6, 0x3, 0x0, 0x0, [@loopback, @empty, @mcast1]}}}, @dstopts_2292={{0x208, 0x29, 0x4, {0x2f, 0x3d, [], [@generic={0x3, 0xf8, "87d8a5445ae6281557f739a326e37d81607df2ece2c60e6d2d455654cc6b6e37a258ad2d8b929fd27bdc007a42c06b6a67249d356de1e04080e8382f57e08d519901712907193f84425d5e0462607a6ec3aced38a14cee2a962fd0d40d93e2e1e641227da324d87e44299bf171438644f3586f2291a09629769915e5ecccdfdd05f735641ec50718aa4203e3d2f2643f2f41e20791e4c0d743af738f2f3ad029504a1304625d7fdbc86fef52479795e667623239948234f91d2a6cab786ad2f885d2866dacdce55dd14c209b8e48924c56941f8b92d36d499a9407bbc8a75559418a22725e3916738c30a5b35e2174fb49471b660927f42c"}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x0, 0x25, "15e5f3fd3db5201cc569de64a9fbb20395656a022fbec17a9638c0212a4ec7436aa372e61d"}, @jumbo={0xc2, 0x4, 0xe47}, @generic={0x9c, 0xbf, "7265baeb7c4b4a58418916a03d8778ad995bb2a227f8ab84cd806bbbebd05e5f059be6621c6d4082cfb60f88af5b9a4803f7fb2fe660576579fdc5346732a6569e53a11856a9c87887820d82bccf9f628ae8af5e7bddffc8e095e5aea6bbce79efd91c915a9048968560d41f04a0669545adc366ea633469453e0c1085cc124491e05e4d1a1dd03ee47a0bc37199dc38b48c57cc1702a68975eb118e3cd34b1cbd4f2f0d1a14556c0b979e5f9acbbb8885897f0cac4b7cff7bf993343f966f"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts={{0xe0, 0x29, 0x37, {0x1d, 0x18, [], [@jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x1, [0x0]}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8001, 0x9d, "884ea1c6fa0708ba59ba84890385be277159e719dd32f66ba51d32fe338d861bea9cdfdc1262911b06097669635d40ace7ff827348f8bd3470113e014d83684e0f40dd8b0304a730352e7e11dccb1c108d2b6cefa849e907ac72a7a21476c330ca407550cfeb99c3de0998e26a73a594648c2fc98f6695326e6fdba55d2fa67b675450f32b21ebfd52d242caf768745b37b036d193103e0bf131b98177"}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x0, 0x0, [@local, @rand_addr="7ae53bfb93bcb729a1bace90a3e7523b", @remote, @local]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x6, 0x0, [@local, @empty]}}}], 0x420}, 0x40000c1) getpid() dup(0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 23:32:16 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) syz_genetlink_get_family_id$team(0x0) sendfile(r1, r1, 0x0, 0x8000) socket(0x10, 0x0, 0x0) [ 162.029318][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 23:32:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x1df, 0x95, &(0x7f0000000040)="000000ac40010000045c66bb8ab3", 0x0, 0x8001}, 0x28) mount(0x0, 0x0, &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000200)) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)) 23:32:16 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0}) setitimer(0x0, &(0x7f0000000100)={{}, {r0}}, 0x0) alarm(0x0) [ 164.372978][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 164.379272][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 166.452891][ T9287] Bluetooth: hci0: command 0x1001 tx timeout [ 166.459006][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 168.532866][ T3516] Bluetooth: hci0: command 0x1009 tx timeout 23:32:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:32:26 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) syz_genetlink_get_family_id$team(0x0) sendfile(r1, r1, 0x0, 0x8000) socket(0x10, 0x0, 0x0) 23:32:26 executing program 0: 23:32:26 executing program 5: 23:32:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040)) 23:32:26 executing program 1: r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)=""/93, 0x5d}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}, 0x100) r6 = openat$cgroup_procs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x10, 0x0) write(r6, &(0x7f00000000c0)="16e8720fd40264841ead0559de658642ab02a528c0fa9efc5125b1844bc7ba734d5099396bb7ce83d402f4fcc3b8e7ea0fa3f46805afef4638e666dac40f9e0a7bf51e6d317eaffaf8826484b219401f6c7056f629b38b5d9d54a8332c79beb5b260efef2c295070cc06bbeceffda56c0685d9f319539cfab1253486119e46bf49cc97ae4e8d5c5e1b8f327ccaba7b08166ab265727b16b8e8e6fcdff76953ee5454ff536da7d2d904a1811f9f46604dd03742ddd780b5be2b24ce157ff430b6e20f4ce7", 0xc4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 23:32:26 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x20b) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0xa, 0x4e23, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x1c}, 0x1}, 0x1c, &(0x7f0000000500)=[{0x0}, {&(0x7f00000003c0)="810f339ef3cf0628440eb6a7d26b1374499e15b52a2a597c80b68d9c251252a92f1eece77665a7e4", 0x28}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000b40)=[@rthdr={{0x48, 0x29, 0x39, {0x2, 0x6, 0x3, 0x0, 0x0, [@loopback, @empty, @mcast1]}}}, @dstopts_2292={{0x208, 0x29, 0x4, {0x2f, 0x3d, [], [@generic={0x3, 0xf8, "87d8a5445ae6281557f739a326e37d81607df2ece2c60e6d2d455654cc6b6e37a258ad2d8b929fd27bdc007a42c06b6a67249d356de1e04080e8382f57e08d519901712907193f84425d5e0462607a6ec3aced38a14cee2a962fd0d40d93e2e1e641227da324d87e44299bf171438644f3586f2291a09629769915e5ecccdfdd05f735641ec50718aa4203e3d2f2643f2f41e20791e4c0d743af738f2f3ad029504a1304625d7fdbc86fef52479795e667623239948234f91d2a6cab786ad2f885d2866dacdce55dd14c209b8e48924c56941f8b92d36d499a9407bbc8a75559418a22725e3916738c30a5b35e2174fb49471b660927f42c"}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x0, 0x25, "15e5f3fd3db5201cc569de64a9fbb20395656a022fbec17a9638c0212a4ec7436aa372e61d"}, @jumbo={0xc2, 0x4, 0xe47}, @generic={0x9c, 0xbf, "7265baeb7c4b4a58418916a03d8778ad995bb2a227f8ab84cd806bbbebd05e5f059be6621c6d4082cfb60f88af5b9a4803f7fb2fe660576579fdc5346732a6569e53a11856a9c87887820d82bccf9f628ae8af5e7bddffc8e095e5aea6bbce79efd91c915a9048968560d41f04a0669545adc366ea633469453e0c1085cc124491e05e4d1a1dd03ee47a0bc37199dc38b48c57cc1702a68975eb118e3cd34b1cbd4f2f0d1a14556c0b979e5f9acbbb8885897f0cac4b7cff7bf993343f966f"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts={{0xe0, 0x29, 0x37, {0x1d, 0x18, [], [@jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x1, [0x0]}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8001, 0x9d, "884ea1c6fa0708ba59ba84890385be277159e719dd32f66ba51d32fe338d861bea9cdfdc1262911b06097669635d40ace7ff827348f8bd3470113e014d83684e0f40dd8b0304a730352e7e11dccb1c108d2b6cefa849e907ac72a7a21476c330ca407550cfeb99c3de0998e26a73a594648c2fc98f6695326e6fdba55d2fa67b675450f32b21ebfd52d242caf768745b37b036d193103e0bf131b98177"}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x0, 0x0, [@local, @rand_addr="7ae53bfb93bcb729a1bace90a3e7523b", @remote, @local]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x6, 0x0, [@local, @empty]}}}], 0x420}, 0x40000c1) getpid() semget$private(0x0, 0x0, 0x100) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000080)) sync() setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000280)=0x100, 0x4) ftruncate(0xffffffffffffffff, 0x208200) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000300)) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x241) 23:32:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000000000020100000000000000010000840700000000000000020000000000000000300000612e00"], &(0x7f0000004600)=""/210, 0x4f, 0x193, 0x1}, 0x20) 23:32:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0x430}, 0x0, 0x8) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x20, r0, 0x0, 0x6) 23:32:27 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) syz_genetlink_get_family_id$team(0x0) sendfile(r1, r1, 0x0, 0x8000) socket(0x10, 0x0, 0x0) 23:32:27 executing program 1: r0 = socket$inet6(0xa, 0x800000000000003, 0xde) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473d727590165a0934725eaba446e57195b8ffb2cbaab607903b61f898290e935ee"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 23:32:27 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0xfffffffffffffe06, 0x2020844, 0x0, 0xffffffffffffff65) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x7cd97198ffceefe2, 0x0, 0x0, 0xffffffffffffffae) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f00000001c0)=""/244, 0x68) [ 173.149082][ T9482] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.022799][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 175.028974][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 177.092896][ T3516] Bluetooth: hci0: command 0x1001 tx timeout [ 177.099149][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 179.172858][ T3014] Bluetooth: hci0: command 0x1009 tx timeout 23:32:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:32:37 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 23:32:37 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) syz_genetlink_get_family_id$team(0x0) sendfile(r1, r1, 0x0, 0x8000) socket(0x10, 0x0, 0x0) 23:32:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="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", 0x103}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:32:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x101, 0x200) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x9, {0x14f4b279, 0x5, 0xa9f7, 0x0, 0x1, 0x6}, 0x6, 0x6}, 0xe) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4b, 0x0, &(0x7f0000000040)=0x1a7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x5, 0xe6, &(0x7f0000000140)="e092a1bd04cbb689081f94f22bf0cc6271197807fce2da112c3c7d4a9f09bc17dd737110919768bae24f2ac3814b77f3d340d6cde9afa8820d4f586c02ce2ee9d7311f8ffdf39b2078b38c39c726828cfad533259f0d783be6ada3cbe5b4a80ce1fc3cb17f3063e4de14c1d419950c7e8adcda956c613b633ef8ea6fa46dc5aa6864df8014235a785a12638a20eb29843219cc81a919cc9f48624fa59737867eef6cfc84af3e35d5aba2322fc8199dd989b69b6039b62dd2624748620606b7ffd84a836363ca39453725e7295d615e7c79f379a17c299e65831f14472dd76ad149565eb9bd57", 0x5, 0x4, 0x5, 0x6, 0xb3, 0x0, 0x3, 'syz1\x00'}) getgid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9, 0x2, 0xff, 0xc, 0x590, 0x3f}, 0x20) 23:32:37 executing program 1: r0 = socket$inet(0x2, 0x803, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") getsockopt(r0, 0xff, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000040)=0xfffffec3) 23:32:37 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) syz_genetlink_get_family_id$team(0x0) sendfile(r1, r1, 0x0, 0x8000) 23:32:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x7735fb3f45af755b, 0x0, 0x1c96, 0x2}, 0xc) readahead(r0, 0xa1, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x2200) ioctl$TCSBRK(r1, 0x5409, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e20, 0x1f, @rand_addr="556c4a18f43ecb05171378224531acb2", 0xba4}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r3, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r5, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3fc}) r6 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x406, r6) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x82565) r7 = syz_open_pts(r2, 0x40000000002) fcntl$dupfd(r2, 0x0, r2) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r8 = dup3(r7, r2, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f00000011c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42000, 0x0) write$UHID_INPUT(r8, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) [ 183.366511][ T9522] Unknown ioctl 1074025521 23:32:37 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) sendfile(r1, r1, 0x0, 0x8000) 23:32:37 executing program 1: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='\x00\x00\x00') socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) dup3(r7, r0, 0x180000) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10000, 0x0) r10 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r11 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) fchdir(r0) [ 183.428758][ T9527] Unknown ioctl 1074025521 23:32:37 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, r1, 0x0, 0x8000) 23:32:37 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) sendfile(r1, r1, 0x0, 0x8000) [ 185.332809][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 185.339002][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 187.412842][ T3516] Bluetooth: hci0: command 0x1001 tx timeout [ 187.419044][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 189.492867][ T9287] Bluetooth: hci0: command 0x1009 tx timeout 23:32:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:32:47 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) sendfile(r1, r1, 0x0, 0x8000) 23:32:47 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) sendfile(r1, r1, 0x0, 0x8000) 23:32:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fanotify_mark(0xffffffffffffffff, 0x59, 0x68001023, 0xffffffffffffff9c, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000140)=0x80) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0xf384, 0x800000008}) 23:32:47 executing program 5: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0x9}, 0x28, 0x1) getsockopt$bt_hci(r0, 0x0, 0x4, &(0x7f0000000040)=""/142, &(0x7f0000000140)=0x8e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x903, 0x0) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000300)={r6, &(0x7f0000000880)=""/196}) sendto(r5, &(0x7f0000000980)="e15fbf911b2ba859ac8f48070efba0191fbfc7b07238262ec5161054133dd4c3ac6057bcd1d38198dfa1805e86f16e2528ced0f4ab8753a430f8e0234e66146b8298ba7a89c67a3af2cc071b1d7c74ff04593df4058fc4d7f7d73419893dfbf63f05eddc9d30a41ee41749cf32646249b4bd57ebdd4a92cf2349bd13b073d1c0499a7dccdbc85dfb4822611a2eef5619262facc5076420e6634b65dfe3e8913981ce4e2b71c9b7d76b45e87b3a11c5aee00c82dc22be582da9fe48f164a4cb628db925b6fde5b453c7ba3fa9ffc5cf04dafb475620f85755791c1cfb811acf", 0xfd, 0x878, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="b80000000000000008000000f800ffff04000000000000000200000000000000070000000000000000010000040000003f0000000000000001000000000000000600000000000000ff0f00dee58400000000000002004ed4259a140200800000000000040000000000000006000000450000000100000000000000ff", @ANYRES32=r7, @ANYRES32, @ANYBLOB="00010000f9ffffff00000000000ad89d448d000000546465762f66756c6c000000000000000000004000"/52], 0xb8) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000640)={r6, &(0x7f0000000600)=""/35}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000040)={r6, &(0x7f00000000c0)=""/157}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000003c0)={r6, 0x1, &(0x7f00000002c0)=[0x9], &(0x7f0000000300)=[0x3], 0x62, 0x7, 0x6, &(0x7f0000000340)=[0x2, 0x7fffffff, 0xffffffff, 0x5085ed87, 0x1, 0x7fff, 0x8], &(0x7f0000000380)=[0x8184, 0x1, 0x3]}) ioctl(r1, 0x8, &(0x7f0000000040)="11dca50d5e0bcfe47bf070bd78fb096a99ee69c65f8618e414df64e13fb53e65664b") ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000400)={'veth0_to_team\x00', 0x10000}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x2c, @broadcast, 0x4e24, 0x3, 'sed\x00', 0x4, 0x4, 0x7f}, 0x2c) 23:32:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) [ 193.454515][ T9552] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 23:32:47 executing program 1: futex(0x0, 0x8c, 0x1, 0x0, 0xfffffffffffffffe, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r0, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r2, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) read$rfkill(r0, &(0x7f0000000000), 0x8) 23:32:47 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffb) sendfile(r1, r1, 0x0, 0x8000) 23:32:47 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) sendfile(r1, r1, 0x0, 0x8000) [ 193.501560][ T9564] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 23:32:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff79, 0xfa00, {0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) close(r0) 23:32:47 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x81, 0x469}, 0x0) sendfile(r1, r1, 0x0, 0x8000) 23:32:47 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendfile(r1, r1, 0x0, 0x8000) [ 195.572836][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 195.578917][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 197.652865][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 197.658962][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 199.732813][ T3516] Bluetooth: hci0: command 0x1009 tx timeout 23:32:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:32:57 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c40), 0x8) sendfile(r1, r1, 0x0, 0x8000) 23:32:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) r4 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r4, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8000000, 0x0, 0x0, 0x0, 0x4, 0x316, 0x106, 0x0, 0x80000000000, 0x4000000000000000, 0x0, 0x0, 0x0, 0x8000, 0x80], 0x1f000, 0x2000}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) sendmmsg$inet_sctp(r5, &(0x7f0000003a00)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001000)="ec94f605066202f442c5e29c0c4bdc48d00986b27165e9dcb73f9db3f230b3104f6545250dcb3d3655e59647be411a13627784da0eb562f2e74b7b47c5200a31b1a6ddf560b3de40f2cdfdbf90ba015cfb64157ad43db356bf19e2d998ee9c49b76b54a805fd3da348ad4f027b24124b8a0b9f857ac378f531a55cf6fe50af90bb29275da4bece1b1d27f991f076a6678e64eb4faef999087b6cdb602b2716fe3505d617c4c4a9bdd77d0a39ac1dac7d701366ac86d7829d2b9c10283abaa83abe60c17186e071041a0047806cc5b8ec67f1", 0xd2}, {&(0x7f0000000140)="8d28345db98995944e8301648adc52b861dfbea1901019e1f4013740c7540ab9b68f3af68c67d79f739a337e208dc21e006276178b928f32d118191a0767b1268fb6b2", 0x43}, {&(0x7f0000001100)="dfc0fd814427f29de5307fcd616a84292aae6e8bca7e87d85c0e37fc1c0f95257c29f9af01be910fbdcb936256117b63e3b5daf912dc9e02f5b2c8573d0abee555516d0eef0106b141ccbbb18830f6bc6ffeeb811fd980dc321b9465f2be40d5dcb7dcfff99ef15d80ad75196627325ebc43660350462aa2321ad4f59d444af2f9512a98", 0x84}], 0x3}], 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x8003a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x4}}, 0x0, 0x8, 0x0, "5a52711019d7473b404cabd579c21cee0ca8b0a76189fd33b61af251f6b8c7570e3805151d86da9f7651d71511c037d03ea1708199fb3b2cf6763176473c2a294b4b437a9cee0f27392a4015d1db87a9"}, 0xd8) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/45, 0x2d, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:32:57 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r1, 0x0, 0x8000) 23:32:57 executing program 5: r0 = gettid() tkill(r0, 0x1000000000013) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)="43b9e75c00f886f5de152fb3aa482f7cf0e3dca69bc3bfa1d710913712429fe231901fb67543451e864fef369ddb9b5e54894c9a362e85c48b163308c8c63defa2f4f54fd56c2f21e727f1394f3fc21071b122275904127792f539f65d75c3588c4942f0a9477cf8392a88ac6a0b870c33dd86c3877e37ae213333ff8209bf3c19bd9d5a7368aa6c191ae270b68ecb52d35ae0a2fc94dc5c508a6e9a045681ba754bd3", 0xa3}) r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x100000289) r2 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000014) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="34a02ba5db59db83b2cf6f750694ebaefe898c20e862325b7b12036017fe4e1a19e34c92b9d03121bf3a5afd88245409a2a5e88bff", 0x35, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s_U', 0x2}, 0x0, 0x0, r4) keyctl$read(0xb, r5, &(0x7f0000000180)=""/176, 0xb0) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$instantiate(0xc, r3, &(0x7f0000000240)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, r6) 23:32:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) recvmmsg(r1, &(0x7f0000002380)=[{{&(0x7f00000000c0)=@l2, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000340)=""/234, 0xea}, {&(0x7f00000004c0)=""/136, 0x88}], 0x4, &(0x7f0000000600)=""/118, 0x76}, 0x10001}, {{&(0x7f0000000680)=@xdp, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000780)=""/112, 0x70}, {&(0x7f0000000800)=""/250, 0xfa}, {&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/52, 0x34}], 0x7}, 0x1}, {{&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/248, 0xf8}, {&(0x7f0000000c00)=""/42, 0x2a}, {&(0x7f0000000c40)=""/115, 0x73}], 0x3, &(0x7f0000000d00)=""/110, 0x6e}, 0x5}, {{&(0x7f0000000d80)=@caif=@rfm, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/166, 0xa6}], 0x1}, 0x5}, {{&(0x7f0000000f00)=@caif=@rfm, 0x80, &(0x7f0000001340)=[{&(0x7f0000000f80)=""/28, 0x1c}, {&(0x7f0000000fc0)=""/225, 0xe1}, {&(0x7f00000010c0)=""/39, 0x27}, {&(0x7f0000001100)=""/39, 0x27}, {&(0x7f0000001140)=""/3, 0x3}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/83, 0x53}, {&(0x7f0000001280)=""/137, 0x89}], 0x8}, 0x5}, {{&(0x7f00000013c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001440)=""/138, 0x8a}, {&(0x7f0000001500)=""/157, 0x9d}, {&(0x7f0000001740)=""/255, 0xff}, {&(0x7f00000015c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/232, 0xe8}, {&(0x7f0000001940)=""/199, 0xc7}], 0x6, &(0x7f0000001ac0)=""/131, 0x83}, 0x5}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/148, 0x94}, {&(0x7f0000001c40)=""/246, 0xf6}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/65, 0x41}, {&(0x7f0000001dc0)=""/133, 0x85}], 0x6, &(0x7f0000001640)=""/38, 0x26}}, {{&(0x7f0000001f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f80)=""/211, 0xd3}, {&(0x7f0000002080)=""/99, 0x63}, {&(0x7f00000016c0)=""/9, 0x9}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000002100)=""/94, 0x5e}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000002280)=""/98, 0x62}], 0x8}, 0x800}], 0x8, 0x20, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0xa46, 0xffffffffffffff7f}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r0, 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000980)=[0x2, 0x5]) sendmmsg$alg(r3, &(0x7f0000002900)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000480)="ac105df5b1218cd8855a0a1bf7c1204c53fcc3224e27d7ad37743ce3716193f14e", 0x21}], 0x1, &(0x7f0000001700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000005a80)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) [ 203.689609][ T9612] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:32:57 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x7c9) sendfile(r1, r1, 0x0, 0x8000) 23:32:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:32:57 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000) 23:32:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:32:57 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendfile(r1, r1, 0x0, 0x8000) 23:32:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:32:57 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) sendfile(r1, r1, 0x0, 0x8000) 23:32:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r3) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x20be]}, &(0x7f0000000040)=0x8) futimesat(r0, 0x0, 0x0) 23:32:57 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r1, 0x0, 0x8000) 23:32:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10}) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) fcntl$setlease(r4, 0x400, 0x6) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000300)) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb263}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0x4004ae8b, 0x0) 23:33:00 executing program 2: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:00 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) write(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000) 23:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:00 executing program 0: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x6, 0xfffffffffffffeff, &(0x7f0000000080)=0x4}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x200) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xffff, 0x201) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 23:33:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r2) sendmsg$inet_sctp(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="1800"/18], 0x18}, 0x0) 23:33:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x202, 0x0) write$P9_RXATTRWALK(r3, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x10000}, 0xf) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:33:00 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) 23:33:00 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) sendfile(r1, r1, 0x0, 0x8000) 23:33:00 executing program 2: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xffffffffffffffd2}, {&(0x7f0000000080)=""/11, 0x4}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0xf}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0x100000206}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x3, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 23:33:00 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) 23:33:00 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x4d865355ea757872) r1 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x8, 0x7fff, 0x7, 0x7}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) 23:33:00 executing program 3: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:00 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) 23:33:00 executing program 2: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) 23:33:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x30, r1, 0x821, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, '\nridge_slave_1\x00'}}]}]}, 0x30}}, 0x0) r2 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000040)=""/215, &(0x7f0000000140)=0xd7) 23:33:01 executing program 5: setreuid(0x0, 0xee00) r0 = geteuid() prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) setreuid(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x807bd59391395863, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/254, &(0x7f0000000180)=0xfe) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:33:01 executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x489, 0x33436e9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x28, &(0x7f0000000180)={{{@in=@empty, @in=@dev, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc0, 0x0, 0xf4}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1bb4}, {}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4d828cc75973c019}, {{@in6=@loopback, 0x4d6, 0x77464cafd683f044}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2}}, 0xe8) getpgrp(0x0) chroot(0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0xb000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80, 0x0) 23:33:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:01 executing program 3: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:01 executing program 2: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) 23:33:01 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x404c1) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0xa, 0x0, "44d6107ebf8ac483a6eb5dbddb25cb78c91fc8e657f69842bfeb3a71ee7c13cd"}) 23:33:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:01 executing program 3: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) 23:33:01 executing program 2: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) 23:33:01 executing program 5: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x8, 0x2, 0x0, 0x2000000000000}, 0xc) fcntl$dupfd(r0, 0xc0a, r1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x105686a, &(0x7f0000000240)={[{@minixdf='minixdf'}]}) 23:33:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:01 executing program 3: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) 23:33:01 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) [ 207.496418][ T9778] EXT4-fs (sda1): re-mounted. Opts: minixdf, 23:33:01 executing program 3: socket(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) 23:33:01 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:01 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r0, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r2, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r6, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r8, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) r9 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @empty}, &(0x7f0000000300)=0xc) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r13 = socket(0x100000000011, 0x2, 0x0) bind(r13, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r12, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r14, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) r15 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r16 = socket(0x100000000011, 0x2, 0x0) bind(r16, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r15, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r17, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000340)={'vcan0\x00', r17}) r19 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r19, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$inet6_mreq(r19, 0x29, 0x14, &(0x7f0000000380)={@loopback, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team_slave_0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8) r22 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/\x88\rock\x00', 0x2000, 0x0) r23 = socket(0x100000000011, 0x2, 0x0) bind(r23, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r23, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r22, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r24, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) r25 = socket(0x100000000011, 0x2, 0x0) bind(r25, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r25, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r26 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r27 = socket(0x100000000011, 0x2, 0x0) bind(r27, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r26, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r28, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r25, 0x8933, &(0x7f0000000680)={'vcan0\x00', r28}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'veth0_to_hsr\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000e80)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001680)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b40)={&(0x7f00000016c0)=ANY=[@ANYBLOB="60040000", @ANYRES16=r3, @ANYBLOB="080226bd7000fbdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="34020200400001002400010071756575655ffe0c18620636042813eff5c8696400000010000000000000000000000000000800030003000000", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004002b0e000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74010001006c00000000000000080003000300000008000400ff7f000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000008be22b1de7686c2ece47dd000000080003000300000008", @ANYRES32=r21, @ANYBLOB="f800020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400504509f6e90000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="08000100", @ANYRES32=r30, @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000c2ff030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000008000100", @ANYRES32=r31, @ANYBLOB="4400020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r32], 0x460}}, 0x4000890) r33 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r33, 0x10e, 0xc, &(0x7f00000000c0)={0x80000000b}, 0xe) write(r33, &(0x7f0000000040)="240000001a005f0214f9f4070009040081000000000000000300000008000400030a0000", 0x24) [ 207.611725][ T9792] EXT4-fs (sda1): re-mounted. Opts: minixdf, 23:33:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:01 executing program 1: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001240)='cpu&0&&!\n\x04\x00\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5\\\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae\xd4%\xd4e\x10ah=S\xb9\x80\xeaxq\x93 \xce\x03\rXo\x11\xc0x\xf0R\"Z\xa1\xfa\xc3(+(\x98\x89\x9eU7`\xd1?*4R`T\x93V\xc5\x87V\xc7\xf4EQs\x9c\xaaa\xe9\xbd\xc5\xe6\x92\x18\x91>z}\x87\xd41\xb5\x94\xdc\x18\xdap\xc8\x1f\xfab\x99\xca\x12\xcb\xf0\x9e\x00\xf4\xf4\xa8\xa8\x1a\xc4\x95\xac\xbci\xe9c\b\x91v{*\xf0\x8f\xb5\x88\xf9X\x14\a\xac\xd8eO\xbf\xf9oI\xd2\xc9\xae\xc9\xc3\xd5\xb4\xfdN\xb5\x85lm\xa1p\x88n_\xe9\x9e\xa4\xb6\xebq\x96\xa6\xcc\xb2\x0e]\a\x19\xc8\xef=\x94\x8f\xf62\n\xe5R0jp\x91z\x17\xd4\xa3r\xfe\x9b') timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) timer_delete(r2) timer_getoverrun(r2) 23:33:01 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x2, 0xa1a41) 23:33:01 executing program 2: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:01 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) [ 207.704652][ T9807] Unknown ioctl 35123 23:33:01 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) [ 207.742844][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 23:33:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:01 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7, 0x0, 0x0) 23:33:01 executing program 3: socket(0x0, 0x1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) [ 208.057501][ T9851] Unknown ioctl 35123 23:33:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) 23:33:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x4207, 0x0) 23:33:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:02 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000dc0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x10, 0x1}], 0x10}, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000fedbdf25f8fffeffffff001200000000000000000000000081fc64a119d84975807948c2e664a3c2af295688eb96692e79"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) 23:33:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 5: r0 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x100}, 0x0, 0xffffffffffffffff, r0, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000440)={0x3, 0x1f, 0x1, 0xba, &(0x7f0000000300)=""/186, 0x48, &(0x7f0000000100)=""/72, 0xbe, &(0x7f0000000500)=""/190}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='meMory.e_ents\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000}, 0x640, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000600)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x100, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, &(0x7f0000000280)=r4, 0x706) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040), &(0x7f00000001c0)=0x14) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000480)=0x1, 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) 23:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x8147) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, 0x0) 23:33:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:02 executing program 1: unshare(0x8000400) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f00000001c0)}], 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:33:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:02 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/\a\x00', 0x20e42, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x300, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0xffff, 0x4) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3a) 23:33:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 23:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 5: unshare(0x2040400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200000, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x11) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x1000480000004, 0x26}) 23:33:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x400, 0x6a02) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100000000000000}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x50}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000)={0xfffffffffffffffd, 0x20}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = msgget(0x1, 0x12) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/93) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000000)=""/69) r2 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000005c0), &(0x7f0000000600)=0x14) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000040)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r7 = socket$inet6(0xa, 0x3, 0x3a) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x200804, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000500)={0x8, 0x0, 0x95c68eccaa496689, 0xa20, 0xfffffffffffffffd, 0x8, 0xfffffffffffffffa, 0x2}) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() tkill(r11, 0x1000000000013) r12 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r12, 0x7001) ioctl$TIOCGPGRP(r12, 0x540f, &(0x7f0000000400)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000440)={{0x4, r4, r6, r9, r10, 0xf6a2df6023772f2d, 0x7fff}, 0xffffffffffff7fff, 0x10000, 0x3f, 0x2, 0x100, 0xc1e2, r11, r13}) 23:33:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:02 executing program 5: gettid() syz_open_procfs(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x2, 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r4, 0x9) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000000)) 23:33:02 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 23:33:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000) 23:33:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x264b00, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x16, 0x4}, 0x6b) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101000, 0x0) r4 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r4, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4) bind(r3, &(0x7f0000000140)=@generic={0x9, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r2, &(0x7f0000000180)=""/114, 0x72, 0x20011042, &(0x7f0000000240)={0x11, 0x3d, r5, 0x1, 0x2, 0x6, @random='#\x00'}, 0x14) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x7c7aaeee7a404133) recvfrom$packet(r0, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r6, 0x1, 0x2, 0x6, @remote}, 0x14) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 23:33:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:03 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000) 23:33:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000) 23:33:03 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="c6dcd9613bd8d5a43328890c40265ce1bf257d4bb9376e8323314753bffcb029b9d02e1a069c758f9fe99d1ed1c0cec8f725f00789ec377d4b0ad086a0e9db1e524576a3ffe2ee8bfa8a619c23f1aa4b"], &(0x7f0000000180)=0x6) r1 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0xe, @raw_data="a63300d67616c84b38942a1057195dc0eaa02665b001645a31e6ec6e043ccaf1c780c93ac7c4fd3a9b02212d04c8f6ad29510b58420c1d91496d712fa9dc70a5fbee519995a45034e2e8919802af914eaf4a2ceffde233a6ea1dbba044c78204f42ea163920f13b941a711a8a34b42bd57c1a846992972b3be6e0eb8bbb23e545dc96add24459b56bd94f8ee200ef550dffe36f2a72cbc55a4e7891cf8249a4a2fb31c282ca38548f2bfd5e9d0ab583025bc199f4450616f3c90b8827471b2ba4a8271f9c5658966"}) 23:33:03 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000) 23:33:05 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socketpair(0x0, 0xf, 0x1000, &(0x7f0000000000)={0xffffffffffffffff}) sendto$ax25(r1, &(0x7f0000000040)="3a9e08c22253bd71bbac3e9b4d9363ef353696fa1a17de27bffaf415af49a0e4", 0x20, 0x10, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:33:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:05 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000) 23:33:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) r3 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x26b, &(0x7f0000000000)="3f006671d7af52d097ab24885cbff647740500080089ea01000000000000000000", 0x0}, 0x230) r4 = socket$inet(0x2, 0xa, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x40, "d4e3d32d0db55d9b68f847b7cbeccab3679f372a890ca321b19de42da41001d97d200463bd4e452aa2eaf3ec7dadbff4acd84ef952dcd99f065cac56e2535859"}, &(0x7f00000000c0)=0x64) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000140)={0xfff}) sendfile(r1, r0, 0x0, 0x80000000) 23:33:05 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000) 23:33:05 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="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") syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 23:33:05 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000) 23:33:05 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000) 23:33:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) [ 211.980703][ T9989] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 23:33:06 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000) 23:33:06 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000) 23:33:06 executing program 1: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f00005eaff6)='./control\x00', 0x4000004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s_U', 0x2}, 0x0, 0x0, r3) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s_U', 0x2}, 0x0, 0x0, r4) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) write(r6, &(0x7f0000000100)="f239cc45b1049ffb6556aa74b5ce732945c606de09891ad675efdb326f02207402d5d52ef2acdcebf06451db8286fa700bdadfe15729c50368d69bf2a1028b597d4bf3effa1e", 0x46) r7 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s_U', 0x2}, 0x0, 0x0, r7) keyctl$read(0xb, r8, &(0x7f0000000180)=""/176, 0xb0) r9 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s_U', 0x2}, 0x0, 0x0, r9) r10 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$read(0xb, r10, &(0x7f0000000240)=""/176, 0x1785) keyctl$unlink(0x9, r3, r5) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") inotify_rm_watch(r0, r1) 23:33:06 executing program 0: msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="0a00d62c24aaf26f70a5f57e08abee8355b96a023d863dca5c1e99e6cee778e3522461bd93c6b1cec753c24ff0c36936c256400105cd1ba65762425f3aa091b1501f233b584ed0eba2018b2bfd669ec108478f963bee27d44ff8f1a8210c3dcc23be53bcab8e5a07cadc7a2e2b5f201af99f70286963870d71eba6ea7ccdf17cb78c0e155a05dac01de8401675edbf26a60d9018944ecbde31d372a1e00924c13a60b4e0a59e1b973c911cc53054349a26343e03a32b9c27f6424fe74fb19171ef085790103106b6d1f02a1f7ec5fa649f51df4f8d43962e388bbb728f7f562b940fcc09b2beff", 0xe7) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) [ 212.107606][T10006] Bluetooth: hci0: Frame reassembly failed (-84) [ 212.108626][ T9388] Bluetooth: hci0: Frame reassembly failed (-84) 23:33:06 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000) 23:33:06 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000) 23:33:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505330, &(0x7f00000000c0)={{0x6}}) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x8, 0x4) 23:33:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x30d, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="2c7b460db8089212e4b6c83333397ec66d091658ae5b21226fca18ab0d0c1fb8d7b703e9e5669932006d99ff2f", 0x2d, 0xffff}, {&(0x7f0000000180)="d3bd30a3201fa51c7cf47ee2a5b504ce9a6134b87c05ccd2880988853eccedac2ccc6dc9c1284607cc5fad36d95c813f5aad86a3c68e6cdc0fee618dad019dc7f6695b44f3763c7888cb07dd212a43ce6bb49d118b5c9eb34b463ae369a1490b7a9673dc826b60ffd42f38dc2eddc5202ec7d31e3f0937f452aa88e60617e8e8e8fc0ca55de044c54f47323087c9c4a8fa8d99a3739b2b4fef184f3a1dbae819690afa16ff47263d6aa685d8471794b77a77cfc1b24ff80b21668d88151872c9e3d267b72817ab3ac11503b304b6d84122f25d", 0xd3, 0x6}], 0xc0423, &(0x7f00000002c0)={[{@shortname_mixed='shortname=mixed'}, {@utf8='utf8=1'}, {@shortname_lower='shortname=lower'}, {@shortname_lower='shortname=lower'}, {@fat=@nocase='nocase'}, {@uni_xlate='uni_xlate=1'}, {@nonumtail='nnonumtail=1'}, {@shortname_lower='shortname=lower'}], [{@fsname={'fsname', 0x3d, 'devtmpfs\x00'}}, {@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'selfposix_acl_access+'}}, {@seclabel='seclabel'}, {@smackfshat={'smackfshat', 0x3d, '*^'}}]}) munlockall() r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000380)=""/4096, 0x48dd5dfc697953f1) 23:33:06 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:06 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7eb, 0x71f700) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x40000) ioctl$FS_IOC_FSGETXATTR(r3, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') set_robust_list(&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000280)}, 0x78, &(0x7f0000000340)={&(0x7f0000000300)}}, 0x18) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6460d9b8", @ANYRES16=r4, @ANYBLOB="000826bd7000fedbdf25080000004000030081fe03000100000008000400020000000800010000000000080004000600000074683000"/78], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004080) r5 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r6 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r6, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$TIOCCBRK(r6, 0x5428) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) [ 214.132905][ T9296] Bluetooth: hci0: command 0x1003 tx timeout [ 214.138975][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 216.212834][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 216.219412][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 218.292926][ T9296] Bluetooth: hci0: command 0x1009 tx timeout 23:33:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) unshare(0x600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x89a0, 0x0) 23:33:16 executing program 3 (fault-call:2 fault-nth:0): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:16 executing program 2 (fault-call:2 fault-nth:0): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:16 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x29e6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0xfffffffffffffde7, 0x0, 0x0, 0x0, 0xfffffffffffffeb6}}], 0x4b, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab7aaaaaaaa0086dd601bfc97004d8800fe8000001f0000000000000000000000ff02000000cd000000000000000000000100004e20004d9078e29607149378d33e1db1c73936c77aa3f7fac33b042bd3682368625319ee54f0acf53509a3899334ecb1c373d6ea51369e92fb96cc7cd980e24d1fcafff87429e50b328817"], 0x0) shutdown(r0, 0x0) 23:33:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x1041) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x7, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x200}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x130b693cc7a89a38) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000040)) [ 222.263887][T10067] FAULT_INJECTION: forcing a failure. [ 222.263887][T10067] name failslab, interval 1, probability 0, space 0, times 1 [ 222.266471][T10069] FAULT_INJECTION: forcing a failure. [ 222.266471][T10069] name failslab, interval 1, probability 0, space 0, times 1 [ 222.289442][T10067] CPU: 0 PID: 10067 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0 [ 222.297335][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.307389][T10067] Call Trace: [ 222.307411][T10067] dump_stack+0x1d8/0x2f8 [ 222.307424][T10067] should_fail+0x555/0x770 [ 222.307437][T10067] __should_failslab+0x11a/0x160 [ 222.307448][T10067] should_failslab+0x9/0x20 [ 222.307457][T10067] kmem_cache_alloc_trace+0x5d/0x2f0 [ 222.307465][T10067] ? alloc_pipe_info+0xae/0x3f0 [ 222.307474][T10067] alloc_pipe_info+0xae/0x3f0 [ 222.307483][T10067] splice_direct_to_actor+0x910/0xac0 [ 222.307489][T10067] ? do_splice_direct+0x330/0x330 [ 222.307504][T10067] ? security_file_permission+0x148/0x350 23:33:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000002200), 0x1000) 23:33:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x2710}}], 0x18) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaa0f5f35c8d9ba02ef71"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) [ 222.319627][T10067] ? rw_verify_area+0x1c2/0x360 [ 222.329039][T10067] do_splice_direct+0x200/0x330 [ 222.329054][T10067] ? security_file_permission+0x110/0x350 [ 222.329065][T10067] do_sendfile+0x7e4/0xfd0 [ 222.329082][T10067] __x64_sys_sendfile64+0x176/0x1b0 [ 222.339193][T10067] do_syscall_64+0xfe/0x140 [ 222.339205][T10067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.339217][T10067] RIP: 0033:0x4598e9 [ 222.353057][T10067] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.353062][T10067] RSP: 002b:00007fcd64914c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 222.353071][T10067] RAX: ffffffffffffffda RBX: 00007fcd64914c90 RCX: 00000000004598e9 [ 222.353076][T10067] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 222.353080][T10067] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 222.353084][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd649156d4 [ 222.353088][T10067] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000005 [ 222.376270][T10069] CPU: 1 PID: 10069 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 222.393982][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.439853][T10069] Call Trace: [ 222.439870][T10069] dump_stack+0x1d8/0x2f8 [ 222.439883][T10069] should_fail+0x555/0x770 [ 222.439899][T10069] __should_failslab+0x11a/0x160 [ 222.473399][T10069] should_failslab+0x9/0x20 [ 222.473412][T10069] kmem_cache_alloc_trace+0x5d/0x2f0 [ 222.473420][T10069] ? alloc_pipe_info+0xae/0x3f0 [ 222.473429][T10069] alloc_pipe_info+0xae/0x3f0 [ 222.473439][T10069] splice_direct_to_actor+0x910/0xac0 [ 222.473445][T10069] ? do_splice_direct+0x330/0x330 [ 222.473468][T10069] ? security_file_permission+0x148/0x350 [ 222.491574][T10069] ? rw_verify_area+0x1c2/0x360 [ 222.503565][T10069] do_splice_direct+0x200/0x330 [ 222.503579][T10069] ? security_file_permission+0x110/0x350 [ 222.503591][T10069] do_sendfile+0x7e4/0xfd0 23:33:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x82102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREADLINK(r1, 0x0, 0xfffffee5) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/175, &(0x7f00000000c0)=0xaf) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:33:16 executing program 3 (fault-call:2 fault-nth:1): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:16 executing program 5: [ 222.503608][T10069] __x64_sys_sendfile64+0x176/0x1b0 [ 222.527776][T10069] do_syscall_64+0xfe/0x140 [ 222.527792][T10069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.538159][T10069] RIP: 0033:0x4598e9 [ 222.538168][T10069] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.538172][T10069] RSP: 002b:00007eff3b5b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 222.538184][T10069] RAX: ffffffffffffffda RBX: 00007eff3b5b4c90 RCX: 00000000004598e9 [ 222.548720][T10069] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 222.548725][T10069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 222.548731][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff3b5b56d4 [ 222.548736][T10069] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000005 [ 222.580190][T10085] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 23:33:16 executing program 2 (fault-call:2 fault-nth:1): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) [ 222.609798][T10091] use of bytesused == 0 is deprecated and will be removed in the future, [ 222.613068][ T2668] Bluetooth: hci0: Frame reassembly failed (-84) [ 222.622451][T10091] use the actual size instead. [ 222.645793][T10090] FAULT_INJECTION: forcing a failure. [ 222.645793][T10090] name failslab, interval 1, probability 0, space 0, times 0 [ 222.704022][T10090] CPU: 1 PID: 10090 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0 [ 222.711948][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.721998][T10090] Call Trace: [ 222.722376][T10096] FAULT_INJECTION: forcing a failure. [ 222.722376][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 222.725282][T10090] dump_stack+0x1d8/0x2f8 [ 222.725295][T10090] should_fail+0x555/0x770 [ 222.725307][T10090] __should_failslab+0x11a/0x160 [ 222.725316][T10090] ? kcalloc+0x36/0x60 [ 222.725325][T10090] should_failslab+0x9/0x20 [ 222.725334][T10090] __kmalloc+0x7a/0x340 [ 222.725346][T10090] kcalloc+0x36/0x60 [ 222.768126][T10090] alloc_pipe_info+0x1ce/0x3f0 [ 222.772878][T10090] splice_direct_to_actor+0x910/0xac0 [ 222.778256][T10090] ? do_splice_direct+0x330/0x330 [ 222.783268][T10090] ? security_file_permission+0x148/0x350 [ 222.788971][T10090] ? rw_verify_area+0x1c2/0x360 [ 222.793823][T10090] do_splice_direct+0x200/0x330 [ 222.798659][T10090] ? security_file_permission+0x110/0x350 [ 222.804381][T10090] do_sendfile+0x7e4/0xfd0 [ 222.808797][T10090] __x64_sys_sendfile64+0x176/0x1b0 [ 222.813983][T10090] do_syscall_64+0xfe/0x140 [ 222.818473][T10090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.824346][T10090] RIP: 0033:0x4598e9 [ 222.828223][T10090] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.847896][T10090] RSP: 002b:00007fcd64914c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 222.856374][T10090] RAX: ffffffffffffffda RBX: 00007fcd64914c90 RCX: 00000000004598e9 [ 222.864331][T10090] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 222.872285][T10090] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 222.880243][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd649156d4 [ 222.888202][T10090] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000005 [ 222.896188][T10096] CPU: 0 PID: 10096 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 222.904078][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.914128][T10096] Call Trace: [ 222.917414][T10096] dump_stack+0x1d8/0x2f8 [ 222.921753][T10096] should_fail+0x555/0x770 [ 222.926173][T10096] __should_failslab+0x11a/0x160 [ 222.931100][T10096] ? kcalloc+0x36/0x60 [ 222.935154][T10096] should_failslab+0x9/0x20 [ 222.935163][T10096] __kmalloc+0x7a/0x340 [ 222.935172][T10096] kcalloc+0x36/0x60 [ 222.935180][T10096] alloc_pipe_info+0x1ce/0x3f0 [ 222.935190][T10096] splice_direct_to_actor+0x910/0xac0 [ 222.935196][T10096] ? do_splice_direct+0x330/0x330 [ 222.935208][T10096] ? security_file_permission+0x148/0x350 [ 222.935216][T10096] ? rw_verify_area+0x1c2/0x360 [ 222.935227][T10096] do_splice_direct+0x200/0x330 [ 222.978432][T10096] ? security_file_permission+0x110/0x350 [ 222.984145][T10096] do_sendfile+0x7e4/0xfd0 [ 222.988739][T10096] __x64_sys_sendfile64+0x176/0x1b0 [ 222.994067][T10096] do_syscall_64+0xfe/0x140 [ 222.998561][T10096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.004431][T10096] RIP: 0033:0x4598e9 [ 223.008304][T10096] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.027895][T10096] RSP: 002b:00007eff3b5b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.036284][T10096] RAX: ffffffffffffffda RBX: 00007eff3b5b4c90 RCX: 00000000004598e9 [ 223.044252][T10096] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 223.052199][T10096] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 223.060152][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff3b5b56d4 [ 223.068101][T10096] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000005 [ 224.612878][ T9287] Bluetooth: hci0: command 0x1003 tx timeout [ 224.619102][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 226.693391][ T9296] Bluetooth: hci0: command 0x1001 tx timeout [ 226.700259][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 228.772828][ T9287] Bluetooth: hci0: command 0x1009 tx timeout 23:33:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:33:27 executing program 5: 23:33:27 executing program 1: 23:33:27 executing program 3 (fault-call:2 fault-nth:2): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:27 executing program 2 (fault-call:2 fault-nth:2): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:27 executing program 0: 23:33:27 executing program 1: 23:33:27 executing program 0: 23:33:27 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:27 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 23:33:27 executing program 5: [ 233.162232][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.162687][T10115] Bluetooth: hci0: Frame reassembly failed (-84) 23:33:27 executing program 1: [ 235.172899][ T9296] Bluetooth: hci0: command 0x1003 tx timeout [ 235.178976][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 237.252945][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 237.259032][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 239.332956][ T9296] Bluetooth: hci0: command 0x1009 tx timeout 23:33:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) 23:33:37 executing program 0: 23:33:37 executing program 5: 23:33:37 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1e0) 23:33:37 executing program 1: 23:33:37 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1b0) 23:33:37 executing program 0: 23:33:37 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x4000) 23:33:37 executing program 1: 23:33:37 executing program 5: 23:33:37 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x4000) 23:33:37 executing program 0: [ 245.412793][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 245.419039][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 247.492855][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 247.499062][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 249.572908][ T3516] Bluetooth: hci0: command 0x1009 tx timeout 23:33:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) 23:33:47 executing program 1: 23:33:47 executing program 5: 23:33:47 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xe001) 23:33:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="34c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bbbc58165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc348fea27771af7a8c4b51a16e96c86a85e981c45a8d2f4ba6aecb1817c501e5dfdac6ed65ad4c30bf"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) 23:33:47 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xb001) 23:33:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x0, 0x0, r0}, 0x2c) 23:33:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) 23:33:47 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xf0ff7f) 23:33:47 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xf0ff7f) 23:33:47 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) listxattr(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) dup(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a00)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x400, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x40002d1, 0x0) 23:33:47 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unshare(0x24020400) lseek(r1, 0x7fffffffffffffff, 0x3) [ 253.704799][T10198] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 255.652840][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 255.659050][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 257.732917][ T9287] Bluetooth: hci0: command 0x1001 tx timeout [ 257.739229][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 259.812867][ T3516] Bluetooth: hci0: command 0x1009 tx timeout 23:33:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) 23:33:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1}}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x84) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000040)) 23:33:57 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x40000000) 23:33:57 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x40000000) 23:33:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev.binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001240)='/dev/nullb0\x00', 0x121a00, 0x0) dup2(r1, r2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000000)=0x5, 0x8, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xd1, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="05b70081f67d3ab5970f306140e62072e4d02fa0eee2a46c0e82802f1ca222a3ca3a8ae4c4870f9fe5a73b9a6b06230f91ca96779fe703d9568ff45f0b2f87ed309d23cdeef5dc9d35eaf9f7871921408b89f44d2be727cfd527fcd23d7c1b47abc503edd1006dba883c41df3458709e4fe35514142e9df4ee148546b9ba13797bb2c8f0fbab386f48b3ba94a0e9b6f032854705505c1d8d7fa7cdf62d43d21817294f0c1dc5b2e19d73b3ccb1a3c25276ef1aeff83c8b2e1360dce444df68022fb2f891467bf18a07d57a085d0925fc37"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000001500)=0x88) get_mempolicy(0x0, 0x0, 0x18, &(0x7f00002b7000/0x3000)=nil, 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x34000, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$PIO_FONT(r4, 0x4b61, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000001440)='security.capability\x00', &(0x7f0000001480), 0xc, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x400}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000011c0)={0x0, 0x9, 0xfffffffffffffc65, 0x0, {}, {0x3, 0xc, 0x80, 0x80, 0x7, 0x0, 'v$Rz'}, 0xffff, 0x4, @offset, 0x4}) 23:33:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000001, 0x24500) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000180)=0x1) creat(&(0x7f0000000140)='./file0\x00', 0x104) ioctl$FS_IOC_FSGETXATTR(r3, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x470, 0x130, 0x130, 0x270, 0x388, 0x388, 0x388, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4bac4a44bf7b2f426b494347235936d326cb8b11b50ba5fa3931fa713daf"}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @broadcast, @remote, 0x4}}}, {{@arp={@remote, @multicast1, 0xffffffff, 0x0, @mac=@dev={[], 0x1ff}, {}, @mac=@random="73862a9662cd", {[0xff, 0x0, 0xff, 0x0, 0xff]}, 0x3, 0x0, 0x3a, 0x23, 0x7, 0x9, 'bpq0\x00', 'ip_vti0\x00', {0xff}, {}, 0x0, 0x400}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x4000007b], [0xc1]}) 23:33:57 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 23:33:57 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) [ 263.855757][T10232] binder: 10224:10232 unknown command -2130659579 [ 263.873578][T10232] binder: 10224:10232 ioctl c0306201 20000000 returned -22 [ 263.893094][T10233] kvm [10222]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000007b 23:33:57 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2={0xff, 0x2, [0xff00000000000000]}}, {0xa, 0x0, 0x0, @rand_addr="20010010000000007029e5e36fc3e001"}, r0, 0x4}}, 0x48) [ 263.929519][T10232] binder: 10224:10232 ioctl 40086602 20001500 returned -22 23:33:57 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xb0010000) 23:33:57 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xe0010000) [ 263.985073][T10243] binder: BINDER_SET_CONTEXT_MGR already set [ 263.986009][T10250] binder: 10224:10250 unknown command -2130659579 23:33:57 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2040) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{r1, r2+10000000}, {0x77359400}}, &(0x7f00000000c0)) r3 = io_uring_setup(0xa4, &(0x7f0000001340)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x300, 0x0, 0x0) [ 264.034654][T10257] binder: 10224:10257 ioctl 40086602 20001500 returned -22 [ 264.091256][T10250] binder: 10224:10250 ioctl c0306201 20000000 returned -22 [ 264.109233][T10243] binder: 10224:10243 ioctl 40046207 0 returned -16 [ 265.972777][ T3516] Bluetooth: hci0: command 0x1003 tx timeout [ 265.978874][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 268.052873][ T3516] Bluetooth: hci0: command 0x1001 tx timeout [ 268.059513][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 270.132841][ T9287] Bluetooth: hci0: command 0x1009 tx timeout 23:34:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 23:34:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x40, 0x0, 0x2, 0x1, 0x7, 0x8, 0x93}, &(0x7f0000000040)={0x7c5, 0x0, 0x80, 0x8, 0x5a1c, 0x1f, 0x2, 0x800}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffffffffff8, 0xca4, 0x9, 0x92, 0x6, 0x10000000}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={0x2}, 0x8}) 23:34:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) 23:34:08 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) 23:34:08 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000040a43ba5d806055b6fdd80b40000000140040000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0xf184c6ca0110c593, 0x1) r2 = socket$inet6(0xa, 0x5, 0x13a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000180)=""/41, 0x29}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f00000001c0)=""/1, 0x1}], 0x6, &(0x7f0000000680)}, 0x6}, {{&(0x7f00000006c0)=@nfc_llcp, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000a40)=""/147, 0x93}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000000c00)=""/144, 0x90}, {&(0x7f0000000cc0)=""/164, 0xa4}, {&(0x7f0000000d80)=""/179, 0xea}], 0x9, &(0x7f0000000f00)=""/12, 0xc}, 0xfffffffffffffff9}, {{&(0x7f0000000f40)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000000fc0)=""/125, 0x7d}, {&(0x7f0000001040)=""/62, 0x3e}, {&(0x7f0000001080)=""/162, 0xa2}, {&(0x7f0000001140)=""/69, 0x45}, {&(0x7f00000011c0)=""/93, 0x5d}], 0x5, &(0x7f00000012c0)=""/204, 0xcc}, 0x8}, {{&(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000001440)=""/175, 0xaf}, {&(0x7f0000001500)=""/20, 0x14}, {&(0x7f0000001540)=""/10, 0xa}, {&(0x7f0000001580)=""/182, 0xb6}, {&(0x7f0000002700)=""/149, 0x95}, {&(0x7f00000027c0)=""/145, 0x91}, {&(0x7f0000002880)=""/209, 0xd1}, {&(0x7f0000001640)=""/88, 0x58}, {&(0x7f0000002980)}], 0xa, &(0x7f0000002a80)=""/170, 0xaa}, 0x6}, {{&(0x7f0000002b40)=@alg, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/235, 0xeb}], 0x1, &(0x7f0000002d00)=""/29, 0x1d}, 0x80000000}], 0x5, 0x10043, &(0x7f0000002e80)={0x77359400}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = getgid() fchown(r0, r4, r5) r6 = socket$inet6(0xa, 0x3, 0x3a) rmdir(&(0x7f0000004440)='./file0\x00') setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) recvmsg(r6, &(0x7f00000043c0)={&(0x7f0000002ec0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000004300)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/195, 0xc3}, {&(0x7f0000004040)=""/150, 0xffffffffffffff80}, {&(0x7f0000002980)=""/52, 0x34}, {&(0x7f0000004540)=""/225, 0xe1}, {&(0x7f0000004200)=""/1, 0x1}, {&(0x7f0000004240)=""/183, 0xfffffffffffffe59}], 0x7, &(0x7f0000004380)=""/43, 0x2b}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004400)={'team0\x00', r7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000004500)=0x7) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) r10 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) pipe2(&(0x7f0000004140), 0x1800) sendfile(r9, r10, &(0x7f00000000c0), 0x40) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000080)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) getpgrp(r8) connect$nfc_llcp(r3, &(0x7f0000004480)={0x27, 0x0, 0x0, 0x3, 0x7f, 0xfffffffeffffffff, "fdbfa3aad989e75fb26e13c6896809d3c6d39b3110a8d103d83ade5d863cc8f5d8dedaad50511f7bd0d9d8d5dad1c5fba4c9e366697e677a3e138ad19d5e8e", 0x31}, 0x60) getgid() 23:34:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000400)={{0x77359400}, 0x12, 0x8}, 0x3c7) 23:34:08 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xf0ff7f00000000) 23:34:08 executing program 0: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x0) unshare(0x20600) r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 23:34:08 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xf0ff7f00000000) 23:34:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6, 0x0, 0x8, 0x0, "0d77bded7125338de47145b71f2226c8b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525ff015e2c4707a000d47a4c19b884282e4f743e00c7a3eff599b13d518d1000"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "7b810000000100", "613b9a21c72f48c07417cdde9494f227", "87f7cc43", "9df55a58e3c45287"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0xce27, 0x4) [ 274.113184][T10280] input: syz0 as /devices/virtual/input/input5 23:34:08 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xf0ffffff0f0000) [ 274.195225][T10280] input: syz0 as /devices/virtual/input/input6 23:34:08 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000240)='co\xe5redump_filter') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') sendfile(r1, r2, 0x0, 0x1) [ 276.132886][ T9296] Bluetooth: hci0: command 0x1003 tx timeout [ 276.139499][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 278.212853][ T9287] Bluetooth: hci0: command 0x1001 tx timeout [ 278.218933][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 280.292914][ T9296] Bluetooth: hci0: command 0x1009 tx timeout 23:34:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 23:34:18 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x4000000000000000) 23:34:18 executing program 1: socket(0x8, 0x805, 0x0) socketpair(0x8, 0xa, 0x80000000, &(0x7f0000000040)={0xffffffffffffffff}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x80000001, @mcast2={0xff, 0x5}}, 0xffffffffffffff4c) 23:34:18 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xf0ffffff0f0000) 23:34:18 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f00000001c0)='bond0\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) accept4$alg(r1, 0x0, 0x0, 0x400) 23:34:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() r3 = gettid() r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r5, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r7, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) r8 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x406, r8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x40) tkill(r3, 0x1000000000013) rt_tgsigqueueinfo(r2, r3, 0x2f, &(0x7f0000000000)) ptrace(0x4206, r2) 23:34:18 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x4000000000000000) 23:34:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0xa, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0xd}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) move_pages(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000100)=[0xfff, 0x0, 0x2, 0x3], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 23:34:18 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xe001000000000000) 23:34:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x4, 0x3a1) r2 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x5, 0x1108847c70c50907) connect$bt_rfcomm(r2, &(0x7f00000002c0)={0x1f, {0x3f, 0xfffffffffffff459, 0x2f83, 0x0, 0x100000000, 0x5}, 0xdd34}, 0xa) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2000000, @rand_addr="0000000000100b000000003820c2e200", 0x1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb0000000000004000588171001000720155c4af96311d39962100001600380001000900ff030100029ebd6ce1afd40e4ec61030cf4b0794000000"], 0x45) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4, 0x400) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x4, 0x2]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x82040) recvfrom$inet6(r1, &(0x7f0000000040)=""/60, 0xfffffeea, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x70e000) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0) 23:34:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) connect$netrom(r0, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket(0x1e, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000003c0)={0x2000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0xa}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x7, 0x1ff, 0x7, 0x0, 0xffff, 0x7, 0x7, 0x7, 0x4}}, 0x43) openat$cgroup_procs(r2, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 23:34:18 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xffffffff00000000) [ 286.452764][ T9296] Bluetooth: hci0: command 0x1003 tx timeout [ 286.458841][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 288.532843][ T3014] Bluetooth: hci0: command 0x1001 tx timeout [ 288.538925][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 290.612913][ T9296] Bluetooth: hci0: command 0x1009 tx timeout 23:34:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 23:34:28 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x5) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x4) setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getgroups(0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xee00]) setgroups(0x1, &(0x7f0000000000)=[r1]) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x280000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x640000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002000}, 0x20044040) setregid(0x0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000080)=0x84) 23:34:28 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xb001000000000000) 23:34:28 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x2}]}, @ptr]}}, &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1}, 0x20) r1 = gettid() tkill(r1, 0x1000000000013) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/udp\x00') ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 23:34:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0xe, 0x4) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8001, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000180)=""/4096) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x4e22, 0x7f, @remote, 0x5}}}, 0x88) prctl$PR_SET_ENDIAN(0x14, 0x2) 23:34:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000180), 0x10) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x1000) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0xf, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x1}, 0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x309100, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpj\x00\x00\x00\xe0\xff\x00M\x00t\x00\xc9\xa8\xaa\xd0QYo\xf3W\x04K\xd0\x8b\xe0\x85r\xe7\x01\xcf\xe4vh\xc8X\xaba\t`\xbf\xfft\xf6>\xf6_h%\xe2\x94K\xd1\xca\x9fI\xae3t\x85\x89$\xde/U\xf9\x95<\xdb\xf4\xd3\x1b\x1f}\x9e\x13w`\xc9\x16\x84\xd8\xf1`\r\xa6(\xad\x95\'\xf4\xe4*)\xc1,\x1fF\x9e\'\xef{\xc8\x96 \x1a\xaf\x86.\xe3\xea%\xc7\xa1\xbe\x05\xb9\xd0~V\xdf\x91\r\xb6_k\xf8Y\xb9\x15\xe2c\xabR\x06K\x13\xdd\x7foX0\x03\xb3;!\xe4R\x8b\x05 p\xea\x14\x0e\xc5\x9br\x9c\xad\xca\x04\x99\xb0\xdd\x0f\xe2\xc1\xa2GA\xc8d\xf2\x8d1\x14\xc3\xed/\v\xa1\xf6\x04O9a\xe2\xa1\xbe\x83\x15/\x0f)\xd5\xed\xb1I\xa1\x0f8\x87c\xd1\xc5\x92\xed\xb0!\xc3)6po\xe3\xcc(`\x17N\xca\xba3w\x05w\x8fT\xfe\xe1\x0f\xc8\xb4\x9b\x8e\x17\x1f\x99v\xf5[\xd1\v\xe9\xe1\x86\xb1y\xc8\xc7\x7f\x80\xc7n2\xc5\x1a\x03\x8dq\xab\xc4P\xe6,\xff\xd4\x89\x18s\xdf)\xbbX\x97\xdd:\x81\xbf\xdd\xa6\x18\x19\xa7\xfek6\x83\x84\xc7\xd9\x13]Rz\xf9R', 0x2761, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x0) 23:34:28 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xffffffff00000000) 23:34:28 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r0, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r2, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) ioctl$RTC_AIE_OFF(r0, 0x7002) r3 = fanotify_init(0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x9) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000000c0)={0x72d2, 0x4}) writev(r3, &(0x7f0000002400)=[{&(0x7f0000000040)='4', 0x1}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x7fffffff, 0x9}) 23:34:28 executing program 3: r0 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x6, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x8000}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x0) 23:34:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001340)=[{&(0x7f0000000080)="a26b3a3cdd55b7dc3f74bd78be7659796e9a51c06e411a67cc8bfa505fb7fb1836d8bb9d2477a08d4e1f2f4b8edae7e4b1132bb0db9dd465e093af39ca51aa21faed98a8f86e32d0a21e711d6fe8b658a9f0f540cbb95f5d6786cba2569769e6db0130696d178bac11353bff4afea8e5ecfd989b73babc5c8c23bdda3a6a3b47cd7001af84d350e98a65850a2b8b2a7b0614e5dee804aee7603af994d07bf096745cbfc730b994289f", 0xa9, 0x1}, {&(0x7f0000000240)="c59d2ce93b911df6cbc1cf1259d79836e2706b38b4c164ecc1a3c3959faa106c18cc76152654dcd8423850c5225d79f32d531cfe5436be6f5cf749150bd8bef7ff8a1e47d1662b53c632cbb943822ca4d3822d8b50aa34b7d5b130716239732794f5ae5e037b917c3297e12680e5c411d17b98e1d177b9c39bf934d8f2de0732d3669e4bcf8059aebe25b7db5d66c07fcf6bbfba4339a91c633ea81cc4186f29791d66c8fdf15694cdb7fcd170091408c2e36a48b79b073eb5ce5163592646b663e98c4aea54728515e6416b6dd2a7347b1d14dd4ff47a8f7b93e9d196ac3a", 0xdf, 0x9}, {&(0x7f0000000140)="e8f60c92f3eaf6c0514bc0fdfb91334621f15e2ccd5448d659a342bdaa63cd52c694179301d133c4238c4567e6cd9e", 0x2f, 0x1}, {&(0x7f0000000180)="104f026031616b4a62b62a1d50334af3b01ee791b0df0afe", 0x18, 0x2}, {&(0x7f0000000340)="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", 0x1000, 0x1}], 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={[{@cruft='cruft'}, {@gid={'gid'}}, {@uid={'uid', 0x3d, 0xee00}}, {@unhide='unhide'}]}) 23:34:28 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x3e, 0x6, 0x0, {0x2, 0x3, 0x15, 0x0, '/dev/bus/usb/00#/00#\x00'}}, 0x3e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) [ 294.680776][T10412] Unknown ioctl 28674 [ 294.686615][T10403] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 23:34:28 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x30, 0x1, 0xc, 0xd, 0xa, 0x80000001, 0x6, 0x137, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) [ 294.754485][T10412] Unknown ioctl 28674 [ 294.806102][T10418] ISOFS: Unable to identify CD-ROM format. [ 294.890133][T10403] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. [ 296.612779][ T9287] Bluetooth: hci0: command 0x1003 tx timeout [ 296.618880][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 298.692842][ T9287] Bluetooth: hci0: command 0x1001 tx timeout [ 298.698917][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 300.772807][ T9296] Bluetooth: hci0: command 0x1009 tx timeout 23:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syslog(0x4, &(0x7f0000000000)=""/53, 0x35) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r4 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r4, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) ioctl$KDSETLED(r4, 0x4b32, 0x3) 23:34:38 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r3 = socket(0x4, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x2) recvfrom$packet(r2, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r4, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000200)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) socket(0xa, 0x5, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x3a) dup3(0xffffffffffffffff, r1, 0x80000) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) sendfile(r2, r7, 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x222000, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x12, 0xa0040) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @remote, 0xa709}, r10}}, 0x30) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000000)=0x54) r11 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s_U', 0x2}, 0x0, 0x0, r11) keyctl$read(0xb, r12, &(0x7f0000000180)=""/176, 0xb0) keyctl$unlink(0x9, 0x0, r12) 23:34:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_MULTICAST_ROUTER={0x8}]}}}]}, 0x44}}, 0x0) 23:34:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x40) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) sendfile(r1, r1, 0x0, 0x0) 23:34:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001340)=[{&(0x7f0000000080)="a26b3a3cdd55b7dc3f74bd78be7659796e9a51c06e411a67cc8bfa505fb7fb1836d8bb9d2477a08d4e1f2f4b8edae7e4b1132bb0db9dd465e093af39ca51aa21faed98a8f86e32d0a21e711d6fe8b658a9f0f540cbb95f5d6786cba2569769e6db0130696d178bac11353bff4afea8e5ecfd989b73babc5c8c23bdda3a6a3b47cd7001af84d350e98a65850a2b8b2a7b0614e5dee804aee7603af994d07bf096745cbfc730b994289f", 0xa9, 0x1}, {&(0x7f0000000240)="c59d2ce93b911df6cbc1cf1259d79836e2706b38b4c164ecc1a3c3959faa106c18cc76152654dcd8423850c5225d79f32d531cfe5436be6f5cf749150bd8bef7ff8a1e47d1662b53c632cbb943822ca4d3822d8b50aa34b7d5b130716239732794f5ae5e037b917c3297e12680e5c411d17b98e1d177b9c39bf934d8f2de0732d3669e4bcf8059aebe25b7db5d66c07fcf6bbfba4339a91c633ea81cc4186f29791d66c8fdf15694cdb7fcd170091408c2e36a48b79b073eb5ce5163592646b663e98c4aea54728515e6416b6dd2a7347b1d14dd4ff47a8f7b93e9d196ac3a", 0xdf, 0x9}, {&(0x7f0000000140)="e8f60c92f3eaf6c0514bc0fdfb91334621f15e2ccd5448d659a342bdaa63cd52c694179301d133c4238c4567e6cd9e", 0x2f, 0x1}, {&(0x7f0000000180)="104f026031616b4a62b62a1d50334af3b01ee791b0df0afe", 0x18, 0x2}, {&(0x7f0000000340)="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", 0x1000, 0x1}], 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={[{@cruft='cruft'}, {@gid={'gid'}}, {@uid={'uid', 0x3d, 0xee00}}, {@unhide='unhide'}]}) 23:34:38 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:34:38 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0xce, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b7a3302a414e77d1bd81c1a2873d764907b322ede39fa26f2cdf79bebb5669414fa1e2d7b76d1b3fda4ddbca388e39413154afbfcc08d8", 0x37, 0x1}, {&(0x7f0000000100)="f7efd6ba2f8e1bb1ed35fb51dae5288ed3963545e6202ba24d9af10cef024367e3510c33e089bfd5cfc3643514dc9518956f128c7d63986a8b76b186cab39757ea9aad5f03a27f18733f4ce1c0e307d66346b8cb1d41f82fa6178ba03af29eaaea5db4c294aef8c7624f6639acf0495c1e62343fdec280c7b36b7fb9a533247353f92a833301958d037ed09e5a487d33c76d0150", 0x94, 0x6}], 0x40000, &(0x7f0000000200)='/\x02roup.stap\x00') [ 304.821813][T10446] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 304.839012][T10449] FAULT_INJECTION: forcing a failure. [ 304.839012][T10449] name failslab, interval 1, probability 0, space 0, times 0 [ 304.856100][T10442] Unknown ioctl -2147191725 [ 304.864218][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 304.864226][ T26] audit: type=1804 audit(1568504078.808:31): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir587497308/syzkaller.GCVIFs/36/bus" dev="sda1" ino=16752 res=1 [ 304.867071][T10449] CPU: 0 PID: 10449 Comm: syz-executor.4 Not tainted 5.3.0-rc8+ #0 23:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) r3 = getpgid(0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000002c0)={0x7fff, 0xdd4e, r3, 0x0, r4, 0x0, 0x1, 0x3}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x1}, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r5 = syz_open_dev$usb(&(0x7f0000000680)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x200000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000006c0)={r8, 0xec7}, 0x8) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0x500, 0x0) getsockopt$inet6_buf(r9, 0x29, 0xca, &(0x7f0000000600)=""/4, &(0x7f0000000640)=0x4) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f00000004c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x0, 0x0, "0ecf5b04adb7b9b930348e3767b6d0b43a098c589ea3b4c6faf3a77d4340e8a4ada3b439e99752f0532d68020de41c468564939d65012a073f522f6c011db0"}, {0x0}, 0x0}, 0xa0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f0000000140)={r11, r12+30000000}, 0x0) r13 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x8e4bfed198663e7a, 0x0) r14 = socket$inet_sctp(0x2, 0x1, 0x84) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r16}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r13, 0x84, 0x6, &(0x7f0000000400)={r16, @in6={{0xa, 0x4e22, 0xfffffffffffff948, @local, 0x53}}}, &(0x7f0000000580)=0x84) [ 304.870364][ T26] audit: type=1804 audit(1568504078.808:32): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir587497308/syzkaller.GCVIFs/36/bus" dev="sda1" ino=16752 res=1 [ 304.893746][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.893750][T10449] Call Trace: [ 304.893770][T10449] dump_stack+0x1d8/0x2f8 [ 304.893782][T10449] should_fail+0x555/0x770 [ 304.893796][T10449] __should_failslab+0x11a/0x160 [ 304.893809][T10449] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 304.893818][T10449] should_failslab+0x9/0x20 [ 304.893825][T10449] __kmalloc+0x7a/0x340 [ 304.893833][T10449] ? tomoyo_realpath_from_path+0xca/0x7c0 23:34:38 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4) [ 304.893843][T10449] tomoyo_realpath_from_path+0xdc/0x7c0 [ 304.893854][T10449] tomoyo_path_number_perm+0x166/0x640 [ 304.893874][T10449] ? smack_file_ioctl+0x226/0x2e0 [ 304.893880][T10449] ? __fget+0x4e1/0x510 [ 304.893890][T10449] tomoyo_file_ioctl+0x23/0x30 [ 304.893898][T10449] security_file_ioctl+0x6d/0xd0 [ 304.893913][T10449] __x64_sys_ioctl+0xa3/0x120 [ 304.893923][T10449] do_syscall_64+0xfe/0x140 [ 304.893933][T10449] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.893941][T10449] RIP: 0033:0x4598e9 [ 304.893950][T10449] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.893955][T10449] RSP: 002b:00007fd89c83ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.893963][T10449] RAX: ffffffffffffffda RBX: 00007fd89c83ac90 RCX: 00000000004598e9 [ 304.893967][T10449] RDX: 00000000200001c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 304.893972][T10449] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 304.893977][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd89c83b6d4 [ 304.893981][T10449] R13: 00000000004c41ec R14: 00000000004d8448 R15: 0000000000000004 [ 304.898293][T10449] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.978378][T10458] Unknown ioctl -2147191725 23:34:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020000002a231ee90000000000000000"], 0x10}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000200)={0x19c000, 0xff, 0xf1, 0x3}, 0x10) socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0xffffffffffffffba, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) sendmmsg(r1, &(0x7f0000005c00), 0x2b2, 0x0) [ 305.118379][T10448] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 23:34:39 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:groupadd_exec_t:s0\x00', 0x25, 0x2) sendfile(r0, r0, 0x0, 0x0) 23:34:39 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) acct(&(0x7f00000003c0)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r0, 0x0, 0x8800000) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x80000) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0xcef8, 0x359a, 0x17fe38bc, 0xff}, 0x6) 23:34:39 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2cf, 0x18000) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x8000) 23:34:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @local, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "9645e89650196a1a", "45b6e022dbf1fb07ff029bb594c2dcd09a59ebdbe2da06595dfd2797fa4d91bc", "b2d2c111", "b2134e61152bd8a8"}, 0x38) socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000280)='\x00', 0x1, 0x8000, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000180)=0x1e) sendto$inet6(r0, &(0x7f00000000c0)="c6", 0x1, 0x8000, 0x0, 0x0) 23:34:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xffffffffffffff7f, 0x200) sendfile(r1, r1, 0x0, 0x0) bind$netrom(r2, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) [ 305.318740][ T26] audit: type=1800 audit(1568504079.258:33): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16742 res=0 23:34:39 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0xffffffffffffffff) 23:34:39 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)) [ 305.472967][ T26] audit: type=1800 audit(1568504079.408:34): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16742 res=0 [ 305.530447][T10504] Process accounting resumed [ 306.852833][ T3014] Bluetooth: hci0: command 0x1003 tx timeout [ 306.859131][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 308.932816][ T9296] Bluetooth: hci0: command 0x1001 tx timeout [ 308.939045][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 311.012865][ T3014] Bluetooth: hci0: command 0x1009 tx timeout 23:34:48 executing program 4 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:34:48 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb636}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa60}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3cf}]}]}, 0xc0}}, 0x20) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x0) 23:34:48 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0xc00, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r1, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r3, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0xd7, "05ce07a1649eb58e7f6e9d4947e517f4581fe1446a14692694847d20e4c51096621f26dded89b0e55cc231ec9cb737eced6db46152252e2f1dd2082c0dc241c366fb2552acb60f662b0dc0a7b991ea6386b90ff7afb2256a16aed8fb5255273a3438958a6374a6d5e9901703b576f0f5aa677895a731f8b1ec4641e8297058a4609bda22ad2d18a362a96dd241e8c3494d4f78b021104cdf24b23ac41ed115404378925a61611e1f1acdb00518ec08cfb8b45da0aae1d18abd2813c082521dc296b63ff2127d8ea54a81def3c8e84a9ed0673b14a6cbf2"}, &(0x7f0000000680)=0xdf) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000006c0)={r4, 0xba, "47e9b6e1a31f131f1895750b3e7264e7b3a202f9ec0d8ad049406c9e9428de6bd75742a1148fd9ea59a7e8a99d88ef42187a80cf37258057dd7d79abd9f70898a41ba756e08e09ff04124dc5d7f3d61fbfe497f52846a796835b502fb835c7ff678410885f206950906621b1abb66ed8ea3ea44a4800d3f442253d238d55e5a54e55ea605dfcf02a7a415eee65d38fe77c04e2f8d4ce19b79310be96f4a79b4924290d4343cba1b7ee710250d9d5b6cf89fe2b3c805942633382"}, &(0x7f00000007c0)=0xc2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000340)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x84002, &(0x7f0000000440)={[{@default_permissions='default_permissions'}, {@xino_on='xino=on'}, {@nfs_export_on='nfs_export=on'}, {@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [{@uid_eq={'uid', 0x3d, r5}}, {@euid_lt={'euid<', r6}}, {@dont_measure='dont_measure'}, {@fowner_eq={'fowner', 0x3d, r8}}, {@measure='measure'}, {@euid_lt={'euid<', r9}}]}) 23:34:48 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x2, 0x85, 0x1}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r0, r0, 0x0, 0x0) 23:34:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x4, 0x800, 0x100000000, 0xfffffffffffffc01}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="4aa56d9188443a3b65da3605babba968c2a883fb7d6d830ee900115b78cffc6c", 0xffffffffffffffa9, 0x4}, {&(0x7f0000000100)="9df7718641042628abb7624ffc69a8cf19b3dbdcfddd143aac4ac7bd1e65ccbfe341c5bdcd9b12d4f844f711ae300697f3b50914f0bdcf992cb95eee3c681275e5159d544fcc76e4a7b3ef4e873b70897b2cebd79686b5b9d73118c070eeb14707ab4ea8de2a65bc09bc7365f364f9678bbe72d1cb581fc964e0a4f2f384727d6a30bb703b4ed651", 0x88, 0x995c}, {&(0x7f00000001c0)="e55df583a475256dc78304238997c9e48acc9e2c242badd94472be45eb12160f082324ee0902fc515addc0a972388ea89155902e140b34162b4564c5d04b8ef9c6f75696c4d009c1dcd33d417e7ad70be5269ba142a349289b48450299ecf5e7", 0x60}, {&(0x7f00000002c0)="7e63470048ac653679ed58115ad321aaefa5537a260e03d9f94e1fd767c89c64d4fca9de43bd6d40630064b8c3d5b6374862752a9c021c1352292d4e2256aaae37eba8302ceb7b56bb401e3229b474bf40efb7049e0a370e9988de03321018955c40c8cca481b65fbdd3aa3b0e909b1bb23d4406fcfdbef72e818f6b5ed0fb718fb08788f6bcb61d460b231d2317c5b8a6c86b3b7a26ecb75b50f0f96d301a37293ac40bc89525afb0f3c5", 0xa6, 0x100000000}], 0x4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000191a000108000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000ffffffff00000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000e1ff00f6b180ea5d3e057f35c0e621a9a8ec3fa1f7574962133ede1f89033381fa95b225441a9300"/204], 0xf0}}, 0x0) 23:34:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0xa) recvfrom$packet(r2, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r4, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x8, &(0x7f0000000040)="11dca50d5e0bcfe47bf070bd78fb096a99ee69c65f8618e414df64e13fb53e65664b") ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @remote}, {0x6, @random="5991a7b0c3ab"}, 0x0, {0x2, 0x4e21, @multicast1}, 'bcsf0\x00'}) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r7 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) r8 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x406, r8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r11 = accept(r10, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r11, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="fe5bcc15add63afde2b786576521c17489e9e86ab36b92e56ab041dff7bbd6f40fce9dfb71fc53766789a72a7cbe4f2c30beb17888d1c728e6414b9eac4634e53b0f06360d4033d904000000149b61a9588b3d8f524cd980fbb82f5f6e8600ddb4a3d437fcc989bcf1ec74c5c01cc44ff494e780e2722000", 0x78}], 0x1}], 0x1, 0x0) recvmsg(r11, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x34000}], 0x1}, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fcntl$dupfd(r13, 0x0, r13) fcntl$dupfd(r13, 0x1a7fdb4ed7f878b1, r12) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r14, &(0x7f0000000080), 0x12) r15 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r16 = fcntl$getown(r15, 0x9) ptrace$pokeuser(0x6, r16, 0x7fe, 0x2) r17 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r17, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r18 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r18, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x2, 0x1}, 0x20) fcntl$setownex(r17, 0xf, &(0x7f0000000180)={0x2, r16}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r18, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r18, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r19 = syz_open_procfs(r16, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r18, r19, &(0x7f00000000c0)=0x202, 0x8) r20 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r22 = open(&(0x7f0000000340)='./file0/file0\x00', 0xa80c0, 0x32) setsockopt$sock_linger(r22, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r22, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r19, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32=r13, @ANYBLOB, @ANYRES32=r21, @ANYBLOB='\b\x00D', @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xb}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="000128bd7000fddbdf250200000078b73c0cf67a61d4000000000c5c3de772000000000000000c0002000001000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) r23 = socket$alg(0x26, 0x5, 0x0) bind$alg(r23, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r23, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r24 = accept(r23, 0x0, 0x0) sendmmsg$alg(r24, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r24, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="fe5bcc15add63afde2b786576521c17489e9e86ab36b92e56ab041dff7bbd6f40fce9dfb71fc53766789a72a7cbe4f2c30beb17888d1c728e6414b9eac4634e53b0f06360d4033d904000000149b61a9588b3d8f524cd980fbb82f5f6e8600ddb4a3d437fcc989bcf1ec74c5c01cc44ff494e780e2722000", 0x78}], 0x1}], 0x1, 0x0) recvmsg(r24, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x34000}], 0x1}, 0x0) r25 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x100, 0x0) r26 = socket$alg(0x26, 0x5, 0x0) bind$alg(r26, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r26, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r27 = accept(r26, 0x0, 0x0) sendmmsg$alg(r27, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r27, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="fe5bcc15add63afde2b786576521c17489e9e86ab36b92e56ab041dff7bbd6f40fce9dfb71fc53766789a72a7cbe4f2c30beb17888d1c728e6414b9eac4634e53b0f06360d4033d904000000149b61a9588b3d8f524cd980fbb82f5f6e8600ddb4a3d437fcc989bcf1ec74c5c01cc44ff494e780e2722000", 0x78}], 0x1}], 0x1, 0x0) recvmsg(r27, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x34000}], 0x1}, 0x0) r28 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80, 0x0) r29 = accept4(r9, 0x0, &(0x7f0000000140), 0x80800) r30 = socket$alg(0x26, 0x5, 0x0) bind$alg(r30, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r30, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r31 = accept(r30, 0x0, 0x0) sendmmsg$alg(r31, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r31, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="fe5bcc15add63afde2b786576521c17489e9e86ab36b92e56ab041dff7bbd6f40fce9dfb71fc53766789a72a7cbe4f2c30beb17888d1c728e6414b9eac4634e53b0f06360d4033d904000000149b61a9588b3d8f524cd980fbb82f5f6e8600ddb4a3d437fcc989bcf1ec74c5c01cc44ff494e780e2722000", 0x78}], 0x1}], 0x1, 0x0) recvmsg(r31, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x34000}], 0x1}, 0x0) r32 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x48080, 0x0) r33 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x40) r34 = open(&(0x7f00000002c0)='./file0\x00', 0x45ce41, 0x4) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r20, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r24}, {0x8, 0x1, r25}, {0x8, 0x1, r27}, {0x8, 0x1, r28}, {0x8, 0x1, r29}, {0x8, 0x1, r31}, {0x8, 0x1, r32}, {0x8, 0x1, r33}, {0x8, 0x1, r34}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x62409fd7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x200440c5) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x5c, r20, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffff801}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040834}, 0x8000) ioctl$FS_IOC_FSGETXATTR(r7, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x2, 0x3, 0x0, 0x10, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r7, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) ioctl$KDMKTONE(r7, 0x4b30, 0xb9c) syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x804, &(0x7f0000000000)=ANY=[]) socket$inet6_sctp(0xa, 0x801, 0x84) [ 315.077195][T10538] FAULT_INJECTION: forcing a failure. [ 315.077195][T10538] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 315.090430][T10538] CPU: 0 PID: 10538 Comm: syz-executor.4 Not tainted 5.3.0-rc8+ #0 [ 315.098335][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.108385][T10538] Call Trace: [ 315.111679][T10538] dump_stack+0x1d8/0x2f8 [ 315.116018][T10538] should_fail+0x555/0x770 [ 315.120442][T10538] should_fail_alloc_page+0x55/0x60 [ 315.125644][T10538] prepare_alloc_pages+0x283/0x470 [ 315.130756][T10538] __alloc_pages_nodemask+0xb2/0x5d0 [ 315.136033][T10538] ? stack_trace_save+0x150/0x150 [ 315.136049][T10538] kmem_getpages+0x56/0xa20 [ 315.136059][T10538] cache_grow_begin+0x7e/0x2c0 [ 315.136071][T10538] cache_alloc_refill+0x311/0x3f0 [ 315.145576][T10538] ? check_preemption_disabled+0xb7/0x2a0 [ 315.145588][T10538] __kmalloc+0x318/0x340 [ 315.145599][T10538] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 315.145608][T10538] tomoyo_realpath_from_path+0xdc/0x7c0 [ 315.145619][T10538] tomoyo_path_number_perm+0x166/0x640 [ 315.145640][T10538] ? smack_file_ioctl+0x226/0x2e0 [ 315.145648][T10538] ? __fget+0x4e1/0x510 [ 315.145658][T10538] tomoyo_file_ioctl+0x23/0x30 [ 315.145670][T10538] security_file_ioctl+0x6d/0xd0 [ 315.155025][T10539] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=83f55de5) [ 315.155417][T10538] __x64_sys_ioctl+0xa3/0x120 [ 315.213956][T10538] do_syscall_64+0xfe/0x140 [ 315.218449][T10538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.224322][T10538] RIP: 0033:0x4598e9 [ 315.228196][T10538] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.247986][T10538] RSP: 002b:00007fd89c83ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.256380][T10538] RAX: ffffffffffffffda RBX: 00007fd89c83ac90 RCX: 00000000004598e9 [ 315.264472][T10538] RDX: 00000000200001c0 RSI: 0000000000005412 RDI: 0000000000000003 23:34:49 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x70) [ 315.272438][T10538] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.280393][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd89c83b6d4 [ 315.289648][T10538] R13: 00000000004c41ec R14: 00000000004d8448 R15: 0000000000000004 23:34:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = socket$inet6(0xa, 0x4, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x7eb529f8a5db3c20, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r6 = getpgid(0x0) r7 = gettid() kcmp(r6, r7, 0x0, r5, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000080000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000000df0a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2a) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) 23:34:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10}, {0x10, 0x84, 0x6}], 0x20}, 0x0) 23:34:49 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x40000) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) 23:34:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x0) 23:34:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) [ 317.092800][ T9287] Bluetooth: hci0: command 0x1003 tx timeout [ 317.099024][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 319.172845][ T9296] Bluetooth: hci0: command 0x1001 tx timeout [ 319.179185][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 321.252861][ T9287] Bluetooth: hci0: command 0x1009 tx timeout 23:34:59 executing program 4 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:34:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x4e24, @loopback}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa0000000000000800460000380000000000339078ac1414aaac1e000089030000000000000000001321d34500"/70], 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = fcntl$getown(r2, 0x9) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000002c0)={0x2000003, 0x0, 0x0, 0x80000000000, 0x1fffffffc}, 0x323) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60102, 0x0) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r5, &(0x7f0000000180)=""/114, 0x72, 0x40010000, &(0x7f0000000200)={0x11, 0x3d, r7, 0x1, 0x2, 0x6, @random="f13594fb6837"}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000240)={{0x632}, {0x3, 0x5}, 0xfffffffffffffffd, 0x2, 0x8}) ptrace$setsig(0x4203, r3, 0xfffffffffffffc21, &(0x7f00000001c0)={0x14, 0x101, 0x2}) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x50000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) 23:34:59 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x4800000000, 0x80000001, 0x81, 0x15c, 0x0, 0x2, 0x8a000, 0xf, 0x6def, 0x1f, 0x200, 0xffff, 0x200, 0xfff, 0xc3ac, 0x10000, 0x7ff, 0x2dd51452, 0x1, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x20, 0x1, 0x3, 0x3, 0x6, 0x58e8, 0x9, 0x9, 0x3, 0x80, 0x1f, 0x7, 0xd3, 0x100000000, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0xffffffff, 0x79, 0x7, 0x4, 0x3ff, 0x1}, r4, 0xb, r1, 0x2) sendfile(r2, r2, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x44200, 0x100) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000280)=0x800, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x9, 0x1}, 0x14) 23:34:59 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x20001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x827d309b2b688fbf, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008}, [@FRA_FLOW={0x8}]}, 0x28}, 0x1, 0x8}, 0x0) 23:34:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = socket$inet6(0xa, 0x4, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x7eb529f8a5db3c20, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r6 = getpgid(0x0) r7 = gettid() kcmp(r6, r7, 0x0, r5, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000080000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000000df0a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2a) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) 23:34:59 executing program 2: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80000001, 0x40000) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r1 = accept(r0, 0x0, &(0x7f0000000140)) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xff, 0x44200) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x10000, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x800, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x0) [ 325.282907][T10595] Unknown ioctl -1068477616 [ 325.295827][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.312120][T10597] FAULT_INJECTION: forcing a failure. [ 325.312120][T10597] name failslab, interval 1, probability 0, space 0, times 0 23:34:59 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x20000) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000080)={0x4009, 0x5, 0x0, 0x16}) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x1, 0x3, {0xa, 0x4e24, 0x3, @rand_addr="75ddbe9d7f7e069c357da8d49562d166", 0x3}}}, 0x32) 23:34:59 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) [ 325.340661][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.371653][T10595] Unknown ioctl -1068477616 23:34:59 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 325.397470][T10597] CPU: 0 PID: 10597 Comm: syz-executor.4 Not tainted 5.3.0-rc8+ #0 [ 325.405398][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.416575][T10597] Call Trace: [ 325.416592][T10597] dump_stack+0x1d8/0x2f8 [ 325.416607][T10597] should_fail+0x555/0x770 [ 325.416618][T10597] __should_failslab+0x11a/0x160 [ 325.416632][T10597] ? tomoyo_encode2+0x273/0x5a0 [ 325.424220][T10597] should_failslab+0x9/0x20 [ 325.424230][T10597] __kmalloc+0x7a/0x340 23:34:59 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x20) write$cgroup_int(r0, &(0x7f0000000080)=0x9f2, 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) [ 325.424242][T10597] tomoyo_encode2+0x273/0x5a0 [ 325.424255][T10597] tomoyo_realpath_from_path+0x769/0x7c0 [ 325.424268][T10597] tomoyo_path_number_perm+0x166/0x640 [ 325.463051][T10597] ? smack_file_ioctl+0x226/0x2e0 [ 325.463064][T10597] ? __fget+0x4e1/0x510 [ 325.472215][T10597] tomoyo_file_ioctl+0x23/0x30 [ 325.472227][T10597] security_file_ioctl+0x6d/0xd0 [ 325.472237][T10597] __x64_sys_ioctl+0xa3/0x120 [ 325.472252][T10597] do_syscall_64+0xfe/0x140 [ 325.482086][T10597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.491236][T10597] RIP: 0033:0x4598e9 [ 325.491246][T10597] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.491251][T10597] RSP: 002b:00007fd89c83ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.520589][T10597] RAX: ffffffffffffffda RBX: 00007fd89c83ac90 RCX: 00000000004598e9 [ 325.520595][T10597] RDX: 00000000200001c0 RSI: 0000000000005412 RDI: 0000000000000003 23:34:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = socket$inet6(0xa, 0x4, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x7eb529f8a5db3c20, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r6 = getpgid(0x0) r7 = gettid() kcmp(r6, r7, 0x0, r5, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000080000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000000df0a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2a) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) 23:34:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe48df070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xe0002, 0x0) write$9p(r1, &(0x7f0000000140)="0600000000000000c9b9000f02000000001ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067f00002000249e1dabddb514480a169fc72518f833b3aacfcf04f7b0bdd78687fc006bff51b9f9218a249e3d00000000000000000000000053", 0x76) [ 325.520599][T10597] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.520604][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd89c83b6d4 [ 325.520610][T10597] R13: 00000000004c41ec R14: 00000000004d8448 R15: 0000000000000004 [ 325.555506][T10597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.575703][ T2668] Bluetooth: Error in BCSP hdr checksum [ 325.643782][T10632] dlm: no locking on control device [ 327.332794][ T9287] Bluetooth: hci0: command 0x1003 tx timeout [ 327.338923][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 329.412846][ T9287] Bluetooth: hci0: command 0x1001 tx timeout [ 329.419087][ T9429] Bluetooth: hci0: sending frame failed (-49) [ 331.492812][ T9296] Bluetooth: hci0: command 0x1009 tx timeout 23:35:09 executing program 4 (fault-call:3 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 23:35:09 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10001, 0x111080) timerfd_gettime(r1, &(0x7f0000000100)) 23:35:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='\xc4\xdd\xc6\x1b1\xe0\xb7\x03\x1f\xa1G\xb5\xae\xc8\xa0\x870\xf8\x87\x02y#\x84\xfd\xe5\xc6\xb4\xa2\xf52u\x80N\x1dT\x9b2\'\x80\t', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) 23:35:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = socket$inet6(0xa, 0x4, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x7eb529f8a5db3c20, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r6 = getpgid(0x0) r7 = gettid() kcmp(r6, r7, 0x0, r5, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000080000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000000df0a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2a) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) 23:35:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x200006007}, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") unshare(0x800) r2 = socket(0x200000000010, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) bind$tipc(r2, 0x0, 0x0) 23:35:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r2 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r2, 0x402c542b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa602}) r3 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3a3fcfc92c413f77f31ca37edfc6414f1c556d9f553b0ba7ba65ca37", 0x800, 0x3, 0x40, 0x1, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba7}) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="2c60406c867cf7ccc6867e9937e0285f271a3d681019d703f78dfaf5f3837dde58a30aa701db585d49116880117448e3f75f031fb7cf672351625e49490b043a4595d5c08e962ce0ea050bd4a1674b72c22991ebf0c7ae5d3fe7af41ccf6768399f0d84c46cc826911b2a73ee83913202c296ef4c3ac624254ecc1d56d905211638b303db5eee49d89e913d23455c6e8500347bb4b7e236eb83049b5e6998cdd358d2307b46f697edb42d62a1810888f7023632e1dbe56b1fe8bdc034f") 23:35:09 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth1_to_bond\x00', 0x9}) r1 = syz_open_dev$usb(0x0, 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045510, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000003c0)={0xa000000000000, "f6b8117e3adfc6414f1c556d97553b0ba75f46ca3700000000008000", 0x2, 0x3, 0x0, 0x10, 0x6}) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3, 0x2, 0x10, &(0x7f0000ffb000/0x2000)=nil, 0x591cba3}) connect$rose(r1, &(0x7f0000000000)=@short={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 23:35:09 executing program 5: inotify_init1(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80, 0x200) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0xd40, 0x0) poll(&(0x7f0000000440)=[{r3}, {}, {r1, 0x8002}, {r2}], 0x4, 0x7) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$BLKRAGET(r4, 0x1263, &(0x7f00000000c0)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) 23:35:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sco\x00') openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) [ 335.589450][T10654] FAULT_INJECTION: forcing a failure. [ 335.589450][T10654] name failslab, interval 1, probability 0, space 0, times 0 23:35:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = socket$inet6(0xa, 0x4, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x7eb529f8a5db3c20, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r6 = getpgid(0x0) r7 = gettid() kcmp(r6, r7, 0x0, r5, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000080000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000000df0a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2a) [ 335.676730][T10654] CPU: 1 PID: 10654 Comm: syz-executor.4 Not tainted 5.3.0-rc8+ #0 [ 335.684680][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.694732][T10654] Call Trace: [ 335.698111][T10654] dump_stack+0x1d8/0x2f8 [ 335.702445][T10654] should_fail+0x555/0x770 [ 335.706878][T10654] __should_failslab+0x11a/0x160 [ 335.711812][T10654] should_failslab+0x9/0x20 [ 335.716313][T10654] kmem_cache_alloc_node+0x65/0x280 [ 335.721512][T10654] ? __alloc_skb+0x9f/0x500 [ 335.726013][T10654] ? rcu_lock_release+0x9/0x30 [ 335.730775][T10654] __alloc_skb+0x9f/0x500 [ 335.735095][T10654] bcsp_recv+0x12e7/0x1720 [ 335.739513][T10654] ? hci_uart_tty_receive+0x95/0x4f0 [ 335.744781][T10654] ? check_preemption_disabled+0x47/0x2a0 [ 335.750479][T10654] hci_uart_tty_receive+0x16b/0x4f0 [ 335.755664][T10654] ? hci_uart_tty_poll+0x10/0x10 [ 335.760577][T10654] tty_ioctl+0xd5d/0x15c0 [ 335.764896][T10654] ? tty_do_resize+0x180/0x180 [ 335.769640][T10654] do_vfs_ioctl+0x744/0x1730 [ 335.774203][T10654] ? __fget+0x4e1/0x510 [ 335.778339][T10654] ? tomoyo_file_ioctl+0x23/0x30 [ 335.783264][T10654] ? security_file_ioctl+0xa1/0xd0 [ 335.788348][T10654] __x64_sys_ioctl+0xe3/0x120 [ 335.793184][T10654] do_syscall_64+0xfe/0x140 [ 335.797666][T10654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.803531][T10654] RIP: 0033:0x4598e9 [ 335.807399][T10654] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:35:09 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/171) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x3}, 0xc) sendfile(r5, r4, 0x0, 0x1000) 23:35:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0xb3b97f0dfe9f5a31, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) [ 335.826975][T10654] RSP: 002b:00007fd89c83ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.835359][T10654] RAX: ffffffffffffffda RBX: 00007fd89c83ac90 RCX: 00000000004598e9 [ 335.843307][T10654] RDX: 00000000200001c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 335.851273][T10654] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.859219][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd89c83b6d4 [ 335.867167][T10654] R13: 00000000004c41ec R14: 00000000004d8448 R15: 0000000000000004 [ 335.886473][T10654] Bluetooth: Can't allocate mem for new packet [ 335.886740][ T2668] kasan: CONFIG_KASAN_INLINE enabled [ 335.915325][ T2668] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 335.957484][ T2668] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 335.964482][ T2668] CPU: 1 PID: 2668 Comm: kworker/u4:4 Not tainted 5.3.0-rc8+ #0 [ 335.972103][ T2668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.977708][ T3907] kobject: 'loop1' (00000000efc29500): kobject_uevent_env [ 335.982158][ T2668] Workqueue: events_unbound flush_to_ldisc [ 335.989502][ T3907] kobject: 'loop1' (00000000efc29500): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 335.995148][ T2668] RIP: 0010:skb_put+0x37/0x210 [ 335.995157][ T2668] Code: 48 83 ec 18 41 89 f5 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 fa 05 99 fb 48 89 da 49 8d be c0 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 0b 48 89 d3 e8 2b 01 d2 fb 48 89 da 4d 8b be c0 00 [ 335.995161][ T2668] RSP: 0018:ffff8880a1bb7a98 EFLAGS: 00010206 [ 335.995167][ T2668] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffff8880a1ba2040 [ 335.995172][ T2668] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 00000000000000c0 [ 335.995176][ T2668] RBP: ffff8880a1bb7ad8 R08: ffffffff854764ee R09: ffffffff854763cb [ 335.995180][ T2668] R10: ffff8880a1ba2040 R11: 0000000000000002 R12: 000000000000005e [ 335.995189][ T2668] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880a1c26b98 [ 336.075913][ T2668] FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 336.084836][ T2668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.091394][ T2668] CR2: 00007f32f0130ea0 CR3: 00000000880fe000 CR4: 00000000001406e0 [ 336.099358][ T2668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 336.107436][ T2668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 336.115576][ T2668] Call Trace: [ 336.118850][ T2668] ? trace_lock_acquire+0x159/0x1d0 [ 336.124162][ T2668] bcsp_recv+0xfa9/0x1720 [ 336.128494][ T2668] ? hci_uart_tty_receive+0x95/0x4f0 [ 336.133765][ T2668] ? check_preemption_disabled+0x47/0x2a0 [ 336.139468][ T2668] hci_uart_tty_receive+0x16b/0x4f0 [ 336.144641][ T2668] ? hci_uart_tty_poll+0x10/0x10 [ 336.149571][ T2668] tty_ldisc_receive_buf+0x12e/0x170 [ 336.154949][ T2668] tty_port_default_receive_buf+0x82/0xb0 [ 336.160658][ T2668] flush_to_ldisc+0x328/0x560 [ 336.165318][ T2668] process_one_work+0x7ef/0x10e0 [ 336.170234][ T2668] worker_thread+0xc01/0x1630 [ 336.174891][ T2668] kthread+0x332/0x350 [ 336.178935][ T2668] ? rcu_lock_release+0x30/0x30 [ 336.183761][ T2668] ? kthread_blkcg+0xe0/0xe0 [ 336.188330][ T2668] ret_from_fork+0x24/0x30 [ 336.192728][ T2668] Modules linked in: [ 336.200916][ T3907] kobject: 'loop3' (00000000408fbcb2): kobject_uevent_env [ 336.202964][ T2668] ---[ end trace 147e7030ee7c3dde ]--- [ 336.214378][ T2668] RIP: 0010:skb_put+0x37/0x210 [ 336.219134][ T2668] Code: 48 83 ec 18 41 89 f5 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 fa 05 99 fb 48 89 da 49 8d be c0 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 0b 48 89 d3 e8 2b 01 d2 fb 48 89 da 4d 8b be c0 00 [ 336.239007][ T2668] RSP: 0018:ffff8880a1bb7a98 EFLAGS: 00010206 [ 336.244519][ T3907] kobject: 'loop3' (00000000408fbcb2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 336.253575][ T2668] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffff8880a1ba2040 [ 336.264064][ T2668] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 00000000000000c0 [ 336.272134][ T2668] RBP: ffff8880a1bb7ad8 R08: ffffffff854764ee R09: ffffffff854763cb [ 336.273954][ T3907] kobject: 'loop0' (0000000060f09131): kobject_uevent_env [ 336.280308][ T2668] R10: ffff8880a1ba2040 R11: 0000000000000002 R12: 000000000000005e [ 336.295555][ T2668] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880a1c26b98 [ 336.298013][ T3907] kobject: 'loop0' (0000000060f09131): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 336.303568][ T2668] FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 336.303574][ T2668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.303579][ T2668] CR2: 0000000000625208 CR3: 00000000a8f30000 CR4: 00000000001406e0 [ 336.303591][ T2668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 336.346772][ T2668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 336.354785][ T2668] Kernel panic - not syncing: Fatal exception [ 336.362356][ T2668] Kernel Offset: disabled [ 336.366679][ T2668] Rebooting in 86400 seconds..