r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r11 = geteuid() fsetxattr$system_posix_acl(r10, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r11, @ANYRESOCT=r9, @ANYRESHEX, @ANYRES16=r11, @ANYRESHEX], 0x7, 0x0) setreuid(0xee00, r11) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) [ 2088.615604][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b65, &(0x7f0000000080)={0x0, 0x0}) [ 2088.741251][T13809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x0, 0x0}) 03:26:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) socket$inet6(0xa, 0x4, 0x8) 03:26:07 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) connect$qrtr(r2, &(0x7f0000000240)={0x2a, 0x1, 0x4001}, 0xc) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) [ 2089.016315][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2089.056012][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200200, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x505801) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r7, 0xf505, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)) 03:26:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b68, &(0x7f0000000080)={0x0, 0x0}) 03:26:07 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2041, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) 03:26:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000cf8ffffff0000000400000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xc0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffe84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r5, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb07782f6a704608900000000000000435bd03fe00"/38], 0x0, 0x26, 0xfffffffffffffe1e, 0x40000000}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000200bac89500000000000000dcf3d1dc8a217a4c35b8abd6f6f7a0000f3aa6134b9cfd218d19f332dcf57c53c18a28a920f2861722acca5528faf396e740a0fce80c48bcf1c41728ea51844399342241dd951f2fd41deee82ab4769eda16a710ad3ab9"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x8, [], 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x3}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r8, 0xc0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x78) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r11, 0x0, r10, 0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000504000000000000010000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x9c, &(0x7f00000000c0)=""/156, 0x1e00, 0x1, [], r3, 0xc, r6, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xc, 0x31, 0x400}, 0x10, r9, r10}, 0xfffffebc) 03:26:07 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x40000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0xff}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x9000}, 0x0) 03:26:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c63bddaedf301c1606e14a852e2a5fd8499c38e6350446b5ecbbefaecd109d1b71fe33a60c6b1cba34908e729bc595729fe48e2f5a6a7b1613fb9fda0010ce44372cfe46986c1453aade22c4deba0fc197228e828a2f785752bfc0b0d5b943ff1f53ddf8f", @ANYRES16=r1, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) connect(r0, &(0x7f00000001c0)=@phonet={0x23, 0x7f, 0x0, 0x7f}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) [ 2089.362142][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x61, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000040)={0x9, 0x1, 0x1, 0x9f}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r11 = geteuid() fsetxattr$system_posix_acl(r10, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r11, @ANYRESOCT=r9, @ANYRESHEX, @ANYRES16=r11, @ANYRESHEX], 0x7, 0x0) setreuid(0xee00, r11) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x2, 0x0, 0x10, 0x8000, 0x0, "463c0d9a173fd056"}) 03:26:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b69, &(0x7f0000000080)={0x0, 0x0}) [ 2089.556015][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:07 executing program 2: init_module(&(0x7f0000000380)='/dev/full\x00', 0xa, &(0x7f00000003c0)='/dev/full\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="62f928e10f12451aa8a4298b5fae2f734c7da3", 0x13}], 0x1, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xc9}}, @timestamping={{0x14, 0x1, 0x25, 0x43}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xc0000000}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xc0}, 0x40008084) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x4c3, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r5 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x5, 0x24480) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) fcntl$notify(r3, 0x402, 0x0) 03:26:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r3, 0x0, 0x4240a2a0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r4, 0x0, 0x4240a2a0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @remote, 0xffffffff}, 0x1c) listen(r2, 0xff2c) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x4, 0xff, 0x3, 0x8, @mcast1, @private2, 0x700, 0x8, 0x7, 0x4}}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="6b1587e1251c000000", @ANYRES16=r1, @ANYBLOB="00042dbd7000fedbdf2515000000080003003a38bf4bcf0bd3d00f65cec1f071031dd335acfd1c75fdee4617cfdeac5ecaff363fe5a6615d674eb97589f462cf111385fb3bb4b620657a9208ac71f1f0cfdd67ccae253a3d5a532a3414d686bbd502ac92e85b52fb54ee3dade69e9e36e88bf5604dc6a4938aa88438b48a13814e58a5b69ca7130fae502fbf573d513f9f87c4975e7f049708083b7005c64408a920f2dcd067", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 03:26:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b6a, &(0x7f0000000080)={0x0, 0x0}) 03:26:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x80) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 03:26:07 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000240)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b6b, &(0x7f0000000080)={0x0, 0x0}) 03:26:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000340)={[{0x800, 0x3, 0x8, 0x7, 0xff, 0x8, 0x47, 0x3, 0x9, 0x0, 0x4, 0x3, 0x800}, {0xfffffff8, 0xff, 0x90, 0x1, 0xe0, 0xfb, 0x3, 0xa2, 0x7, 0x33, 0x1, 0x81, 0x81}, {0xdaa, 0x9, 0xfa, 0x8, 0x1, 0x8, 0x2, 0x67, 0x8, 0x8, 0x3e, 0x1, 0x6}], 0x80000001}) r3 = gettid() tkill(r3, 0x33) r4 = gettid() tkill(r4, 0x33) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="014521d41a5d9bd90b009ad1fe2a7818f663c8dc9d00", @ANYRES16=r6, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) kcmp(r3, r4, 0x0, r5, 0xffffffffffffffff) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r7, 0xc0046d00, &(0x7f0000000040)=0x7) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x280200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x5, @local, 0x80000001}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4, 0x80000001, @remote, 0x2}], 0xa8) [ 2089.894662][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x404000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r5}, {r6}], 0x5, 0x101) syz_open_pts(r1, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00082cbd01000000010000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48004) [ 2090.014100][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r11 = geteuid() fsetxattr$system_posix_acl(r10, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r11, @ANYRESOCT=r9, @ANYRESHEX, @ANYRES16=r11, @ANYRESHEX], 0x7, 0x0) setreuid(0xee00, r11) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b6c, &(0x7f0000000080)={0x0, 0x0}) 03:26:08 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0xa4a00, 0xa1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400030067a8743fd4fe71bd1fa2b3891620df05d129085afb734bdf05cd9001", @ANYRES16=r3, @ANYBLOB="01000010000000000000260000000e0001006e657464657673696d0000ffffff7f0000000064657673696d300032028d0900000000000c008f00000000000000000200"/78], 0x54}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) utimensat(r4, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{}, {0x77359400}}, 0x100) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @multicast2}], 0x20) 03:26:08 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x1, 0x2000004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r6, @ANYRESDEC=r6], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b6d, &(0x7f0000000080)={0x0, 0x0}) 03:26:08 executing program 0: syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0xd0, 0x34, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x40, 0x0, 0x81}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x20, 0x3, 0x3f, 0xff, 0x20}, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x9, 0x8, 0x81, 0x15}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0xc1, &(0x7f00000006c0)=@string={0xc1, 0x3, "8fa8c1bec7de10184e29ffba28b3538982dcec2f3a63092d53d1c22873b3f4439c3e40af620dee595d059b6f8e0131c3a260d214ff3b8ffb2b21f76654bde5dc379d3109171e4d106c7cfc3327c5269dc0ef941c05b072db61e8d0a754b34059a5246b3e1ebd0061b05639c2af4ea2caa7885b9c8f2a343c21f6a21964651cb69b6ff878b4744f368310ab84f0e902a82cb6310f4a7e3989aa6ff010cfd48feb617a2e065436717ef5653b9c878ae096ea081435bb4cd20c175b0bbca7d175"}}, {0xaf, &(0x7f0000000500)=@string={0xaf, 0x3, "80d9b28ec270997bc48f67122a560cd92ed9d7c8e9e8c8db652141ebb847f21229d3e47bed79e0936c54ba97cc5391fdb411e76b9d985e1857de77a0a626d59adc46486e8f41092ff031a8d19794d5e25106f400e062c907e27c97992f7f7bc97997b42ae6d65a616af8166aa2ca62b5732028b2cfea27661b1cb2cf2449199a25f1895603d662574e1d5d40c3fd8d434be99266faa3fd719cfb6886a30707709e21a3df3aee523cf8d1c6e6af"}}, {0x6f, &(0x7f00000007c0)=@string={0x6f, 0x3, "14c669f275599f4c0cc5818c268d03823dfe4d852e4af1fd78f4fa0949d02a9c9f0ef026c039c13a52cd266fc0550be440f5500d09db227c4bd1803a7c61f871a1f4871fbf5c7bbeba005cbc026c5fea31b46606b40fc1f003b5821353cfa0181823eef890db8f577c936dd4ff"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x419}}, {0x48, &(0x7f00000005c0)=@string={0x48, 0x3, "349dade357591509f8c2269a956ac4b69deae19f26764c760be380f7787bfcdfb316e10e4d35361d3e4108a3574b6ade6f8888d5fe9bf78eeec70713394ae0c904b421df9428"}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x7c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_STA_WME_MAX_SP={0x19, 0x2, "27fd6fb8e47ae70ee5e44e1cd2e8a7f049bf33284f"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffb}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x20044c05) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000000)={0x7, 0x9, 0x6f1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) 03:26:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b70, &(0x7f0000000080)={0x0, 0x0}) 03:26:08 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x4, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="30282cc59d1a71b9f37b12e93919ba8cfad2ce497e736e322b2973f76462940e91b28c362f", 0x25}, {&(0x7f0000000340)="34681948a241050e49c20f48672e4b61d2506492fb7536fbc6d349b21b2072a0ad3516b8d366d4af704dba80299e88677bd150", 0x33}], 0x2}, 0x811) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYRESOCT=r5], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b71, &(0x7f0000000080)={0x0, 0x0}) 03:26:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0}) [ 2090.818433][T13981] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4bfa, &(0x7f0000000080)={0x0, 0x0}) [ 2090.875708][T17622] Bluetooth: hci0: command 0x0401 tx timeout [ 2090.888888][T13988] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:09 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000400000000000280012000c000100ff1accb452f946b413b5951a6aa0a9cf237f7468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 2090.982467][ T5032] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2091.004318][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.161565][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r11 = geteuid() fsetxattr$system_posix_acl(r10, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r11, @ANYRESOCT=r9, @ANYRESHEX, @ANYRES16=r11, @ANYRESHEX], 0x7, 0x0) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4bfb, &(0x7f0000000080)={0x0, 0x0}) 03:26:09 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="58cb8c95da060fd86ff525398da5d10a91a4ad0d4fc869abea09bdfe76597da6a3dcb625264e07da29f89dba9f475dd4f55ebb7829757897b497336387f32cacfd1cb661356e02ccecf9342ec80723e2471e0000000000472b1b408f50a003de0697debd309c7f848f0ebf4db411dc748fac34e3d3f709d54f9067a96a1d0bd6a2c8a17fc0214b8edc2c23f47096416f18a679a8ed2bc52d500a20e39435472d4585"], 0x3c}}, 0x0) 03:26:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4c00, &(0x7f0000000080)={0x0, 0x0}) [ 2091.403024][T14011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4c01, &(0x7f0000000080)={0x0, 0x0}) [ 2091.492574][ T5032] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2091.526853][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.682872][ T5032] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2091.692469][ T5032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.709353][ T5032] usb 1-1: Product: 躲烂箙迄ቧ嘪죗Ⅵ䞸ዲ팩篤秭鏠呬鞺双﶑ᆴ毧额ᡞꁷ⚦髕䛜湈䆏⼉ㇰ톨钗ّô拠߉糢馗缯쥻靹⪴훦慚樖쪢땢⁳눨昧ᰛ쾲䤤騙嚉혃坢ᵎ䁝ﷃ䎍暒ꏺ燽ﮜ虨ޣ瀇↞㱒퇸 [ 2091.782419][ T5032] usb 1-1: Manufacturer: ꢏ뻁᠐⥎뫿댨襓⿬挺ⴉ텓⣂덳䏴㺜꽀ൢ姮՝澛Ǝ쌱悢ᓒ㯿ﮏÅ曷뵔鴷ऱḗ၍籬㏼씧鴦Ე뀅Ꟑ더奀⒥㹫봞愀嚰숹亯쪢袧鱛⪏㰴ᦢ敤똜澛磸璴㙏ႃ蒫ꠂ똬༱繊褹澪ჰ퓏穡خ㙔繱旵鰻誇雠࣪㔔䲻೒嬗밋톧 [ 2091.811591][ T5032] usb 1-1: SerialNumber: 옔奵䲟씌貁账舃︽蕍䨮ﷱ৺큉鰪ຟ⛰㧀㫁쵒漦嗀൐簢텋㪀慼燸ᾇ岿빻º뱜氂됱٦ྴ딃ᎂ콓ᢠ⌘垏鍼푭 [ 2091.842886][T13973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2092.173271][ T5032] usblp: can't set desired altsetting 0 on interface 0 [ 2092.190791][ T5032] usb 1-1: USB disconnect, device number 11 [ 2092.862182][ T5032] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2092.952133][ T5027] Bluetooth: hci0: command 0x0401 tx timeout [ 2093.332202][ T5032] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2093.518607][ T5032] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2093.527909][ T5032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.536257][ T5032] usb 1-1: Product: 躲烂箙迄ቧ嘪죗Ⅵ䞸ዲ팩篤秭鏠呬鞺双﶑ᆴ毧额ᡞꁷ⚦髕䛜湈䆏⼉ㇰ톨钗ّô拠߉糢馗缯쥻靹⪴훦慚樖쪢땢⁳눨昧ᰛ쾲䤤騙嚉혃坢ᵎ䁝ﷃ䎍暒ꏺ燽ﮜ虨ޣ瀇↞㱒퇸 [ 2093.560771][ T5032] usb 1-1: Manufacturer: ꢏ뻁᠐⥎뫿댨襓⿬挺ⴉ텓⣂덳䏴㺜꽀ൢ姮՝澛Ǝ쌱悢ᓒ㯿ﮏÅ曷뵔鴷ऱḗ၍籬㏼씧鴦Ე뀅Ꟑ더奀⒥㹫봞愀嚰숹亯쪢袧鱛⪏㰴ᦢ敤똜澛磸璴㙏ႃ蒫ꠂ똬༱繊褹澪ჰ퓏穡خ㙔繱旵鰻誇雠࣪㔔䲻೒嬗밋톧 [ 2093.588837][ T5032] usb 1-1: SerialNumber: 옔奵䲟씌貁账舃︽蕍䨮ﷱ৺큉鰪ຟ⛰㧀㫁쵒漦嗀൐簢텋㪀慼燸ᾇ岿빻º뱜氂됱٦ྴ딃ᎂ콓ᢠ⌘垏鍼푭 [ 2093.625045][T13973] raw-gadget gadget: fail, usb_ep_enable returned -22 03:26:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) 03:26:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0}) 03:26:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) geteuid() ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:11 executing program 3: pipe(&(0x7f0000000100)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$FIONCLEX(r7, 0x5450) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:11 executing program 2: r0 = io_uring_setup(0x171e, &(0x7f0000000040)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000180), 0x0, 0x4) r2 = syz_io_uring_complete(r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r6 = geteuid() fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r6, @ANYRESOCT=r4, @ANYRESHEX, @ANYRES16=r6, @ANYRESHEX], 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0xa, &(0x7f00000008c0)=[{&(0x7f0000000240)="02d5cf5ec2d6fd33d77f8ef4d1dc8b774957c97f760188e867f7474f0b823a46e125e6aef158382df81385c009eea4b1c6f6e1164c1246017f268db0d791246489d834db86b3f08cafbd7d251539629c40daafa7c8427bcacedce6768f8cdbd55cdbfca8ed93e877139f2336d40089b444e59f6369000a183ff043da39889c34a5f339dff9054a575afd5f747107f9dd5faf167e35aa3fdaaa10df7d5fecfd91664f41cc6aa3f1c4ffb3a31b83319a942c289a470c4d121a25f4c81da26f19b3c51014a1d710f2858f9a1936434bb1260861", 0xd2, 0x1000}, {&(0x7f0000000340)="4073915c9e3cc53ed85f807bfb464f7b336f1651979b73eeac010e6bd718d6bd605b0fe00f2d505c8ee89b952d459156a3dd220dd56ed3bcd66c90d4dca5d281dc76e7fd106ef8ad605f6bbf9b932d0a594ee769d7b06a2fbb7e0cf9517a", 0x5e, 0x7f}, {&(0x7f00000003c0)="b509ea0dd0df1ff4ce26ed3fcc20c5e8986e7810d9379378f186b1ffc33a0bd295e902844c5e56ebc51c1d3bd6456cfc677fc94d2025d862b34213d9a668914d54e360a22f24a0512dfe5a14ffd7eef7f403818b6a663eda7963845f8574444f5fc4545dabc97f0fe87ac020d10fa0388bdaddbf0aea21ea20ffbf195792d308", 0x80, 0x8000}, {&(0x7f0000000440)="2b8d43ee535b650939c1fa03aaa061df18ce5ebdee1813c7eaea547d089a6b72b18683636b545ff30ce541345a09eb3fd5d453cdcf383070645f7ba2af467b507089312f42cb449f60e853adcf8906a50ded0116a2c55fc3142c758765f70e44f9034c6a01859cbdf349e3503057b409c60a4c1ab283f74b40682aa5ab6b8fe7a1d2fa90dbe55be00b4e6ae9350471926a684612cef694465a447544b1", 0x9d, 0x1000}, {&(0x7f0000000500)="d4520ceb8a6cb4559d3bd19e5781b86b52aa59d7017a19385e23bc31b78b6d5f7263a1f6a7a3af4b2d0204907f7888af22d37ab772171a23bbff8f9ce7fbc64ef3f72707cf2779a6658677069cf62deb9ce0786dc5371e8a4420f50049ce9b78736c45717a304855fbfed7b42a7893479445033f0c515ea800d5501fc73c1d9d2e92fc95292e271879e8d29d8415cabb952c", 0x92, 0x1}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="d2787cb17195c7a40f98f3e0a2e5f453e0e57771dbd93c6aa33ce9599f271f036ab6a461ba030d47564fb78a5feaa7c6c4741d74c4df977fd2e778dc5ce3b52572a44d4fd301bd8228ef42b1b209bd2c41eac8a7e4972fc65b146f8c761c80a2b36bb2eb1951e98338fde3aa604ee5053f35b177ab2500e15ff789b8082e32229a0e2966d153f57a27a3eaae69a4fbed147c4eaec787c2a31953ef445da03e7048914b8b90aaaa921542b18e60220799e3ddfaac532e7e656c81a3b3dde2622a521ca9c68eea10803d8734cfa7b260e9cc56cde7a19fd09a82fa59ebb401668b3b98c68ea9728f3822645ab0a53c806dfdf2e65941f3ad37", 0xf8, 0xd3f}, {&(0x7f0000000700)="0a1dbac2261d2eadc6dc5e01bb03d444e895bad64deb423b2636cef6405a5d19a77174867a9d49bb0b48168d3f32cb54a0f8dfc29d79ba07d63beecb3e07b9d05a5fa91fe883bea8bbcca92b1ce595d603c8f1834839d2997874e0f5d501cca2d31c54b421356c680270a318e2e065", 0x6f, 0x40}, {&(0x7f0000000780)="012f1562d381c3337e95c8db7cb4ea2602d6d2bab2296edb76530b7dbf8462c976e43e458957ce20cab898fc8b343583bc36", 0x32, 0x100}, {&(0x7f00000007c0)="4161ccffd8a5ef056eb4dcecf0c8841808831ba03d20fb34954db5d5acf4ab40a7236ea3fab9ec5b1411d24d6d4d748a50eafe9c878ad8643cb1895eb64f39a6c3954a38b20142ab6b8b736525fab681bb9913bd78fa46e99d7e52e3bfdccf54d94c6b3e24ad10aafa7a2e6f1ab663c5032b48ea19ef50af623ed59f6059b3c2d22f7a7399dbd284342b6ec4c7eaca2706db17628ca55a50b987d33317803164dc2d968981af2ab4a424ef5e1288745db92757d1c6791b59d448b6e74313aff5911ec47156c1a198c21c4c97092a51", 0xcf, 0x2}], 0xa20002, &(0x7f00000009c0)=ANY=[@ANYBLOB="687567653d6164766973653d62726f6164636173742d6c696e6b002c736d61636b66736861743d5dff2c2b2c646566636f6e746578743d73797374656d5f752c736d61636b66736861743d62726f6164636173742d6c696e6b002c6f626a5f726f6c653d29ce29402e2c23112de92c6f626a5f757365723d2c2c7375626a5f726f6c653d2c66736d616769633d3078303030303030303030303030303030382c7569643e", @ANYRESDEC=r6, @ANYBLOB=',s}bj_type=broadcast-link\x00,\x00']) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/autofs\x00', 0x80000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002100)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000002200)=0xe8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x44, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$SNDCTL_TMR_STOP(r7, 0x5403) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, 0x0, 0x10) 03:26:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x3c9541, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fff) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401, 0x0, "463c0d9a173fd056"}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r5, 0x0, 0x8000, 0xe) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 03:26:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4c05, &(0x7f0000000080)={0x0, 0x0}) [ 2093.761723][T14067] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2093.813216][ T5032] usblp: can't set desired altsetting 0 on interface 0 [ 2093.835583][ T5032] usb 1-1: USB disconnect, device number 12 03:26:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xfffe, 0x0, "463c0d9a173fd056"}) 03:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5409, &(0x7f0000000080)={0x0, 0x0}) [ 2093.966368][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x8000, 0x0, 0x0, 0xff, "463c0d9a173fd056"}) 03:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x540b, &(0x7f0000000080)={0x0, 0x0}) 03:26:12 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x29, {0x29, 0xa, "dc7420c4f62081d1d935c5d2653504feefcaedbfaa4375d9182812769c2539f4e70075fd1881a2"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x20, 0x8, 0x5a, "e5e99ef351a6f2dfdb4c9b788f58dec28f672cee855c964d76edafa970f5ce3f850bbda29efc034fe087dca4cf32ebe8448307a37b3659c3fc264472a25d04455f34bc44e482b55061e5c883097b80a7aa1a2246bb00751a3f1e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x28}, &(0x7f00000002c0)={0x20, 0x0, 0x38, {0x36, "1c5d4e53c3413241b0900e8ec47d60ff8f60413bebd8d2c4e8e5b70817173e61c2fff407b78eedd245e87c79ec5e95d2d2c7abd099ec"}}, &(0x7f0000000340)={0x20, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x20}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 03:26:12 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x8001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = dup2(r3, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x6d, &(0x7f0000000080)={r8}, &(0x7f00000000c0)=0xfe42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xb5d3d8f651b5acd4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x200048c4}, 0x4e800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e24, 0x7fe, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}}, 0x5, 0x2}, &(0x7f0000000080)=0x90) 03:26:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x1ff, 0x40002, 0x2, 0x54, 0x1}, 0x40) 03:26:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:12 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r7, 0x80044dfd, &(0x7f0000000300)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="bbf53d2855f78d3900c67499"], 0x3c}}, 0x0) 03:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x540c, &(0x7f0000000080)={0x0, 0x0}) 03:26:12 executing program 0: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x602000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r2, 0x0, 0x4240a2a0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000140)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r5, 0x8000, 0x5, [0x3ff, 0x7, 0x6f7, 0x9948, 0x3]}, 0x12) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="6c653000ea7f0000000000f9000000005157ed"], 0x10) 03:26:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0x9b0000, 0x3, 0x3ff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a7c, 0x7ff, [], @string=&(0x7f0000000000)=0x1f}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44848) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={r8}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x100, 0x201, 0x4, 0x2, 0xd5f, 0x4, 0xfb41, r8}, &(0x7f0000000140)=0x20) 03:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x540d, &(0x7f0000000080)={0x0, 0x0}) 03:26:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0xff2c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x9a5eacd596ba4807, 0x9, 0x2, 0x80, 0x46, @dev={0xfe, 0x80, [], 0x16}, @private2, 0xf9fec35c6ebccf1a, 0x8, 0x5, 0x3ec200}}) 03:26:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) socketpair(0x10, 0x3, 0xffff, &(0x7f0000000000)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 03:26:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0x0, 0x0, "463c0d9a173fd056"}) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000)=0x7ff, 0x4) 03:26:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x540e, &(0x7f0000000080)={0x0, 0x0}) 03:26:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}, {r3}, {r4}, {r5}, {r6}], 0x5, 0x101) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000080)={0x9, 0x1, [0xffff, 0x7fff, 0x0, 0x6, 0x2], 0x7}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x1e) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000180)) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) 03:26:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) [ 2094.974121][T14190] Unknown ioctl -2147200763 [ 2095.042250][ T5032] Bluetooth: hci0: command 0x0401 tx timeout [ 2095.184090][T14192] Unknown ioctl -2147200763 03:26:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x540f, &(0x7f0000000080)={0x0, 0x0}) 03:26:13 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696df500000f00020c008f00000000000000000000000000601c581de159b7c31fda00f0000000000000000000000000002b1cdb07f8b14972992cb9a18130a9ef82da7135b79b5b30849790c51c25c72f2c00"/122], 0x54}}, 0x0) r8 = dup(r6) bind$netrom(r8, &(0x7f00000003c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@bcast, @null, @null, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16=r10, @ANYBLOB="49b920cf6fd4d44b0798a7b506122a68153e340ba649f39b79c1dbad9deebd8081a3bdf7bc3dcad1461acfb68619eeff7f75336a60382f3027a3364a43320b64a70a4d59aff58432d0650c04c191a0d002a9f2600ee4fbb05fab3143f03a754fd6d0e3a6c81b222987e45f551c3eb298e00588c1047d9f6d0f20a66d90685dff0a619223cb99100ffd6a2a283d95b1a7a33bf65ec68ae7cdaaad6e74b4f2f4ab024d7545bcef8e67bf8a2e2e4ad579416035ca546ef563eb5b78e69767c24521674d5bad349f8bd727e3400ecb8b", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r5, 0xf505, 0x0) 03:26:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 03:26:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080000000c00900000000000000000002f28abb781d6311c1105c30a8280d834c56eb41c32619b6de081347ad520d28474a17443b3f1eb"], 0x54}}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x17, 0x9, 0x81, 0x7f, 0x4, 0x2, 0x0, 0x4, 0x125, 0x38, 0x130, 0x45, 0x8d94, 0x20, 0x81, 0xda2, 0xffff, 0x8}, [{0x1, 0x6, 0x81, 0xa3e9, 0x6, 0x9, 0x8, 0x3}], "b9b1ef0f2330234b77598fe942751ee1350b4c0731a5e123503869c363a696a4fac32b544a64691289775c3bf7519e127263ee1fbc8b54df6253460dfb53bc1f68a89404a8f09427718c2478b17e1fe18a4f379d4d1f547152b1cb0358eea3f8d57b8ac8e7504b49183055a352cb1715356d86b81e30f960c533c8f4a3ab6b4b184aacb030bdd94a24cbe7ee825889fe55108995dfba6b480166f1a573bc4f105e0dea8cae827b209dd19bc5b7ba66ac61f435ef3ceb20c8a0865547e467c0a0abc3ee604020a099a21bb6e58891e68c164e0fa7955423896c889474ea587799218d03701192450cffe3bb4bf7", [[], [], [], [], [], [], [], []]}, 0x945) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r6}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000ac0)={0x8, 0x120, 0xfa00, {0x0, {0x5ca1ecac, 0x1, "a3f9bf12fbd501435dbfb3fa8d0846b804123927eb6c2b7f6a20c6aba74be520d46c0dbcd774cd5bc4d3897a43e2465695d540567c46d42a3e2d28ce9eca332661630049c5e4eb7acbb4fdbe14ea1c5e606a1eb2c51f92578d448de1bfc521350a0997a17b2bc22ef31109f8fcda716a4127863f58ee62f0669efbb184336423511a4b2741380e235a977c01a1fc9934edf54d8dcd59180bc954b1905d1dc2fa143dd6b9350073f79264d13867021ccec50bfc317b4ec13526415ce34ff7b24ce08fb929e4de678b60f18574a5b7f42ab135ceb5c258a9b04565a81348e73ad2f5f7ff71bdd7667c274ac3e1bf53e654429993f03d89cb2e5e96ec87d4748869", 0x81, 0x20, 0x6, 0x3, 0x20, 0x6, 0x4, 0x1}, r6}}, 0x128) 03:26:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5410, &(0x7f0000000080)={0x0, 0x0}) 03:26:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x55}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfea3, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$VT_RELDISP(r3, 0x5605) 03:26:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x58) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={[], [], @remote}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x400808c) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) [ 2095.447919][T14210] __nla_validate_parse: 4 callbacks suppressed [ 2095.447926][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5412, &(0x7f0000000080)={0x0, 0x0}) 03:26:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x4, 0x1}, 0x40) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0x402, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 03:26:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5413, &(0x7f0000000080)={0x0, 0x0}) 03:26:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 03:26:14 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000000240)={0x8, 'veth1\x00', {'macvlan1\x00'}, 0x8482}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:14 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5414, &(0x7f0000000080)={0x0, 0x0}) 03:26:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, 0x0, "353c0d9a173fd056"}) 03:26:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5415, &(0x7f0000000080)={0x0, 0x0}) 03:26:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x8001, 0x8100) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5416, &(0x7f0000000080)={0x0, 0x0}) 03:26:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x20, 0x4, 0x8001, 0x35a, 0x1a, "29b76f5ce66eda04b2a7ea8db730bf982e8958"}) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "ae4a59e07f4e1759"}) [ 2096.368980][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5417, &(0x7f0000000080)={0x0, 0x0}) [ 2096.535807][T14273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1e, 0x0) 03:26:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0xd9, 0x7}) 03:26:15 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) poll(&(0x7f0000000100)=[{r5}, {r6}, {r7}, {r8}, {r9}], 0x5, 0x101) ioctl$TCSETAW(r7, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4c, "0600"}) 03:26:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5418, &(0x7f0000000080)={0x0, 0x0}) 03:26:15 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0xff2c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x28, 0x26, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0x3, 0x8}, {0xb, 0xfff1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0}) [ 2097.130348][T17382] Bluetooth: hci0: command 0x0401 tx timeout [ 2097.159993][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x300, 0x0) [ 2097.253852][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x541c, &(0x7f0000000080)={0x0, 0x0}) 03:26:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x8000000000000000, 0x0) 03:26:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x541d, &(0x7f0000000080)={0x0, 0x0}) 03:26:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:15 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)={0x30, r5, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x120, r5, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdab}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7cf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2585ce66}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x582a}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x44ef}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xda}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6bfc}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x140, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_AF_SPEC={0x10c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x80000000}, {0x8, 0x9, 0x0, 0x0, 0x6}]}}, @AF_INET6={0x94, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, [], 0x22}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={[], [], @private=0xa010100}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x20}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, [], 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={[], [], @rand_addr=0x64010102}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x40}, {0x8, 0x15, 0x0, 0x0, 0x2}, {0x8, 0x3, 0x0, 0x0, 0x3ff}, {0x8, 0xb, 0x0, 0x0, 0x2}, {0x8, 0x1e, 0x0, 0x0, 0xffffffc1}, {0x8, 0xa, 0x0, 0x0, 0x7}, {0x8, 0xe, 0x0, 0x0, 0x8}]}}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x20}]}]}]}, 0x140}}, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x95900, 0x0) ioctl$BLKIOOPT(r9, 0x1279, &(0x7f0000000340)) 03:26:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xca9a3b) 03:26:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4400, 0x0) 03:26:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0}) [ 2097.544896][T14341] tipc: Started in network mode [ 2097.580567][T14341] tipc: Own node identity , cluster identity 4711 03:26:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0}) [ 2097.623945][T14345] tipc: Started in network mode [ 2097.629178][T14345] tipc: Own node identity , cluster identity 4711 03:26:15 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0}) 03:26:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCCBRK(r7, 0x5428) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5422, &(0x7f0000000080)={0x0, 0x0}) 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0}) 03:26:16 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="00005c644dbf8fa8f00112000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x3}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x2}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x64}}, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r10, 0x0, r9, 0x0, 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2) 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5424, &(0x7f0000000080)={0x0, 0x0}) [ 2098.092618][T14381] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2098.120239][T14383] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:16 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="ba451aef14c7f4e189441b819bc50f9942189d51f6516d5849185c75b4c908ff65bb7d9ce20c93e0c19989569976f6e29b24027be244f9a9178a97e01d9916ce735ac5d94897fa8ebe0c8786111dac08a13262eda627003e54a85ef9e37abf3f6f6282b3b6ed8e2dcdec5988d521837b0a0f8085a1247ee324b20bb40e0068cdb1753ab9c7160687f30981ac1284fe2398fc4bb48c38d2a98901b513589d724a3be5418c837a78158104a2793539f28420012b587bad725b4f7f247f2ee6424dfa034828831cb2280ef4"], 0x3c}}, 0x0) [ 2098.248541][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x3b9aca00) 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5425, &(0x7f0000000080)={0x0, 0x0}) 03:26:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r6}, {r7}], 0x5, 0x101) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5427, &(0x7f0000000080)={0x0, 0x0}) [ 2098.386238][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5428, &(0x7f0000000080)={0x0, 0x0}) 03:26:16 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000140)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x6, 0x8002, 0x3f, 0x1000, r4}, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5429, &(0x7f0000000080)={0x0, 0x0}) [ 2098.688467][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5437, &(0x7f0000000080)={0x0, 0x0}) 03:26:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) fdatasync(r0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x7fffffff, 0x32314752, 0x7, 0x49, 0x2, @stepwise={{0x100, 0x208c}, {0x1, 0x3}, {0x101, 0x400}}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008100)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000008200)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000008980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000008940)={&(0x7f0000008240)={0x6c8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8, 0x7, 0x87}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x4, 0x2, 0x80, 0x5}, {0xfff, 0x1f, 0x5, 0x10001}, {0xdc6, 0x4, 0xff, 0x1ff}, {0x9, 0x9, 0x0, 0x20000000}, {0x31ee, 0x7f, 0x8, 0x6}, {0x2, 0x80, 0x81, 0x9}, {0x6, 0x7b, 0x1f, 0x73e3}, {0x2541, 0x80, 0x4c, 0xb74}, {0x1, 0x3, 0x3, 0xfffffffc}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9da}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x10}, 0x40) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x10) 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5441, &(0x7f0000000080)={0x0, 0x0}) 03:26:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfefdffff) 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5450, &(0x7f0000000080)={0x0, 0x0}) 03:26:17 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000580)=""/102387) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x3}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000003c0)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={r4, 0x0, 0xffffffffffffffff, 0x3f, 0x80000}) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'vxcan1\x00', {0x5e}, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000340)={0x0, 'batadv_slave_1\x00', {0x210000}, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r4, 0x0, r5, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r4, 0x0, r3, 0x401}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r4, 0x81, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r4, 0xfffffffffffffffc, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r4, 0xfb7, 0xe2}) 03:26:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20c000, 0x0) ioctl$CHAR_RAW_FLSBUF(r1, 0x1261, &(0x7f0000000040)=0x7) 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5451, &(0x7f0000000080)={0x0, 0x0}) [ 2099.201506][ T5027] Bluetooth: hci0: command 0x0401 tx timeout 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0}) 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x545d, &(0x7f0000000080)={0x0, 0x0}) [ 2099.336856][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2099.357049][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.414808][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2099.432628][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5460, &(0x7f0000000080)={0x0, 0x0}) [ 2099.464936][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2099.503902][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5501, &(0x7f0000000080)={0x0, 0x0}) [ 2099.530194][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2099.552047][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.585439][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2099.607530][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5509, &(0x7f0000000080)={0x0, 0x0}) [ 2099.626391][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2099.650270][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffdfe) 03:26:17 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000480)={0x458, 0x100, 0x800, 0x2, [], [], [], 0x80000000, 0x1, 0x9, 0x80000001, "43663c86bec613e5822a762708bf3be5"}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="d5310ce812a0bfa434be93c0300511df789c56c78b4bdc9c04d498246a64ffbfb7aa459bae2dffbea46ac978a5d338fde0a583098d8c890108313b2834ca54c6391f18676c598daaa7b9086c03e51e50f4256535b72f53e775"], 0x3c}}, 0x0) 03:26:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5600, &(0x7f0000000080)={0x0, 0x0}) 03:26:17 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r0, 0x0, 0x4240a2a0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x6a, r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, "46bc0d9a173fd056"}) 03:26:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x6, 0x1}) getgid() socket$vsock_stream(0x28, 0x1, 0x0) 03:26:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5601, &(0x7f0000000080)={0x0, 0x0}) 03:26:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5602, &(0x7f0000000080)={0x0, 0x0}) 03:26:18 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x40, 0x4, 0x1f, 0x0, 0x11, "463c0d9a173fd056"}) 03:26:18 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0xa, 0x800, 0x8) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xb9, 0x414a02) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0}) 03:26:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x400, 0x0, "463c0dda173fd056"}) 03:26:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0xffff, 0x20, 0x9}, {0x2, 0x0, 0xe, 0xffffffe1}, {0x800, 0x0, 0x8, 0x7}, {0x664e, 0x80, 0x4, 0x52}, {0x5, 0xc, 0x6, 0x3}, {0x5, 0x1f, 0x8, 0x4}, {0x2, 0x0, 0xb5, 0x9}, {0x800, 0x7, 0x5, 0x5}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = dup2(r3, r0) read$dsp(r5, &(0x7f0000000200)=""/106, 0x6a) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="6ad7521c1cc41b665558fc977576dabe2e0e6ae86ba36f2d582e339f29bfff48dad1556711dc7fd6b8477f073fca98531a1511acf333aefebcbf5ed7723bff61ea9131fd9fe68c40663178100f280240da1994e09eba74be9288a65be3b04975f2fdfcbee0", 0x65}, {&(0x7f0000000080)="1c6d90a593e3a4540f243355cf5ea7682e920c55cd7590ec72bbfcf310ed0d02ac1942d9840f362e4b50b1e38379293f660994fa64bf5efbd97a0e362ccda3e354535f802baabeb6224963adfc2a15ab9e6cf490c58a1385b9e199", 0x5b}], 0x2) 03:26:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5605, &(0x7f0000000080)={0x0, 0x0}) 03:26:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) ioctl$FIONCLEX(r0, 0x5450) 03:26:18 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) flock(0xffffffffffffffff, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}, {r3}, {r4}, {r5}, {r6}], 0x5, 0x101) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000240)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x4, 0x803, 0x7) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000000000004f", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}}, 0x0) [ 2100.845808][T14593] __nla_validate_parse: 9 callbacks suppressed [ 2100.845817][T14593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6e000000d5600000f0bff7886bee858643e9c1f6bea1b9fff84d6f10b87870157c72dfc8f7a9b33397e668a3f3f0bbaabc6bb1284c566fd7b60ca68e067c52bec4c04fe98015acb3e71f9958615650479c4e15ee037859717b462aa853296a788752c55d318652fe0cbecee6dd2bdb190a98524d783cd5f2f5f91547b635d1d18b654ad3aff88048150d6f4a6e9f53ed2c60bf347b73292c9c7f043c2f6ac6d1db309e1059f7497bf022bda5698f72aae7a4f3170b1de30c267eb92e63f644756f5425fa5dce8741dad4f197abc833d9bca5"], &(0x7f00000000c0), 0x400) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5606, &(0x7f0000000080)={0x0, 0x0}) 03:26:19 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0xfe, "463c0d9a173fd056"}) 03:26:19 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) r1 = socket$inet6(0xa, 0x2, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x40, 0x0, 0x9, 0xa, @remote, @mcast2, 0x80, 0x0, 0x2, 0x6}}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r3, 0x2, {0x0, 0xff, 0x3}, 0xff}, 0x18, &(0x7f00000004c0)={&(0x7f0000000400)="572058fb06e78fe3fa3f7dd0722834dff0fc9c204cb1f6e833b7794a95f0960bfa20471395fc6e9afaeba371872aace691f88139c8c89af1ff871ac469c355c101c68f3d78d5112b1dfb9a8b36fcb2376403fff63b06f89a24221b88fef93ba2638ce897f8631c188bb9cb9b22f25dd325306004c0da931ef64cef9d07baf4581485027e9f986eea937cbbacf1f2eeea5d549be663bb9959776e", 0x9a}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}, {r4}, {r5}, {r6}, {r7}], 0x5, 0x101) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000280)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r1, 0xff2c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x59d, @ipv4={[], [], @broadcast}, 0x8}, 0x1c) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000140)={r9, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9, 0x800, 0x53, 0x8, 0x3, 0x7fff, 0x6, 0xff, 0xffffffff80000001, 0x1000, 0xe5e, 0x4, 0xc00, 0x8, 0x3]}, &(0x7f0000000240)=0x100) 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5607, &(0x7f0000000080)={0x0, 0x0}) [ 2101.018438][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5608, &(0x7f0000000080)={0x0, 0x0}) 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x5609, &(0x7f0000000080)={0x0, 0x0}) 03:26:19 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f00000003c0)={0x0, &(0x7f0000000340)=[&(0x7f0000000300)="6f48bb8bdd61ce6a411f0374305acf7ee10691f0d07fa7ce0e73309c96837adbb55d248f9776b877280fdcaf20482c20a9b1"]}) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/input/mice\x00', 0x200000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x1404, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x44884) accept4$netrom(r6, &(0x7f0000000400)={{}, [@default, @default, @null, @remote, @remote, @rose, @netrom, @rose]}, &(0x7f0000000480)=0x48, 0xf7573fa565535093) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x400001, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0}) [ 2101.229961][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x560b, &(0x7f0000000080)={0x0, 0x0}) [ 2101.281234][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:26:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) [ 2101.323708][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x560c, &(0x7f0000000080)={0x0, 0x0}) 03:26:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:19 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r2, 0xfffffffd, 0x40000, r4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7e80783c}) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) 03:26:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSCTTY(r0, 0x540e, 0x1ff) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:19 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000240)={0xffffff80, 0x6, 0xffffffffffffff00}) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfee7, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x560d, &(0x7f0000000080)={0x0, 0x0}) 03:26:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x560e, &(0x7f0000000080)={0x0, 0x0}) [ 2101.868701][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:20 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x980, 0x0) r1 = gettid() tkill(r1, 0x33) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x800) write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x9, 0x40400) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000380)={r5, 0x2, 0xff00}, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r6}], 0x1, 0x0) [ 2101.997297][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x1004c0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001440)={r4, 0xe3}, &(0x7f0000001480)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) fcntl$setlease(r5, 0x400, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:20 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x9, 0x4]}, &(0x7f0000000280)=0x8) pipe(&(0x7f0000000100)) r2 = socket(0x10, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fspick(r3, &(0x7f0000000340)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) 03:26:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0x4, 0x1, 0x7fffffff, r5, 0x0, &(0x7f0000000040)={0x9e0901, 0x81, [], @p_u16=&(0x7f0000000000)=0xfffb}}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0xc4) [ 2102.292002][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2102.445942][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)={0x52, "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"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640)={0x635}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r4, 0x0, 0x4240a2a0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x77, 0x20, 0x66, 0x5, 0x31, @local, @rand_addr=' \x01\x00', 0x7821, 0x6, 0x1, 0xa3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x2f, 0xff, 0x5, 0x5, 0x2, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x17}, 0x7800, 0x0, 0x9, 0xf628}}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20c20458}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x58, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x388, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) r8 = dup2(r0, r0) renameat(r2, &(0x7f0000000000)='./file0\x00', r8, &(0x7f0000000040)='./file0\x00') 03:26:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x8001) 03:26:20 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000030000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 2102.738835][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x560f, &(0x7f0000000080)={0x0, 0x0}) 03:26:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x6364, &(0x7f0000000080)={0x0, 0x0}) [ 2102.874454][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000001, 0xf) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="159300400300000000006b0000000800178104"], 0x3}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="06001000e831000073a5c8e293bb6e5d4f1af7e42feb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) 03:26:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x8933, &(0x7f0000000080)={0x0, 0x0}) 03:26:21 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 03:26:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x89f8, &(0x7f0000000080)={0x0, 0x0}) 03:26:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x200000, 0x55) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000240)={0x40000, 0x8, 0x5, 0x9, 0x1000, 0x1dd}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x0, 0xe, 0x5e, 0x6, 0x3, 0x200}) ioctl$FIOCLEX(r0, 0x5451) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x800) setsockopt$inet_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000040)="d59538c8942229e01f608142767fdeca5871131f82a444b780df071ab78fe15b4eccc3dbb4b36f6ef52e9d744dda6f65e9176fcbfb33dbdc2c9a0b68021b11e88022006da7b2fb906ae8cf26c5533b5cec2923c2c992d78bb54716880d84fe8312f8228cd92b72c7a13811017a9e11716e3cf28c9fd3d356fd4e7074c9fd59d9a78074ad7d99a746042184f9f3787f134cdf175a3c668eb9d1be89a6b729fafc3b30c92022d8296fb0094d77299fd8a2da27e27a4191724fd359e664", 0xbc) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000340)={[0x41, 0x2, 0x5, 0x2d5, 0x0, 0x400, 0x8000, 0x5, 0x8, 0x9, 0x7f, 0x5, 0xffffffff, 0xfffffffa, 0x2, 0x9, 0x1, 0x7f, 0x606c, 0x5, 0x4, 0x0, 0x0, 0x7ff, 0x6, 0x0, 0x200, 0x3d, 0x9, 0x5, 0x2547, 0x5, 0x3, 0x2, 0xf5e9, 0x101, 0x0, 0x3f, 0xa69, 0x24, 0x5, 0x3, 0x9, 0x7fff, 0x8001, 0x3, 0x2, 0x2, 0x5, 0x8, 0x9f, 0x5, 0x2, 0x4, 0x6, 0x3, 0x80000001, 0x6, 0x1, 0x4, 0x100, 0x8, 0x7ff, 0x92, 0x2, 0xffffff27, 0x7fffffff, 0xffffffff, 0x5, 0x3, 0x9, 0x5, 0x1, 0x0, 0xde9, 0x3ff, 0x1, 0x200000, 0x7, 0x7ff, 0xaee, 0x49ce4ca3, 0x4, 0x7, 0x7, 0x7, 0x9, 0x7f, 0xfff, 0x6, 0x1, 0x3, 0xffff8001, 0x4, 0x5, 0x97, 0x3, 0x3ff80, 0x10000, 0x7fff, 0x7, 0x0, 0x8, 0x3, 0x4, 0x3, 0x8, 0x80, 0x5, 0xfffffffa, 0x3, 0x6, 0x7457, 0xe2, 0x80000001, 0x7, 0x5, 0x20, 0x10001, 0x1, 0x6, 0x0, 0x6, 0x6, 0x34, 0x200, 0x9, 0x7, 0x5, 0x3, 0x8000, 0x0, 0x1, 0x3, 0x1ff, 0x0, 0x7, 0x9, 0x2d, 0x8, 0x5, 0x0, 0x3ff, 0x9e, 0x9, 0x4, 0x81, 0xbcc, 0x2, 0x80000000, 0xffffff8d, 0x800, 0x6, 0xffffffff, 0x6, 0x80, 0x200, 0x4, 0x1, 0x1, 0x10000, 0x80000001, 0x400, 0xb02d, 0x401, 0x400000ff, 0x6, 0xfffff6c7, 0x0, 0x100, 0x101, 0x9, 0x1, 0x47e8, 0x1000, 0x4, 0x2, 0x1ff, 0xfd6, 0x5, 0xe0000000, 0x7, 0x1f, 0x70000000, 0x6, 0x10000, 0x2, 0x0, 0x5f2e, 0x1, 0xffffffff, 0x9, 0x8d, 0x76, 0xffff, 0x2, 0x80000, 0x6, 0x20, 0x10000, 0x0, 0xfffffffb, 0x6, 0x1, 0x1200000, 0x9af, 0x9, 0x5, 0x4, 0x40, 0x1ff, 0x80, 0x1, 0x4, 0x1, 0x8, 0x1, 0xa745, 0x9eb, 0x400, 0x96, 0xdcf, 0xcf3b, 0x1, 0x4, 0x7, 0x5, 0x4, 0xfffffffe, 0xf93, 0x0, 0x0, 0x101, 0x74, 0x6, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0x6, 0x4, 0x8001, 0x8001, 0x828, 0x10000, 0x2, 0x8, 0x8001, 0x2, 0x0, 0x3ff, 0xffff, 0x2, 0x5869, 0x10, 0x0, 0xfffffff9, 0x5, 0x1ff, 0x3, 0x4, 0x8, 0x4, 0x7, 0x9bdd, 0x73, 0xb9, 0xfffffffe, 0x2, 0x4, 0x101, 0x4, 0x6, 0x10001, 0x0, 0x5, 0x787c0000, 0x3, 0x8, 0x539f, 0x401, 0xfffffffc, 0x3, 0x101, 0x1, 0x4, 0x0, 0x2, 0x25b2dc0e, 0x2, 0x8, 0x8, 0x10000, 0x7fff, 0x4, 0x100, 0x9c, 0x452b, 0x3f, 0x8, 0x80, 0x200, 0x7fff, 0x0, 0x500000, 0x101, 0x1, 0x1f, 0x255, 0x80000000, 0x0, 0x1, 0x4, 0xfe000000, 0x8, 0x87, 0x7, 0x7, 0x400, 0x9611, 0x2, 0x17e, 0x8, 0xffffff42, 0x7, 0x800, 0x101, 0x1000, 0xff, 0x0, 0x3, 0x5, 0x0, 0x1, 0x1, 0xd17, 0x7, 0x1, 0x80000001, 0x80000000, 0x4, 0x9a5, 0x0, 0x3, 0x4, 0x4631, 0x7, 0x7, 0x1, 0xf51c, 0x9, 0x8, 0x4, 0xfffffffa, 0x5, 0x7, 0xff, 0x101, 0x1, 0x7, 0x6, 0x7ff, 0x1f, 0x1f, 0x4a6, 0x7ff, 0x7fff, 0x2, 0x851, 0x3, 0x101, 0x1, 0x7, 0x6, 0x0, 0x7, 0x98f78aa, 0x7, 0x2, 0x4, 0x2, 0x401, 0x91, 0x1f, 0x1ab, 0x4, 0xe5, 0x2, 0x5, 0x4, 0x80000000, 0x7, 0xfff, 0x200, 0x34, 0x5, 0x5, 0x4, 0x0, 0x40, 0x1ff, 0x0, 0x1, 0x6, 0x4, 0x7f, 0x7, 0x100, 0x3ff, 0xca, 0x1, 0x5, 0x21, 0x2, 0x1, 0x191, 0x9b98, 0xfffffe00, 0x10000, 0x3, 0x2, 0x90, 0x1, 0x8, 0x0, 0x2, 0x3, 0x84200000, 0x0, 0x80000000, 0x100, 0x7fffffff, 0x800, 0xf200, 0x2, 0x0, 0x1000, 0x0, 0x0, 0xffff, 0x4, 0x1858, 0x1, 0x6, 0x5, 0xee, 0x5, 0x4, 0x4, 0x7, 0x4, 0x1000, 0xf30, 0x61, 0x8, 0x4, 0x7f, 0x5, 0x1000, 0x9, 0x6, 0x837e, 0xaa, 0xfa3, 0x3, 0x722, 0x2, 0x6, 0x3, 0x2, 0xfffffff9, 0xf5e, 0x1, 0x1, 0x1, 0xbffc, 0x6, 0xb3a, 0xffffffff, 0x8, 0xfffff801, 0x1, 0x74, 0x140000, 0x9, 0xff, 0x0, 0x0, 0x2, 0x9, 0x100, 0x6, 0x10001, 0x20, 0x8000, 0x7, 0x4, 0x0, 0x3, 0x5, 0x80000000, 0x1, 0x8, 0x9, 0x53b, 0x6, 0x6, 0x800, 0x8, 0xa4c, 0x4, 0x2, 0x7, 0x3, 0x1ff, 0x2, 0x428, 0x92, 0x8, 0x1f, 0x8, 0x1, 0x80, 0x80000001, 0x5, 0xf8, 0x2, 0x1e9, 0xfffffeff, 0x5, 0x1, 0xffff77f0, 0x5, 0x6, 0x3, 0x1, 0x8, 0x3, 0x100, 0x8, 0x7, 0x80000000, 0x2b, 0x6, 0x7ed1, 0xff, 0xd908, 0xa000000, 0x81, 0x0, 0x9, 0x6, 0x7265, 0x5e, 0x5b595941, 0xffffffae, 0x1, 0x80000000, 0x800, 0xfff, 0x0, 0x10001, 0x0, 0xa902, 0xbc, 0x401, 0x4, 0x2a, 0x8, 0x73, 0x7, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x4, 0x2, 0x20, 0x3, 0x3f, 0x4, 0x2, 0x17a00, 0x0, 0x398aa082, 0x5, 0xffffff7f, 0x8000, 0x6, 0x4, 0x1, 0x0, 0x0, 0x5, 0x9, 0x8, 0x0, 0x9, 0x100, 0x0, 0x4f2, 0x40, 0x9, 0xc842, 0x400, 0x1, 0x0, 0x2, 0x0, 0x0, 0xa000000, 0x6, 0x7ff, 0x5, 0x3ff, 0x4, 0x6, 0x7, 0x8, 0x2, 0x1, 0x9e8, 0x400, 0x3f, 0x8, 0x2, 0x6, 0x9, 0xf6, 0x0, 0x0, 0x40, 0xffffe000, 0x1, 0x1f, 0xe2e, 0x8, 0x3f, 0x6b535073, 0x7fffffff, 0x57, 0x9, 0x7076, 0xffffffff, 0x7, 0x9, 0x8, 0x80, 0x3, 0x6, 0x6, 0x1, 0x7, 0x7, 0x2, 0xffff, 0x5, 0x17, 0x7bc, 0x7, 0x3, 0x9, 0x6, 0xffff0000, 0xc6b6, 0x1, 0x100, 0xfffeffff, 0x80000001, 0x4, 0x8d, 0x9, 0x1, 0x6, 0x2, 0xb7, 0x4, 0x80000001, 0x8000, 0x0, 0x3ff, 0xffffffff, 0x4, 0x7fffffff, 0x3f, 0x800, 0x2415bb4b, 0x1f, 0x7, 0x2c42, 0x9, 0x5, 0x5, 0x5, 0x6, 0xb8, 0x1ff, 0x400000, 0x20, 0x8001, 0x1, 0x6, 0x7fff, 0x2, 0x0, 0x5, 0x8001, 0x4, 0x3acc0000, 0x3, 0x0, 0x59d, 0x20, 0x2, 0x2e6, 0x5, 0x48000000, 0xffffffb2, 0x9, 0x2, 0x4, 0x71da, 0x3, 0x6, 0x5, 0x8, 0x4, 0x3d39, 0x0, 0x80000000, 0x1f, 0x24b, 0x6, 0x1, 0x800, 0x7, 0x3, 0x8, 0x2, 0xffffffff, 0x3, 0x9, 0x2, 0x8, 0x833, 0x0, 0x3, 0x20, 0x71, 0xfff, 0x5c81, 0x6, 0x1, 0xfff, 0x4, 0x0, 0xe2, 0x101, 0x200, 0x5, 0x200, 0x5bf, 0xff, 0x7, 0x0, 0x0, 0x7, 0x3, 0x6614011b, 0xd0, 0x9, 0x81, 0x100, 0x5619, 0x400, 0x7fffffff, 0x3, 0xdbd, 0x380000, 0x80, 0x9, 0xe29, 0x0, 0x6, 0x4, 0x3, 0x7ff, 0xff, 0x3, 0x3, 0x9, 0x5e17, 0x74, 0x40, 0x80000000, 0x4, 0x9, 0x4, 0x9, 0x0, 0xbe6, 0x9, 0x12000000, 0x40, 0x4, 0x80, 0x100, 0xf2, 0x7, 0x0, 0x6, 0x2, 0x3b, 0x0, 0x8001, 0x66, 0x9, 0x4, 0x7, 0x20, 0x10001, 0x4, 0xffff34fc, 0xa7, 0x8, 0xffffffff, 0x10000, 0x2, 0x3, 0x0, 0xc0, 0x80000000, 0x9, 0x17, 0x4, 0x9, 0x800, 0x3, 0xd7, 0x7, 0x4, 0x200, 0x8, 0x5c7620cb, 0x53, 0x1, 0x400, 0xfffffff9, 0x0, 0x6234, 0x22, 0xfff, 0x1, 0x2, 0x9, 0x0, 0x10001, 0x0, 0xfffffffa, 0x3f19, 0x2, 0x1, 0x10001, 0x2, 0x3c, 0x9, 0x7, 0x6, 0x6, 0x2, 0x1, 0xa5, 0xb35, 0xfff, 0x7b2, 0x6, 0x8000, 0x0, 0x9, 0x400, 0x1, 0x10000, 0x100, 0x1000, 0x5, 0x6, 0xcbe, 0x0, 0x5, 0x68, 0x101, 0xbf, 0x9, 0x9, 0xfa, 0x82, 0x3, 0x9, 0xdbe3, 0x20, 0xfffffff9, 0x0, 0x7ff, 0xfbcf, 0x3, 0x0, 0x4, 0x80, 0x7fffffff, 0x7, 0xc12, 0x125, 0x6f, 0x8, 0x3, 0x1, 0x5, 0x0, 0x9, 0x57b, 0x7, 0x9, 0xd21, 0x9, 0x7, 0x5, 0x1, 0x100, 0x37603c05, 0x6, 0x1, 0x7a4, 0x7fffffff, 0x59f, 0x6f1d, 0x7, 0x35b0, 0x7, 0xc12, 0x6, 0x5, 0x8, 0x3, 0x9, 0x8, 0x8001, 0xffffedfd, 0x1000, 0x20, 0x8, 0x4, 0x800, 0xe3a, 0xe7f, 0x141, 0x8001, 0x7, 0x2, 0x2, 0x3, 0x7fffffff, 0x400, 0x4, 0x101, 0x8, 0x4d7, 0x1, 0xfffffff7, 0x4, 0x6, 0xf6, 0x1000, 0x6, 0x0, 0x4, 0x3, 0x4, 0x90d, 0x0, 0x33bf, 0x2, 0x80000000, 0xab, 0x1aba, 0x200, 0x400, 0x2, 0x10000, 0xcad4, 0x9, 0x200, 0x5, 0x1, 0x7f, 0x10000, 0x3, 0x1, 0x10001, 0xfffffffc, 0x2, 0xbc42, 0x4, 0x401, 0x2, 0x32f, 0xfff, 0x2, 0x1ff, 0x7, 0x7, 0x6, 0x5, 0xf38, 0x8, 0x5, 0x3, 0x9e1a, 0x5, 0x100005, 0x2, 0x9, 0x401]}) 03:26:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x0}) [ 2103.351866][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:26:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x400448dd, &(0x7f0000000080)={0x0, 0x0}) 03:26:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000040)={0x80000000, 0x0, 0x1, 0x80}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)=')\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) 03:26:21 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$CHAR_RAW_IOOPT(r5, 0x1279, &(0x7f0000000240)) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x0}) 03:26:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[0x200, 0x4, 0x80, 0x9589, 0x9, 0x461e]}) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r3}, {r4}, {r5}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000080)) 03:26:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c90000000000000000000"], 0x54}}, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8200}, {r1, 0x6000}], 0x2, 0x0) 03:26:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4004550a, &(0x7f0000000080)={0x0, 0x0}) 03:26:22 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) 03:26:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0}) 03:26:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x40085503, &(0x7f0000000080)={0x0, 0x0}) 03:26:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:22 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) ptrace$setopts(0x4200, r3, 0xbbaa, 0x60) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$int_out(r0, 0x4, &(0x7f0000000240)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2d00000010800500", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r8, 0x80084121, &(0x7f0000000280)) 03:26:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = gettid() tkill(r1, 0x33) r2 = gettid() tkill(r2, 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) kcmp(r1, r2, 0x4, r3, r5) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x1, 0x0, 0x80, 0x33363248, [0x0, 0x4], [0x10001, 0x3f], 0x2}}) 03:26:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x40186366, &(0x7f0000000080)={0x0, 0x0}) 03:26:22 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280402, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', r0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) setfsgid(r8) setregid(0xffffffffffffffff, r8) setfsgid(r2) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r9, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0}) 03:26:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r2 = geteuid() fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02008000010057d53530a5a4a79827a1dfd20903000000b570000000000002000000000000", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRESHEX], 0x7, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x400, 0x9, &(0x7f0000001580)=[{&(0x7f0000000100)="757a32a6457c9bd494d1fee8283712b5a739993c6d2253bbb971a61bb21adc473786d9c07448c758208dd4a5d51cf3b8895598cfca197c38bc3cf7ec906d83d8ebe5c7ce02c105d88204e4984ce892d9da6acd97a7829b071716c39331d6615b5819ac1fccd73050768f440eff89f5dec2a32e69c70b2c0a9db99a57f081fe22d42fd7c18eb87d79388b049a13466f911391b102807612ec224ed8b7005c444199040813756d93a69149da3d4cdb3f9f4b6789154337bdfe3280488eaf9736426261b0829e196499e60c50b706c70b010a90ef985962d8b6ac0635f438efc04f9708d45133793068f811b66f5d3a2f4f6306945e74f96454553451eb7c95d98454080a82e7f4640dbe37b9acddc1c820c9f21f816ed5e4f4c023a13e876eece3bc25beebcddf5b4e1470c3f791cfb00a5e27eea84d266a96b35f015c08e7771552ef4f0eefca1f2aff99e5d75b628101ee07dbcabe8afbbcf178b03c119feb8802f8a2714a3f5f66714620cbc3c440eb81d1375bfedc1566676b008e41d664685e2382ee157b6a8a730e623e42db7d8117d16726b2cfd2582df7e377b957b8857f364e856e04ebe41cff9dafda3590d15a7a58deeca4a9d99bfa8fc1d5f240abc0b8882fd79f062f4579d6f0bb9bcea047c11db8d74919902a3b4130bae1125546f9fe089eb683029d9afa078eedcd91dd14eea5e86883ea7a35ede1ea375ef667721f84d293000d2dd43788ae896c7e83f0a160bed858463b2722c16fb892751991e3ae0cd898622c6d80f19dcfc27b49aafb5da9e68f00e84b3ebf3b72656740855fda1924583ac651319460b12abb6a83c783ef235539ac8a05e153214ef77c20ad2147595e908def61d874245493c19b3410939efb19d81861d3e5a00b78725a92aba4c63536f43c10d5aa348fedbdf6f24d0792b426c76afbf2abc6b46967dfa069e8b7a8555d128f2f5f4c3092f04dcef607090c03fbe092ce863b90e9eb079924b51cf52068e0088f4bcbd0034fef214f3a04a9a4e9dfd0c672b9bea2d01f82ac7154c2511b2fd555762a7226e7f7fb7e7eb0a3a6507551fa64d22f6695e52864137c0e1434547239bd2ad6a95ef18763bc8f91338d7662e71fe5cccfdf34733f7a22713f528cdf29897bb99c0608293d11e48f44686261b9e05e1e59831dfb2ed7da4f88129fba9cf96bc1c96dd5e3d3d37e79ad6f173cae2a39357ec47505ae77533113716637e3a21c4218e99ca21cf62b4e1eb32e2de846600711b97f8701efefec0f8a9b10f3a296aa6a9f6003dfd10f5ce895f59818bd2249e1dd0c05e11826bdb3c0ac4256542dc8a27042a95ff4e37399cd0d4fa1cf4bd4328a93bf193667707d491bab5693c72711ba22629801cb835c8c686e4a66af332f26d1dd37cba58f1cb34b1d12a2ef3ad6743845347b43adf048fea68fac2eb0f25d357c6a836a95bfa6ee252b30f4a38ae1eec41408bc55a90fc416482bfed59762e6205f02c3bfd6ac63671d82ee851390fded4a8893b29c7a94bc9a0a9bd0ff950411c7f494e72cdf636aefa7aeeffc6e71c3e4965ac5c9bdff80a5d35861293b8d5ab667d48ba782a7a0eb3896b7b86f65d5c487d0996c3b9427a69b35915ba9cd4aaef58f8e7b8b3420cbb709dc51bbb4dc31e77fefd55ac95b4b6608feeaf0fe3a1c032a492239c78af9cae8deb465a490f4046d60693ec68e9577a32444c31e64f0b8527401892fe6c3c524df95cebea352b731814995abee91f69f3f996c4cce065e360278989c3e187ef59df126181fe5c97fcc5687ae3dc9d95659a2b515a22dec23990b03d82e06dbddc1a0402b2c84738f6d90a038bdac67c1de8f917a127a31feddbe8918536113fb01248683355b64ac68a9b67d2ad9d74091563213aa5e9f4be4cecb4fe932c47dc1b7f791839078973b38a1305dcec2d61485e296d6d661a56ffa1e30383ecfaa02bf1ac3f01646f807181de48ec0d0046597ede2a54fe6f90fecf81abdb02155d19864d30a5b9384d4f7deecee0029d6625f6fb7e2b30c37070174156555b727d16cbfd3d20e9a7cd7b93a7675b533ff67a22a6a5308473681d2d075a931b1babb0de1653a5b1c0770272fb7172d24cd35981556c09342a4400be5a69e9128a10adffa6f2ca015ba1f976d31b5fc3bc8d77afe2bfa370b86328c03c90492f6a1f9cae45e74961160bc67195279fd52b0104b34ff4562ebe40cb6ac4c8f51738fd399b1f3121446b55a6927f863b911462a28f664ba0000f3c91bf4d38fccc81216068e784725a24d3c2ccd72df966175701eed73fb06fa0d57e127c75c8ec36660f673a7abdf92b64f7fbe3479643ca54264a53a22f2da06cfb37c840210af5618f695da2d2ee399958a81b4b4c84cf255679c769bfef07bb0b35a49dc95ae19d3d1d1329c790dd100c500f4bb39ad18510cf91a8a39e226235a60db61ad4bebb8d607ff2edad8e1a2bc66f81c4566431565db2b142feaab82fc5c4f82cf36001ef14cf187a81231799bd540f10499268cfade358c2fca5fdc585ff82b7fe4197d3c1f8e1fffa46cf07053915f7c361be5bce8484f2ce885614696ff163e223146de0ad752fc946c2da2619bdd86f0b32940e67ffa714a482df3066610e1afaf38504015498480cc4951ca319d692222b4cb1b30a634483b584004fc79ba732216b04a19f86f95679ef71ae474c44fa2f5f2708621dcdd7075d99712968c603dc9c8e8db96869f42af8530a75dd95140ac4a093f38cd79c76761d96ae779460da94cf91f0613952cb352e4b8189f6cc39eb568a709fd1e7dcb1ff639338be4afd76bcfe930d032e93f403eee9b31b1b182a5b9ad4f15d4e8cd9bd624a93d9a38db7a38e587a7b4bfa261e94a50aca5985f8ea92fa593df1a32edb13a96a92c6b934bceb04327aba11817cfd4ae5e7f4bbba7a773976735263ec1e6fdc21137f129c62223a36c3359ad91fdae2c3a0b57ca5b34ca6a94a1d4781348002c0627fa9223b0121f102b6ae09b25bb624caa8629367c3b4d550bb3594c1acfc4930a1bec992a8fc6b79505a271937dfacb6b836e4aaf907ce354a21e4a43a935e853233ba7e5839a689238d99dd1facca7d38b66bf2da3dc9679695ea359c07326ec68463ac35165da1ab6f435d4b90149eeb62c97c0f4260021ed0ddb1a4047db05cdb9125d13879cb46efc8a546f9e6f3026147da6f2dc0bd6019dbbc540ff4a88c9a71880e6db32ae6a724f508aecf530ef9f78f0d3e478226473fdaac5e0ffc5796a31c046a8b365e0df33e26d7443c17d788d6558e9264dcefb79f23081fa493721c3a7d64e7049d8e2a5b9024228554c5704f237538e17b6550ae1807d623b2a48174dbc727dc51a704d543a05c62db3f570593c41e97008c33f93503b466527c349c49c3bf2c1fc24acde794cfaaeefd8d4e27abcae3df64c3871a9bc1cfcb1627822018d1050824580e52130269b7c632226e0f4e5b0bf2bdf03e2dc7b560bdca7d576275c63c3ba29d5f6299548a034626a6985ae1673f6f8314d73746c046677b1b864bc68bfe428bf8e05977efbbf2a997ff0640c2a47939ceafcfeadfaeffc593c797c4e8587ce62231a518b3414b058b9b355fa16cb4cba38033303d93b9898f6e77aa4d6b657b6c2654cc2642ed2d9ca44c73031ffd66c15f858f399e9487696281b108c0f3a678e6233abccdddb70f7eb22581774b9c96240dd6131c78fea7ade074eba183f55312c23fb9bb8f246f3505297f8082288eae33231c0ffc3219d64ed8b881f921341aeba9220cf6abc5c03711800bd0aa9a08b83ecd7b6fbf785e7f008ea8849e69ee4c873c60c97438d952ee5c9958e80122757202ea0133446f1204f915a509a662e8702804158e222cb330fbc10d4f9998934b1343a5ef131201ab4b8e589762b18def8da4e15072d9cb85e860a28d2f57658babaa2a5ad33e7829ce5c7188e6991cf8a13b91c9f35d3f2e5ad29e08fd64907b9d16ed801bd94ce0bee4c9f05bb81f2e93071fb8dbef70867b2b1d198fd9e6a197c778ce56066f8352cbc53450b85297f0717903a53a2ff1dae48d57b67d8eafc53e55dc14c299a8ccb66c443b65870cd00a9b763cef3016bc1b7c2053530f29c66cc7938efa6b632772beb8ffc2da5b0aa4d651c0bc3b2bc870212c3953bf8f1b4e476400acc4c49faa5760decc9e0d043dca9324a14fea65df469c963001ff2bcdd5a54b50a5a495517e9c986d8540b169ef950762f612813d0eea1d5ad93afc5ca06f51d148d2f3469ee4e459438248a091cd9addf5d1100f05632334715905a537016943eec3aa406f049021b12d41edcc885a2199841c8c4cbfb6be4e8db67ba8f92c69236b69fd6fed6b96c92a8ed34d941876baa4102e77ded7930edf64fa822b4f17a5fc84cda715f9d941c65d8a7100bd6c472237dc0593d410a32236e0370cdb3d0f084a47dabf896b8641f11043d1775a224b1571820fc47e95b4a099941ae4a4898d822186e846a81f356cb38a5437cb6d7e7314d98008854213e99f2c4fc4426d43fccc26aa025c8e7c4cf8f556d2c2d2563bdb36fd94ec92a1197d3c624105162b9be9d499af687fcbaabae244da408a15351789fd3adb80a140bd9c097b564bbea48a5e430508f3fb47e308663f98e2d8dec3e138fd9c98010da8500a2c09de8489949d7f416fbbadc9cf196fdacc323b6cf338703705a3c407531110e76c269299c195f3129f2e7681dc09db15ef9a2f3c674cf9860ed1dc7e24c250a62a21f62268b5ea8055828c84565b04f50a9d9e6d374ad66d6f54ed6087d5543f2586157ea964fc2cf119446dd8ba2a5a0a6b59ead840c81429d71368ee906fbab43ae12fdf71edb7d39d38cbc0526ffa552b04b8af3b06b23d59a70cd571e06aa75ec04a38593a385b1d428562a2d189f44448287a13dd17910c53aa92d50a197c6b9f0ca82f72631bf962bba4f36951812bd237181a27fcbe823628624e613f45a3a197f3c079c015268b56270f6cb5b672042ec5a68796b4881f398f471912f45d82733634c0059b999c4ed84b74bb6bf44463d02133bf536ee77b9f7454c08070c79cdb9fc0ddcc56552df6e82883ed8ea7cfa8aba35debda2ad3324b5bbc6eb29d65db4c2152c9911a7d0fe25d3eac0b31f537cbe91f01be8831bb67c458d3ce47eecc3bdaf82e8ca6cb3d103f75c8b9a2a1cb691bba6b8edfb006c1d6938d75c5574ac5bc6edd5455f6a672a8d665584b0fa7ae5970b6b302234deb9177a051bfc26fb534eff3f3b7317dd62f5cb1c986ac5fcc3d5adb8d4422cc6f7e1e88fc8e8ff339ad38add2fd63ee744c543bb771109ea7e3f108d0aa0c4fcfe80deb0ebe03cdf060c00bf3eee9b2c6862cacc426b66173d8ff0229102a7266d3af22fa7ec0456fa8e42530c5182ed629ebe54a996dba33c9ac983cb3197b3a9c89d197903e3879d09c2f2f09925de45ea54aa5a5ef16c8caac6e6da712c9f0538ecfac23321deba0ac41d7120ddb987ae4af379151571439cdeadaaec2cd1a0e670d2094d692a71d58dabf78575b2b42808b1f3b4b174c62e0abf293f9ec5e07abac5b436437be7baae8e210abb9e1e7c63dacb22c94444bbb40b9c27ab8f728d2f86b7ab3b5823ebef34337688e42e09c153ecee70d3622a434d1643f16c21554d2d74830015bf92e642feb2cdcf6c98879e2d766d0cb5dd70fb13bdbf45e2ef09f1ce750927c6fc79e319c6a5eafca4d38efb75d4ed4a29e19b2f0c45ba3312d7b7d0e6f1f9bbc340c44be72cd43f", 0x1000}, {&(0x7f0000001100)="27749f078eb67ed38ff96478457418d3c96e5960af8681ce48c1da5b3dea84850669f1e65577be0bf239458ec3d99bf8088dfd2e9b3ce1226a60a00c3dae8d8a5826", 0x42, 0x10001}, {&(0x7f0000001180)="221bac7961719c5678729771e41c57a6b519464f7c66670b7b22b17cbbfebc30142ac06dae81a2f4701109ae214d1e52a542afc1feb0c677503b542e7159e5678cb129d78c597155c6b36c25d1625d4ee3a60a27faea1306d8b74f2c0429bc46a6d1d8b22e83e5120ebaca14f4647ee0e857913991d0664bd33eff1feb39a46fe4f3a223c8d3a2b2b55b7d25ead248448da1c8efeebed168a9064da45e0276a9ee8a2171273b4a691c0f47eaa8affe2f702196e3b4ce697b150777ae24b5279c471fb2622915b151ceddcd9dc299d2b4dc894e5e9712d9fb630073827f4f2672c63c79ca8b92072830d4f0a4276ebc0688fa29f1", 0xf4, 0x7}, {&(0x7f0000001280)="634e5d5d9047f9420488189a7a5f9793f877ed0a0b9eb9f750b6fb3b2021aa094a1bacba711fb8fccded862859fc15478fc1a552678b731b2df9584789cee13ea8b459", 0x43, 0x12}, {&(0x7f0000001300)="e3e970190eb61fa3d9e1a2c69a1a28381effb3e03dc6b7d33057300f3599cf77befd5d2c01e12d316d395a824d785d8da43c4e598ff46f1e44951f9a0c214c7ef46cdef99d3d689c7f3a06bce7678488ae4edd060c987802cffc38dd2112d9ae069b208e32d267c4c995ddfbf5d4527f98806000b4", 0x75, 0x6}, {&(0x7f0000001380)="aba247b5ab79c8d5471abc3dc5c9be8dbf170686ad648c9d127fb1a2c483519275", 0x21, 0x2}, {&(0x7f00000013c0)="5e7e2323b56e3b106614b474a2583d1aaad73a4674d76eeb23ac9bc8befb765d18a35bdc93427687842cfcb7a108161666887052825012d2ca1924559ccfa72bd893dc8616ae093d81d456770eae73d35381fbebe12a640e1435875576250bc2611315fa4655c265ede6a25bbcf4f48668596d13c6f48e1b270cb77eb1909624c45a1d5d88499d808c9b01dbf3e0aedae7009e5d4697f9c731cf1b51fdb645fd7adc13c1c3", 0xa5, 0xa96}, {&(0x7f0000001480)="0d6af623cf293064dd4841d8d94e61ba03d86ff5c6e6750660d80b26e087beeb4d935c8eae6a9a6e8f2a78b9648d524a74f5188bdde582352db37b089289e978e7c180bf2b21b96ce25692bab83c09e2b188e4c8f630664c418134f6fb35c363ce0460f4cd124090ad38a15e1e90b1a027c25ad669b6956d519ff21516dec6732581cecaf724b3f5d8b19ade4e867fd5b4d8005a252f0c9f7069ddf320b99d4329ab28ba4f4c5228d3c814db7fa8e39f18fac13e0173dc5456e69c2f38e4a769", 0xc0, 0x9}, {&(0x7f0000001540)="97c7ee06811cbb5488ecfd566478b17fecded12347d7a05b9ae04070158e7c41456b6e12c35ad708283e9c8d5205e9b9b326c18a16a51fdef5eeb1d4162bd5", 0x3f, 0x1}], 0x40040, &(0x7f0000001680)={[{@creator={'creator', 0x3d, "7079f7d8"}}], [{@obj_user={'obj_user'}}, {@subj_role={'subj_role', 0x3d, '/proc/thread-self/attr/current\x00'}}, {@euid_lt={'euid<', r2}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x0, 0x1f, 0x4, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x41015500, &(0x7f0000000080)={0x0, 0x0}) 03:26:22 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x22, 0x803, 0x1000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x80045432, &(0x7f0000000080)={0x0, 0x0}) 03:26:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) poll(&(0x7f0000000040)=[{r0, 0x24}], 0x1, 0x0) 03:26:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x80045440, &(0x7f0000000080)={0x0, 0x0}) 03:26:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20040, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x301, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9b0000, 0x7, 0x100, r2, 0x0, &(0x7f0000000100)={0x9a0911, 0x40000000, [], @value64=0x3}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf25050000000c00038004000100040001002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020073697430000000000000000b0000000005000200490000000c0003800800020071ffffff"], 0x54}, 0x1, 0x0, 0x0, 0x4000c80}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x0) r7 = dup2(r6, r4) ioctl$SOUND_MIXER_READ_RECMASK(r7, 0x80044dfd, &(0x7f0000000180)) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x80000000) 03:26:23 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_GET_KEEPCAPS(0x7) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRESOCT=r4, @ANYRES64], 0x48}}, 0x8815) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r9}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r9}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x100) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) 03:26:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x80085502, &(0x7f0000000080)={0x0, 0x0}) [ 2105.430789][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:26:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="541300001ed30b4260e68eac085439e4349a12818905d4f4e2b90f813dc614777f624789", @ANYRES16=r2, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x7, 0x7ff, 0x85000, r5}) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) splice(r7, 0x0, r8, 0x0, 0x6, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x1, 0x0}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x3, r9}, 0x8) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, 0x0, 0x10) 03:26:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x0}) 03:26:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0xfd, "463c0d9a173fd056"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x400004d) 03:26:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0}) 03:26:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:23 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, &(0x7f0000000000)="dcc6ceaf7453e6c4263c0d41c2038465798501bd39e8175b57b2b0162a8cc5451538b7de8f116c9ba1bf004070eabf9ac5e59f0fa1a3688dab03100399fb2d20969bad2367ff4f80415045b8d435213b3aec4c2f256aeeda558d63c3308e4547fcfffe84dca6578700b35821073d985a7aba01f37f96", 0x76, 0x0, &(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x80) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x101a40) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000380)=0x1f, 0x4) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20810000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_deladdr={0xa4, 0x15, 0x2, 0x70bd25, 0x25dfdbfd, {0x2, 0x1, 0x20, 0x0, r6}, [@IFA_LABEL={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LABEL={0x14, 0x3, 'macvtap0\x00'}, @IFA_LABEL={0x14, 0x3, 'geneve1\x00'}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x166a, 0x7, 0x0, 0x3f}}, @IFA_FLAGS={0x8, 0x8, 0x1d}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LABEL={0x14, 0x3, 'wg1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x8854) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0}) 03:26:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c00900000000000000000002affc122bdaf708f83be8bcf17d9ddbef0c66c07c3f777e4e67560b6a2cf2c57f93ddabfa95b45904120e3b4bf85bdbc44a1c082967e7e1a26723b5f22b8ee9e077240f717ef132873aa58b4d4407d3a4941178a36a3c548590c3228cd00bc759f1a2ce98016107244a9135f62ec2e2f44f994975ced37673b5e9c2b3b615654f8687049"], 0x54}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='macsec0\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) 03:26:24 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20e895fc68ab5d3d}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r9, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000004c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400000000ffff000000000000c64de1975a4fbeaf26740e9f56561366cbb20f4b89bb11d33e5ef891439e85dd480fb5c99fbc367ec658b3739c376225d363dd60be3bea770a5b5482be4dec147f82518ced04e9dda3935e450c3bd7df844f", @ANYRES32=r7, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 03:26:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x5, 0x77dfc6c1, 0x9, 0xae, 0x1, "a48b2761776f67f81ff1335d9120a0b1862141"}) 03:26:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0xc0085504, &(0x7f0000000080)={0x0, 0x0}) 03:26:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) ioctl$KDSKBLED(r2, 0x4b65, 0x3) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$binfmt_misc(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1b) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r6}], 0x1, 0x0) [ 2106.274067][T15018] __nla_validate_parse: 10 callbacks suppressed [ 2106.274074][T15018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0}) [ 2106.399811][T15019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2106.490865][T15026] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2106.502615][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0}) 03:26:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) [ 2106.532290][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) ioctl$VT_WAITACTIVE(r0, 0x5607) 03:26:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @multicast1}], 0x30) 03:26:25 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0xff2c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @empty}, r3}, 0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) 03:26:25 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000440)={0x1, 0x1, 0x96b, 0x9, 0x40, "490a5cabd6cf2f1cc68c24952def20c1eba324", 0x1f, 0x6}) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xfffffffffffffe4b, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x2}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r9, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x8, 0x1f, 0x200, 0x40, @local, @dev={0xfe, 0x80, [], 0x13}, 0x7800, 0x7800, 0x4, 0x80000000}}) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)={0x128, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_SOPASS={0xa7, 0x3, "cd07d63547577b7bebb9b2055ea20234c5712b20ac741cf312235280e4bd4ca456c938d8cff4ff25ead149004cd7f5272eb861b1fe72411181a3df0fb259c75d5c598af0573e70b9994df4a1628299c2f5e8b16570a5d0625902b26f74eefbefd0bef35e11f65fa998b58fca87d7490d9cabf8b7b204538f99b6cce7abef3f82e7ec8d492cb6fb231907e41f5ac47de6c99faf508d513043cffe70a09f426c6470b089"}]}, 0x128}}, 0x870) 03:26:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, 0x0}) 03:26:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x24180, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x7e, "d5e07c7b075219213a102cc0359eb05a60913011989787116a1b635b86b0fe783f9c2df7371aba0842bf98b20715154ad42d522559a68472005c913c52fc9eb11c69dce1ee66f6f6803e5c0eb01ad7fdfab789bc2ea212edcd26a67f195f3a0f319eca5f91dd596bd07b7f07acd147f8a5e64e83beb69baf8490541be50a"}, &(0x7f0000000100)=0x86) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) [ 2107.177076][T15092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfff, 0x0, 0x9, 0x3, 0x0, "463c0d9a173fd056"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}, {r3}, {r4}, {r5}, {r6}], 0x5, 0x101) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r1, 0x0, 0x6, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x0, 0x7, 0x4, 0xe000, 0x86a8, {0x77359400}, {0x0, 0x8, 0x8, 0xae, 0x2, 0x81, "773f18be"}, 0x2, 0x1, @userptr=0x9, 0x2, 0x0, r8}) 03:26:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x3, 0x0}) [ 2107.251383][T15095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x4, 0x0}) [ 2107.341844][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1406, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x40) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x10) [ 2107.410182][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2107.443890][T15095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2107.529688][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:26:26 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x7d25) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x5, 0x0}) 03:26:26 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@bridge_newneigh={0x28, 0x1c, 0xe10, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, r5, 0x1, 0x31}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 03:26:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$CHAR_RAW_ZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x4, 0x200}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) getpeername$ax25(r1, &(0x7f0000000140)={{}, [@remote, @null, @null, @default, @bcast, @rose, @default, @netrom]}, &(0x7f0000000080)=0x48) 03:26:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x6, 0x0}) 03:26:26 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001213ed38ceefd02427c1b0a4c790402d717993173ff10ed407c1577a54c1ec483789b1a687623d27fc3d3cc22aa3b9bead1c6fffc42574b866a50e47ab8f57bdb81b3d0aad71047d10b62b30a005d3e23f223091f838ea4d38b4f239119a6e1dd778ad4a178eaf2c30c1e6681dc2525865f8041cabe6a5c0e164951663eb43f3869a63e787ddc91cd380642398153ae3a748331b7ed911ebdfeac21ce5b2228dd63a6ea50dd624ece6104d944f3200"/191, @ANYRES16=r3, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x6c56) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) 03:26:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) set_tid_address(&(0x7f0000000000)) 03:26:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 03:26:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, 0x0}) 03:26:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x93a4, @bearer=@l2={'eth', 0x3a, 'bond0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x24048084) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0xffffffffffffffa0) 03:26:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x7}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x70bd25, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200480c1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r3}) 03:26:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x8, 0x0}) 03:26:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) 03:26:27 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x9, 0x0}) 03:26:27 executing program 2: r0 = gettid() tkill(r0, 0x33) sched_getparam(r0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x10) 03:26:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x0, 0x3, 0x3d, 0x3, r3}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000040)={{0x3, 0x0, @identifier}}) [ 2108.997749][T15210] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2109.033212][T15210] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 03:26:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:26:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xa, 0x0}) 03:26:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) [ 2109.590352][ T5027] Bluetooth: hci0: command 0x0401 tx timeout 03:26:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xb, 0x0}) 03:26:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5690a5392b2c"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24004011) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}, {r5}, {r6}, {r8}, {r9}], 0x5, 0x101) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000000)=0x1ff) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) 03:26:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 03:26:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x1c, 0xf, 0x42, &(0x7f0000000140)}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:27 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x29, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000740)={0x1, 0x3, 0x4, 0x40, 0x81, {0x77359400}, {0x5, 0xc, 0x3, 0x2, 0x2e, 0x8, "dffad94f"}, 0x8, 0x4, @offset=0x7fffffff, 0x3, 0x0, r8}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc, &(0x7f0000000280)=[{&(0x7f00000003c0)={0x350, 0x3c, 0x0, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1f3, 0x10, 0x0, 0x1, [@typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@remote}, @generic="9cc35b091a33e26ccced0e8499f4727975b7cdfbb93e1f1d5a8c336e7e616108afdb795a547091068691e8dc0ef708ae54bead60149986d54f90442461ae1d0916622cafb1d0f1d38465e2a46ee6149c3c708335053d25f941efb80e94c08217363c1996d121d953ad2e0e85292eaf1d125313315f1e4e850cb849cf8aa270de2f0adb14656b4884dcbf84b3fa93da204390486eff05b2b189c10dfd02ba936adb8b633a81b8e33f33e788763a6f2dc1f98e2ca9b60508387174adc94c5337fe3f8fc856ec34447e3c470353fc73a3092676a266b9b35fd6cbdf1dced79512", @typed={0xb, 0x32, 0x0, 0x0, @str='macsec\x00'}, @generic="4547c0ad803c658f368435d0c33ae7ceaed262e05aa6cbd80977f26f6f2e63c3784016e9c0df6e928aa015ee1550bee56bd833a748fe5e2edda77444d4bd4655c55967cf14d9dc45032f184a69b6519dd472501670e601345b4c78bbe64cbfc13a79fdb2bf89a6d7ceff52b2569a20fd167204945dc13f4fc10030d09237931f", @typed={0xc, 0x62, 0x0, 0x0, @u64}, @generic="855b36c168fe28a8615751a5e488653d03b49003fab8207ba44e41d24ca13b0ec8e316739828fcd8f73a867681318d8f1c4d119ff3e8b5a4d2810482124227046affa870440f8c575340e832", @typed={0x9, 0x6b, 0x0, 0x0, @str='#{[-\x00'}, @typed={0xb, 0x53, 0x0, 0x0, @str='macsec\x00'}]}, @typed={0x8, 0x5d, 0x0, 0x0, @pid}, @nested={0xe3, 0xb, 0x0, 0x1, [@typed={0xb, 0x18, 0x0, 0x0, @str='macsec\x00'}, @generic="a332d8fd66ce9c7ede363c13f984", @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0x42, 0x0, 0x0, @u64=0xfffffffffffffffd}, @generic="f0b32b7a72e6c2695b1d5b6648ad2f5cec30f2be11aa137ef024d588b61e42888a57866e0313a922dd0fd0294a6aab574e06742b14924d0f5301b9149823dd65db1281bfabdea9761e8e37d745a0aa9792b54211efcfd2270625e7ee0f06304501f83815ed18a3d125f38845087f38cd3195c5ac2e7b90e33bda39af299b105a92aa86c78ca99d69dd31da60abfbb624d1cb6bad3062ef4414f558fe620b63761251f6215e"]}, @nested={0x2e, 0x2f, 0x0, 0x1, [@generic="2031e092c439c5922a02d25f085b91dc688c4edd3ba4", @typed={0xc, 0x66, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x30, 0x33, 0x0, 0x0, @binary="944fa6e7c87f19f2eaa513880e2a67eaa97c186fc05d4595455bcb330303bfeb5e0ed47b3b0f8151dfc3d131"}]}, 0x350}, {&(0x7f0000000980)={0x1574, 0x39, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0x12e9, 0x66, 0x0, 0x1, [@generic="0429194c9100353df163ebbafe758ffd76f97938e1ce7b65fc8607", @generic="f5b7", @generic="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", @generic="580ee398c9d07b2f85d306b392e5b9ee1224c3988b01425f86fc4f377ead37be6aad51902d96ff85e7188c64784fb75b38d0f5275e462b865919f70cbf6d79bfbdaa60a94baff627fa00e4c95ddecfc007c797832aecc1b5f5c91f0170e38f0449b1da16b75d415a7251957cb8e9d0e1095b6ba750128d6b036bcda77f5632e02bb78f4e62e55b1c964c625305911c8e8467e8df3f7424448e93b4533149e4bdfdedc08149d01e259dd784baa8", @generic="a8f7ad16e4e8a5ade76b3a9eca47897092751e447ccc01997ed29948971a85f4b425484931109bf25ff10e939eafdca00bf45eecec77f148bb845ba402ac282e657186596d098f816562f3fa4af021e1fec25256d337e7ba01e3e343e8ba5fc117cf23235f84e9748cfa9e3d65a075299c189591a3980f744ca5db8242bca144b0ae98c73d2522ddca5f78566a736957ea5bd91036f87e1f276c2e9c3edcb709a7d7c4e6461c48dc2b6a5ca68c70c120cb", @typed={0xc, 0x96, 0x0, 0x0, @u64=0x7}, @generic="956bb2b645e6f4438f14ecf2bf247777d2b307751a7ab8b3ff39370c307598543f7b9e440b9f2c90de58c70074", @generic="0451f44c929fa5dc538e22e8760a5aae74d52cbea62fc5de4ae9fa8cf517f177756d16facbe91629fa0eb58f013a26a3d9b3d0e049c7eab2a27ebbc328837798105632a5a174ef8a4bac40c1cc92e70096273739d4d78fa49f9acdab2b6c6dadabe3437cb49ec22d35fa1a0d0e05e709ab8563a10bf087358d8ad0576108d64f1a2f4d6c314b98603ccac404ab47bcfa59d5883365adcdfdcd23a8af9c4083a294507dead127a72f79d2f4a3b0ed0d0dbdc199eba8254aeea68a0f178a6f8eb7c14ccdb0321eef8b465ed4448ec0fb57e1dcdf54d0219811a8", @typed={0x57, 0x93, 0x0, 0x0, @binary="ca42aa5f43fbeb4cbce7e683bda2580c206c2639262dbef6e26dd9c1484b67759e29d5fd0b609f5f8f97f743b99bba47be6b9310886c58d7d3c28cc1b8f0ce487e5323e7afaf2bf255f79c670305e17182c872"}]}, @nested={0xf6, 0x52, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @fd=r0}, @generic="08a92d814edcb71ebcc50fbd8f80e01d5142c5584150555259caaeb6526809b6a58d902b5381b30b4404363a5388a1ba813ef6a0aa39e7ea0d8f3e7bc4e9473dddd6b962973433eca1900c8e0ab07a26fc881936f5ad8d3215b5e0ddcb7197515bd0b7f606c045f477c37dceec0e", @generic="a1df3badcf12a036d8c84e6f8490006ffbecda206393665528852f536354b3ed449056063108b50be5b2439814d2ad52d5a895f71d7b3cc180794f086516dd3666cea65320de912793e0fbcf626dcd806a87ffed96c012f23b30d8cf05e5007c453a89beba5723a2", @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@private2}]}, @nested={0x17f, 0x1d, 0x0, 0x1, [@generic="d49530783b79e2c73db1a17765ffd1fac790f02038dcfc508d4b7a6c3e836ecac917dd38dc4ab8c6c369549698cc7c63186b348eca52f65b66db254dfe25062a207545677917434a3d1db230b36a4e35f37d9ea34c4a97ca5b24da65e41eae4f14f3a7b485a3a258717591697ea0f8a7926b69dfbcdd106ccb5819ce6e55229b8e1ebf03e812fce942eda20a14e6cfc05bc574a633971bbd69ef888d33fc5031785c9de0d0daa8c55832f5b7", @generic="8ea5a1f68695a304da3dd6ad299f99f70ba0ed4ef03d340ae22a5fd7c5feeb5ba8cca1c5f847fa44779df2460b5271e1ae79e13b842f6c51e872776dc737c48a626210580599fd2cb693c32dc3b236a753279c765444a3fff044fc3c642bba7b8d4b3424c86f7f327d8284700c0b76883d529f64b3adf994ec1fd5c9cd8f26321df5bc6cd4d5444dbda834eb1d08013ad83e51d853df685ef551b1f869eacba1d55b2498f16f3c03ff9f23e20c2459a3bd3d9dab20f12802b586203398f464fecba057b900f5d6", @typed={0x8, 0x84, 0x0, 0x0, @fd}]}]}, 0x1574}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}], 0xa8, 0x800}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xc, 0x0}) 03:26:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xd, 0x0}) 03:26:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977", 0xbd, 0x9}) 03:26:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x599204, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r3, 0x0, 0x4240a2a0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x8000, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x200, [0x2, 0x200, 0xd8a, 0x8001, 0x101, 0x8, 0xf6, 0x7, 0x14, 0x2, 0x400, 0x1f, 0x8, 0x6, 0x6, 0xd, 0x80, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0x6, 0x1, 0x6, 0x3, 0x0, 0x9, 0x400, 0x0, 0x1, 0xffff, 0xf0, 0x9da7, 0x1000, 0x0, 0x5c1a, 0x9, 0x400, 0x0, 0x2, 0x1000, 0xbfb, 0x401, 0x5, 0xfff, 0x9], 0x100}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r0, 0x0, 0x6, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x9, 0x6, 0x401, 0xc800}) poll(&(0x7f0000000100)=[{r4, 0x200}], 0x1, 0x0) 03:26:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xe, 0x0}) 03:26:28 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x2d4001, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) ioctl$HIDIOCGUCODE(r8, 0xc018480d, &(0x7f0000000240)={0x1, 0x100, 0xffffff1e, 0xfffffffd, 0x7, 0xffffff8d}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x6, 0x30}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write$char_raw(r1, &(0x7f0000000000)={"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"}, 0x3c00) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 03:26:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 03:26:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x10, 0x0}) 03:26:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x25c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbc}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x12}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4c025) 03:26:28 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', r2, 0x7800, 0x40, 0x7, 0x8000, {{0xd, 0x4, 0x2, 0x4, 0x34, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast2, @broadcast, {[@end, @timestamp={0x44, 0x1c, 0x79, 0x0, 0x6, [0x3b73, 0x3, 0x1f, 0x7fffffff, 0x5, 0x5d]}]}}}}}) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffa4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000ec0dc40000dfffff2762e8b30012000c00fd007665713657e55b6222afd9a8122d79c9d42b9ef664159a224e0edaff03fb209714e687"], 0x48}}, 0x0) 03:26:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 03:26:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000080)={{0x3, @name="03c0431d638ac3b9aabfb79acb3bcfe8ce31645fdf6a3cd6ea5b35009eb8fcb5"}, 0x8, 0x5, 0x7fffffff}) inotify_init1(0x0) 03:26:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x11, 0x0}) 03:26:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100), 0x0, 0x2) 03:26:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 03:26:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x9) 03:26:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x12, 0x0}) 03:26:28 executing program 3: pipe(&(0x7f0000000100)) socket(0x2c, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005070000ae5a27d00bdc9abdf60a78f358c521538212eb56fdd371bfc0c7f486b9cd7de35d35aa6afde64814aa1dca", @ANYRES32=r4, @ANYBLOB="0000edff00002300280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r5, 0x0, 0x4240a2a0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg0\x00', r6}) 03:26:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xbd, 0x9}) 03:26:28 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x400040) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200841, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "a5e8345a529a007f0b9e0f37a2f7661ee3d236ea"}, 0x15, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000740)={0x15c, 0x19, &(0x7f0000000340)}) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000002c0)=0x7ff) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000280)={0xe, 0x1}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) 03:26:28 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00000003c0)=""/139, &(0x7f0000000340)=0x8b) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis128-generic)\x00'}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="73ae65d3445c3199d8c40f92f91f063737f3c3a33d88bfb4c6b97211377abc405c28916f4a2e94b02a755bc83916a6b914300fff8903b9556d7003d0915a09fc2fdf3c7a3bcd29147c37ed21c1fe65ff708abdf35d068b1b43b743440a0cfc"], 0x3c}}, 0x0) 03:26:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$KDDISABIO(r2, 0x4b37) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r3) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x7) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r7}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty, 0x8}, {0xa, 0x4e20, 0x3, @loopback, 0x6}, r7, 0xd45a}}, 0x48) 03:26:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x25, 0x0}) 03:26:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x4080, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000000080)={0x3e, 0x8b, 0x1f}) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000140)={{0x2f, @private=0xa010101, 0x4e24, 0x3, 'lblcr\x00', 0x9, 0x8, 0x6b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2000, 0x0, 0xa4, 0x1}}, 0x44) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r10, 0x0, r9, 0x0, 0x6, 0x0) ioctl$NBD_SET_FLAGS(r9, 0xab0a, 0x1931) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 03:26:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x5c, 0x0}) 03:26:29 executing program 0: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7f, 0xfe, 0x1, 0x8000}, {0x5375, 0x40, 0x4, 0x494}, {0x8000, 0x4, 0x5, 0xffffffe0}]}) tkill(r0, 0x33) ioprio_set$pid(0x0, r0, 0x4007) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) 03:26:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x110, 0x0}) 03:26:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000300), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x80, 0x10001]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7fffffff]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x136a}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x38908}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x88, r7, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x70bd2c, 0x0, {0x26}, [{@nsim={{0x41, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) poll(&(0x7f0000000000)=[{r2, 0x106c}, {r2, 0x8001}, {r4, 0x4}], 0x3, 0xfffffffe) 03:26:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x300, 0x0}) 03:26:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x48000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)={r7, 0x16, "de5b54d9b3c675457516734093fe694acb0012fb26df"}, &(0x7f0000000200)=0x1e) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:29 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x3, 0x0, 0x4, 0x2, 0x16c, &(0x7f0000000440)}) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000fabfef95862084a6c9aa7489e7bd8a58004ba9000000260000000e000164657673696d000000050002006e657464657673696d30000008008e00000000000c008f0000000000000000000c"], 0x54}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=r9], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000dd55d822f6e59d220721f3422f5457bfc2", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000280)={0x8, 0x7, 0x1, 0xfff}) syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x3ff, 0x400) 03:26:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) r6 = syz_open_pts(r4, 0x3f3881) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000000)=0x401) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x81, &(0x7f0000000080)=0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x500, 0x0}) 03:26:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x3c, r7, 0xf, 0x0, 0x25dfdbfe, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r10, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x48015}, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x600, 0x0}) [ 2111.477205][T15493] __nla_validate_parse: 22 callbacks suppressed [ 2111.477213][T15493] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) [ 2111.542780][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x700, 0x0}) 03:26:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) [ 2111.636565][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2111.670079][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:26:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x900, 0x0}) 03:26:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="159300400300000000006b0000000800178104"], 0x3}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "bedcef3863"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "620d8d5cce"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f097e888fa"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e0726e11738796ac1fde68c504"}, @NL80211_KEY_SEQ={0xd, 0x4, "70144879f10a5bbad3"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 03:26:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x40, 0x2, 0x0, 0x4, 0x0, "463c0d9a173fd056"}) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xa00, 0x0}) [ 2111.817945][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0x0, @vbi={0x7, 0xfffffffc, 0x6, 0x34424752, [0x670, 0x7fff], [0x509, 0xfffffccc], 0x13a}}) 03:26:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x4e23, @multicast1}}}, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}, {r5}, {r6}, {r7}, {r8}], 0x5, 0x101) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000040)) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000000)={0x3780, 0x40, 0x1898, 0x40}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) 03:26:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xb00, 0x0}) 03:26:30 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000280)={0x5, {{0xa, 0x4e23, 0x7, @private1, 0xdc55}}, {{0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, [], 0x1}}}}, 0x108) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000fa000000e534a0fba83040cc26d3497f083d541f33ea4bad61c5a97279d31c00caee4145e171beddf817025ffa5df83481bc92b842300fcae31410d04bdef698c693d189539b6b537940af8987997b2dafdd4449e571a4617a599aca688db7922669ac402468d30f9ea36794d938289f09607eea7a0d09333e77b0831085c9f88d718722b228767d8965054ac79c30106ef3969dd18049fa7e8991670d570bd850ac0070852495918a52f81026c1b3a40ef2806b42c54c2e47ec2080614c0145c9583b9a838c40aa790b11446887ccf8f8e5867daa34c0b5282c6100e01076926e708e5174a46d9ea3706d34b29b1ca8977ec2e9ff0fcd033787742dbe8a37104793937c77e2150c9d6ba2522decd6b23c60bf7ed030776b3c961265e8f15e575a6772d19c030e6b77143578e0ce6d23a8251c41a0680b3e09e0bd00000000825bad42cbc0fde1b7b37027595148554e2d1e8e67793447effb26208b1c0113e775cf0a040e71cb92c83532446bf6975b8fc7c9263aa27a06d0b3fcc0521506a361882b435b804aa2988867aff1728220069d6d3d24d78fc496edeccbb20d5f46f8"], &(0x7f0000000080)=0x11e) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xc00, 0x0}) 03:26:30 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xd00, 0x0}) 03:26:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 03:26:30 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0xe00, 0x0}) 03:26:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x182) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1001, 0x0}) 03:26:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x10) 03:26:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1100, 0x0}) 03:26:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:26:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = gettid() tkill(r1, 0x33) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xffffffff7fffffff) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1200, 0x0}) 03:26:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 03:26:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000140)={0x6, 0x1, 0x1, 0x1, 0x7}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) read$hiddev(r3, &(0x7f0000000180)=""/245, 0xf5) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000040)) 03:26:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2500, 0x0}) 03:26:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 03:26:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x3f00, 0x0}) 03:26:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4208003}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1402, 0x4, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c144}, 0x800) r3 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r3, 0x0, 0x4240a2a0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x80, @ipv4={[], [], @local}, 0xc894}, 0x1c) 03:26:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 03:26:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="548834c2b3135a66186d00000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x15c, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "88ab89146fd0077839ce7fd4fd7dcbe0557cf9a04075b27c88"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f89567a3d80f54c1ccba51df6716ab4e4ad6cbe7"}}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3fffc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x181801, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="15b300400300000000006b0000000800178104"], 0x3}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xae, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4000000, 0xffffffffffffffff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004014}, 0x40) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x134, r9, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x58b3}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x44080}, 0x400c801) 03:26:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x5c00, 0x0}) 03:26:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2113.078804][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[0x200, 0x4, 0x80, 0x9589, 0x9, 0x461e]}) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r3}, {r4}, {r5}, {r6}, {r7}], 0x5, 0x101) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000080)) [ 2113.163978][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r2, 0x0, 0x4240a2a0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e26, 0x20000003, @local, 0x8}, 0x1c) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x101a41) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000080)) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 03:26:31 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0xff2c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x29, 0xb9, 0x80, 0xffff, 0x40, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x20, 0x4, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', r5, 0x16f8307200d443cc, 0x9, 0x8, 0x81, 0x6, @private1={0xfc, 0x1, [], 0x1}, @local, 0x10, 0x20, 0x4186, 0x5}}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) [ 2113.338137][T15644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:26:31 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000026000006000000006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) [ 2113.473783][T15654] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)={0x52, "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"}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640)={0x635}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r4, 0x0, 0x4240a2a0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x77, 0x20, 0x66, 0x5, 0x31, @local, @rand_addr=' \x01\x00', 0x7821, 0x6, 0x1, 0xa3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x2f, 0xff, 0x5, 0x5, 0x2, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x17}, 0x7800, 0x0, 0x9, 0xf628}}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20c20458}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x58, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x388, &(0x7f0000000a40)=ANY=[@ANYBLOB="f100004e7275ae6bc398f92d0a29778583e77f2c7c8a0beed311e50848a342b9d7dd9594d6b247938d10aac1c8290a0e22caf5770cfca832ad0aa38b690a8fe78849a3becd129558f6e36dd8deb9aff4bb710c627e8d2dccd52f4372ebc203462e98d48b3e9b8b14a2d7c31635dc8e4d8a4dfd528a6a5c0a97e3e58cf212c10d069f3b5220371198886f97ec2185ce27e44f420bee7b0b6ebc1af618948d65032d620b1f845e605ccec1ac6dfd39423f00000000bcdc6446ea4cbf7fff03b633e99d573053ca2b7718fb35877268bd983833b047a5ffcc7fab0496b53bd7d946b38855f54a8322657be02869000000000000000000000000000000000000000000000000cf00004eb58fcf9f4feab446a7e9dd6396eb1790c98bd3e4e8858161f5be84cc062f2639d4df37ffff8b9cb6664e1645a612ce655a96b2a8b008ccd2ddd5716887db7c95fe0967e574d03986813c35fdd4424ed58d05b53920a772bbcc02d256c8787ff7bdf7cc4c7f44ddee188d4f6cbcca46d82bbeafa658a1f063d4a2033039c40d0fbde71f9daf9dc253d972e1e30a0c917f768a118c0e9948584584b218821b924ab5e0a6de000000000000c9b698b99c103401e2b80e0a457fed7c1cab06815784e91944ab557a90d03a36e0a383571600e800004e8a9e5092de7c3e8d2f8d0c8d138dee55819c1a80056556494218efdd5644f7bd34dfbf8342800a2c280a713cacf7eb97b866bcfc28592b975ac35131004f16aee726fdb60ddbdb55b0edf44b622feb9d6f18874af518c4b9b3cfc4d7086687b666b2dbaafecd24a16749a1738c31952beb28f932ac54989bd67e043fe9c6dc2ad1ca9c03eabfa6d8bea3fcd7c1a9bf8b5ce49e31931d20268f9acb83d2a2f67ca754d8fbe418b3cbeb9e3574046d8992039c453b2f5337f661b2adf202ee171ee8b21415bc996a85867d846e74f975c63b46f459a90dfc8c819ebda86aa4dcce73adb873080c1fa0cc00004e2bee8c740e1c977f70e5dae0750a011ff36e1cb63313362df25eac0024f3dd20f2674a94a032e5dd28baeee9142172bb7f1e4f21948e90d3bc51919d7145c54e87abf84c5d8c4b99e3ece54d9f8f8a89673ffe5964e9d0fba56f96d777e874bf0a3c7ebfcf15b29e59e7536504aa3c2477249f86de63b56b4e0ebc5dd55cf1e67f0b7d083207616b4990e6d5a76b54f09f97bd1053c392156e83d18cc344f52e907cfe16b7a66ecbb97b6cfa711987b731678fb62139e8ee51724a5f41cd24b3f412dfab5ca0fbaa0c76d6b4"]) r8 = dup2(r0, r0) renameat(r2, &(0x7f0000000000)='./file0\x00', r8, &(0x7f0000000040)='./file0\x00') 03:26:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x331800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f0000000000)=0x20) [ 2113.527740][T15656] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2113.544855][T15649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:26:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000000)={0x2}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) [ 2113.769011][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:26:32 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x4}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) 03:26:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() tkill(r1, 0x33) r2 = syz_open_procfs(r1, &(0x7f0000000080)='oom_adj\x00') ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)=""/78) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0xaba2a74638dc94bf, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x1) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0xf3, {0x2, 0x2a4, 0xcc, 0x8, 0x5, 0x6e3bd9e5}}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x4e) 03:26:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000140)=""/4096) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r10, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) poll(&(0x7f0000000000)=[{r1, 0x2000}, {r3, 0x6303}, {0xffffffffffffffff, 0x69c}, {r3, 0x2009}, {r5, 0x240}, {r7, 0x10}, {r9, 0x5004}], 0x7, 0x0) 03:26:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) 03:26:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0, 0x18}, {r1, 0xe000}, {}, {}, {}], 0x5, 0x101) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000000), 0x0, 0x40101) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 03:26:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6b) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'caif0\x00', {0x7b8}, 0xfffb}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="159300400300000000006b0000000800178104"], 0x3}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xc83, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x44800) 03:26:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000001260000000e0001006e657464657673696d0000000f0002006e657464657673696d16afff9af80cd633ed702ad2db9f008e0000150000f5ff8f0000000000000000000c00"], 0x54}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="6694238510ba7a1e5e8f7143837f2d336ecd61a1a606f26789769b8a19c71445706f37da882557c68fff8c4bd2212c27b48abb9aecda98d16a805e426c14547b3a6087cd19252d99e8a0b213c0c78f92c89297d260e79e9b5191423bf6ec88c4e7ff569f0254d9d269cd8c132d53171d6b50e9aad5c67da43417335084917438b2f28c75c95e9b0be45b17e5a142ac96bc8b97bc8f67017ba540343d75e24cb3a5264aa73ba11ceada71e8c56ab03136c1b1fcb439d4679f0592744cc2d8", 0xbe}], 0x1) dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d00000a670002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="5869ea5f5f322588104ab7c27d36b5103c9c5c43c444fc9c133cc3f7739dd06b9c893b44fba54bb08467368aee36c0fd074742e531d923e7145d50db2789741443c83efcc8b6bcb51d97f3d823bd507c5fc9ef78cd61a06423e976a17e4e719101d1bc7183674fba379ab6e4a088b0c2f4c28b81f3dadac7ce3a1101d577c091dbc89d0decffb217703cf375ede12f0cd87b8e97b413acbd3480011a3f6f6ace6d13ab8028", 0xa5}, {&(0x7f0000000440)="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", 0x63}, {&(0x7f0000001640)="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", 0x138}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000002640)="d8afc619df07091aa5d5cd551a0d5d9a5e515539f0750ed368d7bb3e0745f288e50ceaeaf3985a1688992f971055bd98eaef006e3063eef88ffc4545e2215782033a237642786d44c32111f3f52d4950d6326065826743d4bc7f8df03396b99a24f4d87af282b396294559627db8107420d1a37e077d78dfe03316a334ea65ae1bd2b1e27815a260b03bc86e5dd642aa38c8e6bd7dde16768d06f584d30b7ef853f6309085f867499d8fb8e9f6ecbeecb5973051f950524a9f6e95f2135ad3b0832c516ccd3e52e0590b4cbb781f9ca9fac7437f3c83a63ad8b72f2621ffaa6c7e8a129cc0a157ab387facf18de5b550e0c76740f07552d9aa88e14929a9d82bc7cc4e86be5733f66f67b0a5b0a8a789d46f43a1d625f7072f85a9eb54c00260bc2e32d845ef60952b0488bd62c3caf4a6b787d6fd351ab886ed28f1beed4a5cafb84a227fd7ff53c1272baafe4467d1373e2c35f7522198bcf19f7d74fadca41ea63b54a901e6c30f79a304190cd9788cb42d0e08511b6a37c9ab5ac7526b4b11fc8b9e38e7bac28d37ecbbf84aed58e1729aeca96d4f2bf49f7e9c5fd0058777dd2ccfe576d12fb738e6f48aedaf2cb3f4f04a51df440eace63bf7ac747f7d881e5febf57f514defb309cdfaad4b5e5309395a7eb46a790a3cb5d7e0e2ee873c2108f2177dade5197e1f0ae42d7ad64aea0be802d1084616deb5dea203e47b00a2299f57e2d30a8a2612e11c5abe630484a243949b45e29036011c6820f12751c619db611ff149bce3f99cc6ffdc8ec0432a31074718b80568087b0e8e6933721fff97156eaf6e5f32a7c057b484764e73ef216d17e8d2c1d486d015f9fb4081fd580b3d006dc76d8947b98ad1953af674df2cc9b8d54f9acbb8ab490c95be85769f21a76268a3046760bcb085eb563b126abc0126e04abfd37dcedc50ccf19305e9dd6416b1124c059273caa921dcbad742ae36294a8eaf4528198b4487d3208c6fe3cc05766d540549b8afbde99f4f2b9c67686e5e328106573db7605b663004ebb27020141bb5d3ab13ad228d265022de86d02df43bec0f02f2156225cecd7a7a91e16a1aa6d6cfc8accb61f09a1330f323f0a92d73791f19253bef0b429056f17081e77c9feeddf17a3b04c9ecee9545555e085aca00ec0a1b9c716c5b18d2e0ead35ff35137b1599561c4df49fada60f00c674859f6417bd16a30df4c439df9ae78a00d583a71793679bc83d0b0c59e2e3134089c4c17759b798d315169284c241b2a4d005423881a6f14003b760c4c9c57c11bee912c581fa9fae19a0f8534ea94017aa271ea7e7b1344220330bf3be03086af6e03eb83066ea74d3f82f52becb01dec5a075249422664bc13884e9b7734e870ae37ff60100b1b08fb9cdac9d54f2331ec696dc14f88a5b93cd9cbf1951fbf4b08ba336f0ae4b3aa05047cf2c4fda15dab73d2038de0c58fd9c3bdc5cc702578c68c12c775204adf79b8731ce9a242f71c2682ec13d3874e5f4bc9b16f24eb6186dba4b4d15d2a8c060ef7875dd30cee744820f6ee481647b64524bbe2bbdca5092fed8ffc984540dfec2479b7d3df72d27f0923972b2993e4d1e5e18e49be839e8f3c8ee1566be3d496c9a0004e227ec47f45b43b9b561bf295935a546c34e353685c9f97a9d847735b75a3620b062f7a2139edafd32e71300efea6a1017cd33b76f8bb93750e85a30188cb78e19d4e1df74aa50dd803e143b36221f5a4856d8725bffe934ebc23428a276f42da9d8c751597bc1096f671440d0796cbfb2f6ef0c0e63c9e9f54974c42c3a956abd1d1980e4da73ab3068f64dd472b29ed47300df19bec8ed16799af6533a192d2e693ccccd6cb763209ea2ea455db8557017478227dc0a4742eee7f64377c218f3907165a86b762f4ea51dc28ed7e578bc747db834a130c516ee51531c0b59c4dd6837cd9f8995a5d89e05310df476a600052ebf2992f5e87376b233ac2566275c65d717c81b6cae62058d269dc1efe09a8ec7fb0896150ac07b134c4757d2db35f851b04c2f1005c8822424dbc66b0ca535f26bc9c0a57dfb37bb4ce08ac1f420fd50dacf02f354ff8df3568a0b7fcade93a9a356de61f9b0a544b6b00873d20f286c1abaed96da74ff8994fd7c4c603f58c1da16db7660b789180ca41f12acc75d2e0db3e6250e2c158c80c7da3d9dd5b3fd484915315e1014512590933db46daa2375f3add13f38e7b22fd01aad57a4294cacc2ce7d6923b0487096e2a2aa888eddee6e4cc484a2d6bc84a55cc9be0db42c149ca919c159ff055581ab17bf8e973baad87d8f3d1e047a9d2f68d26c2c69d0f8ea06dbaa53c0298c72dc8e9ad571d796ddead02e6d596b7edec317b4ed64d3815305314f5722666caf03af20bf81d349fa778a967f4bdf7598058390a5969b50894be8a469c670e66c77339903c26df2fdf34368173974c9aaf96f6ddc5ad65493bd286a133cd75fe09a1051e2badbae0e9a88175b7fce9dec555f3720345ef1e4b468346eec2530ff239cfcc3370ad578f1d8a957ca89f7f71e3f2a7a0b048d897d1d85f68655950d7f684772b78371f299f2c18c345f9747bfed861b461c8f75ecd2bcf16d0054a6c43857306b7aa62893d7dcc037f128ea03a265a1779adc522826c9de27aae8bf3ac776db173500ef00445a2a503cd9d83449fc329f664569a16aa5b6b8faddc7488600d559269e65a16a0c4906ba7eea2b220ea21d03ff62e832131d555faee690dc1b455eda7bfcd9348ff464f4f534847c6b952d3a17fb2b3c9174d09efb80f1da5108dd542aea2ef1c1326f078eead32d43ae22718795e3ebb6eec97d20ff0110cbc3b3629e60006b9a6f90636521d07abae0baa5e43413a558827ecc15f5cf30853f71f4ab20f4ba20b6830101076a303232c592c4961e6fd3d103176a72b9025017dad5d3907cc21d03e9dcdfa08d3a36eb1c6ada405493b366d0eb1fafcb81fcbe8760d77d1cb757ac7b01fdc0e33477aff24591719f049f55e8449537fcb079c2cf754ec2773652df5aa862b2fcd89d3ac86f7e16206e546e8b75dd6d05f8a796560569e33ae0a39d68d8dae874a03a2a21f5f96cd30a9dbc917751619cc5ba8d8ffb624c377cd4f9c9d9f50ba05ed9df61736715069a9e7ef9ca76a05c340af2c0d812958a685aa5ff6dce54635df6bad9d64e21c5c945816bfb7a5b696df2c575c95f62661259104a385be406b60e30a744c5a3a14fb2ccc5fd0278c0f13a3cc404a05bceba14a461e4541b796fe62bcad27de709a923f737797d783b0333f490c890c7e986771d55ccb263e216eebafe2f7990b8e6e559eb49cd69b0ef2cf1c6ba7974d87bef23257ec774fef2a2310d79458bd5411633d1bbf1216ddff7aebac7be834a485c69efd03ba367272a74c75d0ebbeffd2cd924ffb5d22b344b54be4a521818e1fa98ce22cd9d5a9c13fdb2e58b46c5f7e2109dcd7f9f20cbd0a5a4c81e9d34afdac5bdba515503f26722186c4d9a62f15afc94a2993fc32729e1047262775950c4eebbc392baea58769a691631c3f0201f03a0dd2516ea64235fe1683bff9bc2025c4bdae5957d68100fd9752c37a4792fae6ff91eecc021fb5d0b13319ed8213417b1bb3196f52c965776dc0fdb98603ee5435d7545f5ca68b38ff5bcacd8cadb82feb65440958ea16666185e74b3a065408a86bbb374bdeaa22d9c9f89fc534675bd406bade46bdfd7a7aafe9d1a210e6def3b6486b584222425b89a4a4605f7a944d2b35b51a002cd418f5ddcf32e195f715a52f4b5c74f055aaaed7b8dfd0106a604a0330c522f67cf988ab6abcc48cb73ddc2892f474a9b5e9a52980e1da46d129b8e62d3987bc2eb3639bd91d405b31a52e25e057dc52697672ec4c0c5d0b595076586086051f240829882e5bdcf40649930a8b391eedcafc2f96ca493bd77ec7bc599b7149e4545ead50efa298ea3d39d3c726b27f5900b3bb153b47972e98864f4cf4b99f16cd07238483966a02de2386b8ddb002f672f89618a33e3062e5311b1d8a3ec853299ce1772662e5c478e6911bdbe9854272fc58ab4970cb0bf88d66ac26982fe81e6e33030c9af101c72cfc93c9f1ea893ec4806cd473ed560524356dde69baffd06a39fa3e369fd3f12b25afe6e9594a385d24747637a3b7f2c23be450ba4723d34d43ba6526356ec50737e51123953e612391d63229aef7e3a4b52c17bd1885814942637e92451761913ccfc32cb47268aa9c983f5fe3df593460659853ff29c7396230ec1ed9f05a54ad980ca53b5104ca2aaa174d0569d7322268b44d78fa1b22b19cf6486a45b456c1ae65587ba331d647819bed4ff3c5e34e24074d25a1dfc58c624550f76179c11a4c7f6758b05df32f991a8fe555bf184e345d641aa887d614d61ba42f6a70b7828ac3cc73c66aac5bdb344788aa822640e9f25cea82d9c5bfd2f3db6ab20b897c32af464dff9a5287218620dc6c1c7a456be6935761f6fec13af2d862418cdc7894ca84f5f2fe2b340787ebefcebf56702f08d0ffc0abbe456fae7d8bab5f5d7d73302f6469fd9c45e37f9a8e9143cbc1152cce210fb9110d6279420f8deb9aec20845adf5ae00bede6c3dd0cda658dc7f2e9c459888a5e876bca21f4daf4ff63abc20c4354d376111b10bd2f4450a558de5e2e9bb74b8c759466dcd9bca7b35ab45d28f62de4c14c317ed08f3c6f6c3ceee8ed14aa579472219edc488098f4082f7ce3a08e1751b1d96ea25b50b1ef197bd284877db8867c5df4f784eb9f5222da6d7c52e4a4b76ddf20577cad322c111dfc0db1c82417fd4b7ecc31c5e355ee679c71b6ea3594dafb1a8b0a02395ad671ec4e5c1b07bdd60bb7f023ba8fa333221be88aca5a8d176478233a4772a8fa02d392d81e8fe0a35a696cb067b550724b188d1271bc046a8edf79888339c60aa40b5f1883d831a0527e709b55bd3f5e8b0716585fd33a7de2d5669914b12008cb8a3f5aafc41a052b1d62b1fd058a3daddb430e92e5aed2fda26dd8e69c30e3b4660a3016a117307742452cf44b878b6a01f36cfddbdc63a8be15d3bd605ce0727175ae78772624cac3c3e8f1cdab3c001b9c5f7c54f32cb18081bca2b5f95aa1827b0c67c87a829df84792b6a55e8825200ed68b47e33094aafa605b1dc1bbd627e5776d07565463288b9c3004f3da777578b0e29f6c999938cdbff7a8327af5b4c11395afc2f7204b11ec84c353a755d844ffba0e3656f09a9c46e2d2ded79187359011a06f633309a78eaafef432becf465943caebbcd7a2f116328ef63a65a80210ec367cd65e6a4a2c930db6f9b9eb595fb3d5605227725addb8d003ab441e5e784f5e957470ba37a725f12ab5d3507f3159dbf9218c170d31705476b9467dda03ba502a1e807a2e1938441aa314e4ca742db3e7fbb011d0d66fc00d9db7392202250fe83fdceacda3be574d7d64cd51d08e83640ce8a8d09d4d7e949d25c57424e9dadc5ff7d2755bb0a118a51cadc6cfe0ded995925a288ce35bfe3de753bcc62218bd77977084b6070f787618ff1d135b2f5388d233b7c70c9d41e1c36489220777118d3776814e58ebb161f6d954502be7609c65c3a7619d74dcce7ada5fc2b8418b934be71f88e635f5b8440ed91a35c90d4e838a8555c0d710122fcb810f7d5bc8363aa4d4b6fa887c5dd6d65eec46811177f0e9754d66eee328e50848746670ab6b0a1795156c5b0326c62da928d2dc75faec93f57f1aceeb2d8865299dc13a7f538bf9c875e7c1c7c1", 0x1000}], 0x5, 0x0) 03:26:32 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0xefd0, 0x5, 0x3f, 0x7}, {0x2, 0xf9, 0xff, 0xfb}, {0xf90, 0x8, 0x5, 0x8}, {0x8001, 0x5, 0x40, 0x2}, {0x9, 0x2, 0x8, 0x7}, {0x8f, 0x20, 0x80, 0x9}, {0x6, 0x8, 0x2, 0x3}, {0x8, 0x1f, 0x30, 0x9}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="541d0008", @ANYRES16=r6, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x80) r8 = dup2(r7, r3) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, 0x0, 0x0) 03:26:33 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r0, 0x0, 0x4240a2a0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x6a, r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, "46bc0d9a173fd056"}) 03:26:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = dup2(r1, r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x0, 0x8000}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = io_uring_setup(0x171e, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000180), 0x0, 0x4) r3 = syz_io_uring_complete(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x6f, 0xc420, 0x0, 0x3]}) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) 03:26:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)={r5, 0x400, 0x8c, "0f1742300a740e793e7034d3f9f701fdb0232167bba8a54196a2a3ad5592abcb277406da7dceae0a935c24fc2d5e3d6cd642f53b5941d4e02afa7778f99546de187e652db4229301ea0a28e8ce575cb2eade0bd84568ef882a049c35531624e325e90259e3c2bb209d5aa07a3427cf7b8dcc67bae527ec104d853a8dc14423bc35a2e12ff66b5960e73a6522"}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 03:26:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x55}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfea3, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$VT_RELDISP(r3, 0x5605) 03:26:33 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000576dfa7fcea5d1da2f14e4d1d07", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000240)={r10, 0x8}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000340)={r10, &(0x7f0000000480)=""/139}) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd06e7b03d14322b2}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000000301010800000000000000000100000308000c4000000001140005800e0001007369702d3230303030000000080017000000000540000d8014000500000000100000000000000000000000ba55000380060002004e200000060001004e93f5a780c81358198000000000000000000000000000bb08000340000004000600124000020000"], 0x88}}, 0x44000) 03:26:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x1, 0x10001, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a090e, 0xac4, [], @p_u32=&(0x7f0000000000)=0x3ff}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) signalfd(r0, &(0x7f0000000040)={[0x2021d134]}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}, {r3}, {r4}, {r5}, {r6}], 0x5, 0x101) ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000000)) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000180)={0x0, 0x80000001, 0x40, 0x1, 0xf, "2e83ad265b95d50e5e0c97fb9df99b65e70992"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:33 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x690ac0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000380)='>', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, r4, 0x0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="fe375b4dff27c8e414d0513cd88fdb37f1ed3b8c9a7c9e1b85cb4510589d3276d68bcfa8d2555179503655b5e3bab6001ae1bac16727e635572396803bda2328c666e1dbad598de564fe610697012d256d0bdbf193613b29", 0x58, r4) 03:26:33 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x8, 0x5, 0x2, 0x0, r2}) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x98}], 0x1, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) accept4$x25(r6, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x81800) fgetxattr(r4, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000040)=""/188, 0xbc) 03:26:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x55}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfea3, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$VT_RELDISP(r3, 0x5605) 03:26:33 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe3, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0x8001, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="03e219ef18919c5adb2f89595e6f04abd018bb5afab87e7dc0317ab497dd48ee0d20ec436b88901a060fd8cdabd6a1456db2ff0d17ca37602824af2500065c30e9075a7dee6470d0aec73f9703ce66c6fedff573d580a9484680d41ef45d549168b7b661ebc7d049841d80240ceaf44218204930327b2e8a38c9ef849b9c4c3f98b72a058b74bd7f98b9bd1f7fae9b4a57deca1b43b89d29eb5b04c03f7105e38cdc7903128adc6b2b5fb58e69d391c1de32cdfa66136de0eeee2ba56d2e90f2", 0xc0, 0x46}, {&(0x7f0000000480)="e1c52cc11ce3dce2d2abb1829c2b1a77f88f5aef394ece75b86a2f5dab8f43c196b0f645834fde8a6343579b9ee9f0e75468ce00daae8efb0152b75406c1e422aa2f0dd3640cc1", 0x47, 0x5}], 0x4800, &(0x7f0000000540)={[{@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@sys_immutable='sys_immutable'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@subj_role={'subj_role', 0x3d, ')['}}, {@smackfsroot={'smackfsroot', 0x3d, '+'}}]}) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 2115.553422][T15787] FAT-fs (loop3): Unrecognized mount option "pcr=00000000000000000008" or missing value [ 2115.698074][T15787] FAT-fs (loop3): Unrecognized mount option "pcr=00000000000000000008" or missing value 03:26:33 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x20000000000000dd, 0x0) 03:26:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000002c00270d00000000140000000000007a09335343f56ce745197b9b7a0074807c28056657b66f775994a36393b4b2e5e3ead1121d6b201aec2ec82b236d7a49cc4f12218d0f7891118ed93501e24b7849e794347765c152417ff055c12e4c25ef6cf884a5655bb7227950160134c0d925a535f7e8ccdae896714544dae2377b052dab2da0258d86", @ANYRES32=r4, @ANYBLOB="00df580000000000040008000c0001007463696e5c63e412e89046b7400006003c000199c7cdde5bfc6a0850009b60b213d9fc654f3ed1a00d78daaa46f910fad6d9ee7decd5a8f983c375c934bc10694071d7ca2b73d9035deb19952530e5a038574f21e720c5388ec929848d0f41d4816a3069eca8dcbe28ff597d921e9587"], 0x74}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x20}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "f57032504dd10b"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r5 = socket$inet(0x2, 0xa, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0x50}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r7, 0x40}, 0x8) 03:26:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x80000, &(0x7f00000000c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2006823, &(0x7f0000000180)=ANY=[@ANYBLOB="7e725f626c6f636b733d032c00"]) syz_init_net_socket$ax25(0x3, 0x3, 0x1) 03:26:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x55}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfea3, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$VT_RELDISP(r3, 0x5605) [ 2115.829643][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:26:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/183) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) [ 2115.873059][T15828] FAULT_INJECTION: forcing a failure. [ 2115.873059][T15828] name failslab, interval 1, probability 0, space 0, times 0 03:26:34 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYRESDEC], 0x48}}, 0x20000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000240)={@multicast1, @loopback, r5}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0x1, 0x100000001, 0xfffffffffffffc5e}) [ 2115.972438][T15828] CPU: 0 PID: 15828 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2115.980800][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2115.990859][T15828] Call Trace: [ 2115.994154][T15828] dump_stack+0x1f0/0x31e [ 2115.998486][T15828] should_fail+0x38a/0x4e0 [ 2116.002907][T15828] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2116.008623][T15828] should_failslab+0x5/0x20 [ 2116.013125][T15828] __kmalloc+0x74/0x330 03:26:34 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0xff2c) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) [ 2116.017278][T15828] ? tomoyo_realpath_from_path+0xcb/0x630 [ 2116.022996][T15828] tomoyo_realpath_from_path+0xd8/0x630 [ 2116.028555][T15828] tomoyo_path_number_perm+0x18f/0x690 [ 2116.034047][T15828] security_file_ioctl+0x55/0xb0 [ 2116.038986][T15828] __se_sys_ioctl+0x48/0x160 [ 2116.043607][T15828] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2116.049671][T15828] do_syscall_64+0x73/0xe0 [ 2116.054090][T15828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2116.059981][T15828] RIP: 0033:0x45cce9 03:26:34 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) [ 2116.063877][T15828] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2116.083478][T15828] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2116.092598][T15828] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 03:26:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x115001, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) [ 2116.092605][T15828] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2116.092612][T15828] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2116.092618][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2116.092625][T15828] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c [ 2116.138593][T15828] ERROR: Out of memory at tomoyo_realpath_from_path. 03:26:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x55}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfea3, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) 03:26:34 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0xe11, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10841}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x10) [ 2116.330456][T15872] FAULT_INJECTION: forcing a failure. [ 2116.330456][T15872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2116.343690][T15872] CPU: 1 PID: 15872 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2116.352013][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2116.362076][T15872] Call Trace: [ 2116.365374][T15872] dump_stack+0x1f0/0x31e [ 2116.369715][T15872] should_fail+0x38a/0x4e0 [ 2116.374143][T15872] prepare_alloc_pages+0x28c/0x4a0 [ 2116.379266][T15872] __alloc_pages_nodemask+0xbc/0x5e0 [ 2116.384564][T15872] ? __lock_acquire+0x116c/0x2c30 [ 2116.389604][T15872] kmem_getpages+0x49/0x900 [ 2116.394127][T15872] cache_grow_begin+0x7b/0x2e0 [ 2116.399003][T15872] cache_alloc_refill+0x359/0x3f0 [ 2116.404035][T15872] ? check_preemption_disabled+0x51/0x140 [ 2116.409773][T15872] __kmalloc+0x30c/0x330 [ 2116.414026][T15872] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2116.419750][T15872] tomoyo_realpath_from_path+0xd8/0x630 [ 2116.425318][T15872] tomoyo_path_number_perm+0x18f/0x690 [ 2116.430820][T15872] security_file_ioctl+0x55/0xb0 [ 2116.435776][T15872] __se_sys_ioctl+0x48/0x160 [ 2116.440374][T15872] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2116.446458][T15872] do_syscall_64+0x73/0xe0 [ 2116.450883][T15872] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2116.456779][T15872] RIP: 0033:0x45cce9 [ 2116.460676][T15872] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:26:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x280002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464655f73696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000e552181410306a64b423605ecde96f842bf0007fa8228b9fbb2ba0ee424da7417561d7f570897bdd7153405259688fd1d74737"], 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="755e82770b32bd0b4d585ec8e88ae4f8c47e0898e0ae833f5f0fd291c731d444e4bc2d01ac73d33bc7969580cb9bf6459250e2242ef22981ff004726e45aceccf10468996f437c842587f46bbfc3fedcdc237dfaf21b8d1ce44c6a9510985288d084f2be20c6b8"]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r1, 0x0, 0x6, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x71) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c001600", @ANYRES16=r9, @ANYBLOB="000425bd7000ffdbdf251100000005002d000100000005003500010000000500300000000000050030000100000005002f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x12402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180)=0xe10, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b0000004c27a27ac6ad00cf6d36eb8001f7fbb4455ea81c97e838386b2bf59330c7342f8089a064757e40d8df720bd0a49a02653f179d2657ac47de2383f62a6c9c6e26945e524b01fbefb79f721f3b0e34ca75d80e41a1c0aae933aa473cdf5ffe605ddff538fdc4c32148b4688165eed6e1cf969b65bc61426ca8dc150155c2f4456d990c579b1becd079d8f2a0818fbf4cf2c390130430115cec95417d618172787c340b61aed1d0", @ANYBLOB="eb6ac85ee5beeaa498945ec4ab1a47058b90be16c503d871dfa054d3e4ceec907404fa9c406d2aede49edf122e9103b740cd26718bfb35c0a0206857760a45413c3aed019e07503206ed0d5d5ea58d0d1aee020fc69031c25bf930e1c6b75200e4347e03597fab3be3aa873fb5ea2f0b8cfd11f402f43a77c479feedd3fe5f66e69aaf2cf2533626cb51808c88b23aa61b38cf1b4e70ac8c92fa154accbb4b57cf91c5055be4dd224ae861a7a7c60bfedb76c21110202f9b930a1feca4981c88e95b2e59c0bd", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x40821) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') ioctl$FICLONE(r1, 0x40049409, r5) 03:26:34 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x208620, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xf801, &(0x7f0000000080)=0x2) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) write$sequencer(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="05cc0280920ee00608e009000c03edd46e05840595602a0e7192632ddbb08d7e61a212d71f492b4d1b790772c34b95fc340390b21f5511ed383aeab509cef369580c8f69ed2ec7c641ba2cdd68c02b0403cbe4c826777f1d0b0a57f34a517aa1ca810b1dd5a22e806f15a675d623e5dd14e0358b907b1056d0c02ac2bd929e1483d10ec90ff741cb6f7db4e83f557e344df9b8d8b04f19272ea1336ca53ec8312a8b6eafc582054a527ecbc676465e61f3dce83c"], 0x14) [ 2116.480280][T15872] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2116.488703][T15872] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2116.496683][T15872] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2116.504664][T15872] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2116.512644][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2116.520624][T15872] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c 03:26:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0x100, 0x0, 0x0, 0x9, 0x1}) [ 2116.565907][T15885] __nla_validate_parse: 8 callbacks suppressed [ 2116.565915][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:26:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) [ 2116.661764][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:26:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) kexec_load(0xffff, 0x5, &(0x7f0000000200)=[{&(0x7f0000000000)="ed79f77837a1c1050deeed67b2a22415eb6771263693ea64ba6344680b85f5cc3c46b4e1490fbb3dece7c8df3e64981dfc0cfdb7c69de695ef2ba27222e56b7f97122329647c772fd81aa1ca27eb7c0e73198229d67479be831bcdfda2cc681f", 0x60, 0x2, 0x6b4e}, {&(0x7f0000000080)="346eed2c3a9df08c972bcb8cd914c174a8c5fbb60256b549ace624be0bc68f3067b7662c0782ab83e0839d434f9d325002ae36f8e1f98c693e3534fa060dc5e4", 0x40, 0xaa1f, 0x800}, {&(0x7f00000000c0)="507dba717e4180b45e", 0x9, 0x10000, 0x5}, {&(0x7f0000000140)="804016252fd34373c2dad6429c26ee3870f2f3592f1c28006b2772a034b57eb779d4e42bbac62d8af4cc0276086e73e9e08f0c841eb8879db193423c5baf07af7cc3c7959b157f79383b06d45060677b76a2cc7d551cf47fb0", 0x59, 0x9, 0x3}, {&(0x7f00000001c0)="e73c2539555583e7542b", 0xa, 0x101, 0x4}], 0x320000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) setfsgid(r2) r3 = getgid() setresgid(0xee01, r2, r3) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x2}) 03:26:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3d0, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff0000}, @TIPC_NLA_NODE_ID={0xa, 0x3, "c224f1c3307f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a8917c600c8d05093a918d7113de2b6bd8a6e7ebf5e93ab66532d4"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7f3bf5818e6803d547e64ef616317eb248205dad5e884ef8"}}, @TIPC_NLA_NODE_ID={0x53, 0x3, "373c3430ea7acda24fb6c6531dbd34be2fae7b4decda1ba21b4239845fa0204ecf620c2ca05bba4214c273f93cea0fbeaef799f21517acef7a5619fa1e1d9328f1d30ea5842930b36b8b90a13ea5ed"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "cd8d6f9422c1cbce4c837348c6fc9ef5c13945e4256833ad900cf1"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82b}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9d, 0x3, "7bda2588a796ac8b9e67427d1f701bf86041808e35912a66b17c15dfa3a0ac69e9bd368343ddf32b99b094b884f8dcbf1e99a64bc1d8820d3b1bc66ee476c8f6a6d21690d962b20c4f20e464e776e87d78ebb9f4faaa96fea808c1fbbffb68cf9c88c567f7075b0c1ff8976d2daadcc90eb2ec6eebdcf3b1291c0f1d8db7fa8299fcf78af4ddbb17c8235f51a7dd3cb67dfb63cf854f126545"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "19d2661ee26e99dc62fe1dd9a49e59c739c8ed6e88560ccc01903b"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x81, @mcast2, 0x8000}}, {0x14, 0x2, @in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x24040001}, 0x4004080) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x10) 03:26:35 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) 03:26:35 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1003080}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x1c4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfaa1}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0xed7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xd13a}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000340)={0x0, 0x4, 0xd0, 0x5}, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f00000003c0)={0xe9, 0xffffffc1, "daba374fad73b20eeb4ca402a0c1e9458fc892dd4c448a5e95a3d58475841ab7d5d45be5f4d6b9c581474739c621c8633ad4132538b7fff741cc5f8eb0390aab6398637ee8beb703a5f7f1d0b07ab2e3d0a450de8884d65d10179177c22a866484e7ddbba252702245fbf8ad410743db588aadfacec7b9b7f2cd02883c773925c809f5e6bcee06ac135d"}, 0x92, 0x0, &(0x7f0000000480)={0x22, 0x1, 0x7, 0x4, 0x1}, 0x6) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 03:26:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000000c0)={0xfffffffa, 0x4, &(0x7f0000000000)=[0x401, 0x81, 0x76, 0x4], &(0x7f0000000040)=[0x4, 0x2, 0xffc0, 0x100], &(0x7f0000000080)=[0x200, 0x4, 0x2]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000340)={0x64e, "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"}) [ 2116.921089][T15933] FAULT_INJECTION: forcing a failure. [ 2116.921089][T15933] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2116.934320][T15933] CPU: 0 PID: 15933 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2116.942644][T15933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2116.952699][T15933] Call Trace: [ 2116.955996][T15933] dump_stack+0x1f0/0x31e [ 2116.960329][T15933] should_fail+0x38a/0x4e0 [ 2116.964747][T15933] prepare_alloc_pages+0x28c/0x4a0 [ 2116.969861][T15933] __alloc_pages_nodemask+0xbc/0x5e0 [ 2116.975156][T15933] kmem_getpages+0x49/0x900 [ 2116.979664][T15933] cache_grow_begin+0x7b/0x2e0 [ 2116.984432][T15933] ____cache_alloc_node+0x179/0x220 [ 2116.988070][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2116.989626][T15933] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2116.989637][T15933] __kmalloc+0x18b/0x330 [ 2116.989647][T15933] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2116.989659][T15933] tomoyo_realpath_from_path+0xd8/0x630 [ 2116.989678][T15933] tomoyo_path_number_perm+0x18f/0x690 [ 2116.989721][T15933] security_file_ioctl+0x55/0xb0 [ 2116.989734][T15933] __se_sys_ioctl+0x48/0x160 [ 2116.989750][T15933] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2116.989758][T15933] do_syscall_64+0x73/0xe0 [ 2116.989771][T15933] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2117.051490][T15933] RIP: 0033:0x45cce9 [ 2117.055382][T15933] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2117.074984][T15933] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2117.083395][T15933] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2117.091368][T15933] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2117.099334][T15933] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2117.107305][T15933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:26:35 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000300)={0x3, 0x6, 0x2, 0x6, 0x20b0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="3ee78c40666421e9298a63e3269dd3f6c8616012a482d1862cf89d448b24c56867030300edd29f36bfba16b09904c197a00000b722000000"], 0x3c}}, 0x0) 03:26:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r6) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) [ 2117.115271][T15933] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c 03:26:35 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)={0x30, r7, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420020}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x184, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xfff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, [], 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1d62}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x109661a8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35c3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdedd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x412}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004}, 0x0) fcntl$getown(r1, 0x9) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) 03:26:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0, 0x8401}], 0x1, 0x8) [ 2117.226210][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2117.235281][T15959] FAULT_INJECTION: forcing a failure. [ 2117.235281][T15959] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2117.272504][T15959] CPU: 0 PID: 15959 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2117.280976][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2117.291146][T15959] Call Trace: [ 2117.294437][T15959] dump_stack+0x1f0/0x31e [ 2117.298773][T15959] should_fail+0x38a/0x4e0 [ 2117.303196][T15959] prepare_alloc_pages+0x28c/0x4a0 [ 2117.308311][T15959] __alloc_pages_nodemask+0xbc/0x5e0 [ 2117.313800][T15959] kmem_getpages+0x49/0x900 [ 2117.318299][T15959] ? cache_grow_begin+0x54/0x2e0 [ 2117.323240][T15959] cache_grow_begin+0x7b/0x2e0 [ 2117.328008][T15959] fallback_alloc+0x135/0x1d0 [ 2117.332783][T15959] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2117.339109][T15959] __kmalloc+0x18b/0x330 [ 2117.339125][T15959] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2117.339138][T15959] tomoyo_realpath_from_path+0xd8/0x630 [ 2117.339157][T15959] tomoyo_path_number_perm+0x18f/0x690 [ 2117.339200][T15959] security_file_ioctl+0x55/0xb0 [ 2117.339216][T15959] __se_sys_ioctl+0x48/0x160 [ 2117.339231][T15959] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2117.339242][T15959] do_syscall_64+0x73/0xe0 03:26:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r6) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) 03:26:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x4, 0x1f, 0x9, r0, 0x0, &(0x7f0000000000)={0x9909de, 0x3, [], @value64=0xe5e0000000}}) sendto$unix(r3, &(0x7f00000000c0)="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", 0x1000, 0x40000, &(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) [ 2117.339255][T15959] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2117.339264][T15959] RIP: 0033:0x45cce9 [ 2117.339275][T15959] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2117.339280][T15959] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2117.339290][T15959] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 03:26:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000200)=[{0x2, 0xfe00}], 0x1, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x1000}, {0x0, 0x40, 0x1800}, {0x3, 0xdb96, 0x1000}, {0x1, 0x3, 0x800}, {0x3, 0x8d7f, 0x800}, {0x0, 0x8}, {0x0, 0x100, 0x1000}], 0x7) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000140)=0x10000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) listen(0xffffffffffffffff, 0xff2c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x1, 0x200}, 0x8) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) [ 2117.339295][T15959] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2117.339302][T15959] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2117.339307][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2117.339313][T15959] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c [ 2117.388285][T15961] tipc: Started in network mode [ 2117.388298][T15961] tipc: Own node identity , cluster identity 4711 [ 2117.419029][T15964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x70) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000000)={0x726, 0x0, 'client0\x00', 0x2, "2e4b70e9bee2ec61", "e595a0be9d05042c39d07fec83c1ff3139b94d286134d1bc68c17c1ee92b97f2", 0xfffffe98, 0x80000000}) pipe(&(0x7f0000000100)) r5 = accept(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) write(r6, &(0x7f0000000200)="b5ae36f1849b485e18cf67bd7b0ad81e6b7fa0cd63eb2629986727c0bc0dd04adb34eb524dea1b05ba2ac95c4600c62c584d37a8425658982a5408ee7ba66a26d7bf728dca044656b26b73f338b5feb9e5f4cdd49b0ca72ac861470eae3dc0f64a5e9e3f35464cc220180450f596b371c3852c375da835efb6f202516ba7bdd152f9777e583664a1d9c3e58252171e9b66695222f5af3a17df7ff50aaae766b59efc46b45231a1edf2993b8fe4bec6e4cc6e46c28d7b1e0c7cd3f04ebf81dc5e99fa43a88061755cf5fa97fea9b7d9108721b40ae0de9d542f", 0xd9) [ 2117.454822][T15959] ERROR: Out of memory at tomoyo_realpath_from_path. 03:26:35 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x800, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000002c0)=0x81, &(0x7f0000000340)=0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xcb, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x8000000e, 0x4}, 0x0, 0x0, &(0x7f0000000080)={0x4005, 0x1c, 0xfffffffc, 0x2}, &(0x7f0000000100)=0xffffffffffff95b4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3}}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x8000, r4}, 0x8) 03:26:35 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x1000, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 03:26:35 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x1f, 0x53, &(0x7f0000000240)="c73d141467e284eb49e3a334d181364ad379b3a37dbc2c5c2951b34e4ad2f8513ebc97b35381fb72cc2c27d9e3f9f04d33ea52c63dadf872bbecc151f334bbe8a72cb995014ad9140bb52722c828ca30ad8d1e"}) pipe(&(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x9) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000010000104000000080000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000ddab0e1963e2648f29842881767bf3140012800b0001006d", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) 03:26:35 executing program 1 (fault-call:1 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}}, 0x40) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x440401, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) 03:26:35 executing program 2: prctl$PR_SET_TSC(0x1a, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x408, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xf0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x55a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf0a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff001}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8a, 0x3, "3dcbc986d516e8ad5b36761710aa59d66905d3e550335f5196cbd793ea960a47ca3ce3c0b5085b6fe1fae4169980b2470349262e13cb839b8bb43f05494eaeef9a8c33479c4de568e2bdcfeefef7ab002e1a47c4e4fa8b2addec7116b7dcb3270154228d01ebcec96e0fbc1133123e766adb61b181de7b5f3a6e131228b4f7a115ff1fa65d05"}, @TIPC_NLA_NODE_ID={0x60, 0x3, "bdc231ae4efb1959ed14e9f62210d8c8ae81f7082fba84fbd88d5c602ea98b1d06b822ed3516ccf2aa094e67a59617294e92cbd925af0864a0a9c075307aa3733c0d1032a10dd0c108acfaa2f09cbcedebffc11422bd2d2b1773c880"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "0e50bcb79aa646195c311851768dfc0ba3c988a7d18cf12f8a6bba"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "29006ad6849a5f2a20fd7d8e7df443bfcc6e44da4a2c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "07491fae842fe5fb95632aa00351f7fe93d36713179e7ce4580dc44ef92ab78c748ac147f74d2afdae90572dbe123654f9d8bcc6a0bb501eb20a071bee8738d34f432d051cfdab75af934c919c63f3beefe5f44389bce9f7787220b8942641dbba51549e97d65595fe6f724b1b2866e748fdcdd85cf7e70a276937c702b8c618dd55498149e016aa749c9f669d547daab1bc64fb00b198c15a5b3cdfe9edf2765204415b4207c48c68993f8946e13abe59d56af9964366d83a9324375b900abb925bac8b126b3f0eec875531490db21fc835789d623ab075aba9f614f9b1ea7efcb50b97bf8887fd7ec39c594142"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "a0e680632203c9116de8bd5007360b50c89404f0f67ae5fa"}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x33c4c3cf}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x6) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000000)=0x4, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, 0x0, 0x10) 03:26:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:26:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r6) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) [ 2117.855499][T16015] FAULT_INJECTION: forcing a failure. [ 2117.855499][T16015] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.874901][T16015] CPU: 1 PID: 16015 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2117.883238][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2117.893285][T16015] Call Trace: [ 2117.896577][T16015] dump_stack+0x1f0/0x31e [ 2117.900910][T16015] should_fail+0x38a/0x4e0 [ 2117.905330][T16015] should_failslab+0x5/0x20 [ 2117.909830][T16015] kmem_cache_alloc_node+0x64/0x290 [ 2117.915029][T16015] ? __alloc_skb+0x94/0x4f0 [ 2117.920312][T16015] __alloc_skb+0x94/0x4f0 [ 2117.920407][T16015] ? hci_req_sync+0x89/0xc0 [ 2117.929282][T16015] hci_req_add_ev+0xa4/0x3c0 [ 2117.929333][T16015] ? hci_inq_req+0x9a/0x1b0 [ 2117.934724][T16023] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2117.938351][T16015] hci_inq_req+0x11a/0x1b0 [ 2117.938366][T16015] ? hci_inquiry+0xba0/0xba0 [ 2117.938376][T16015] __hci_req_sync+0x12d/0x7e0 [ 2117.938387][T16015] ? trace_lock_release+0x137/0x1a0 [ 2117.938425][T16015] ? hci_inquiry+0xba0/0xba0 [ 2117.971070][T16015] hci_req_sync+0x9d/0xc0 [ 2117.975383][T16015] hci_inquiry+0x5c9/0xba0 [ 2117.979838][T16015] ? __local_bh_enable_ip+0x133/0x230 [ 2117.985256][T16015] ? hci_sock_ioctl+0x1f2/0x750 [ 2117.990090][T16015] hci_sock_ioctl+0x499/0x750 [ 2117.994759][T16015] sock_do_ioctl+0x7b/0x260 [ 2117.999261][T16015] sock_ioctl+0x4aa/0x690 [ 2118.003574][T16015] ? sock_poll+0x2f0/0x2f0 [ 2118.007964][T16015] __se_sys_ioctl+0xf9/0x160 [ 2118.012548][T16015] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2118.018601][T16015] do_syscall_64+0x73/0xe0 [ 2118.022999][T16015] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2118.028865][T16015] RIP: 0033:0x45cce9 [ 2118.032735][T16015] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2118.052323][T16015] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2118.060718][T16015] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2118.068677][T16015] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2118.076638][T16015] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2118.084605][T16015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2118.092668][T16015] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c 03:26:36 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x10) [ 2118.119305][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:26:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) 03:26:36 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001017e506000000000000000073005d00", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746814f41e8b2df4e52be7dee0b921c8b109e6562125e70f466b9677e2e6862a09973b11b8cd5b86f95ee9db2a18f4177dda80803dc05c3b1a1bcbdf3c8299e19b56833853267ea58fe974b55fcabf533d8f5d6ef3bd4c230d5c997aa3b137650bc7121f6d6cd9cba9f652cde7ab33973a1e17e9b50c65de6698ee229fb7d79f004aaec2276a78326cb09e5ae0271a4241c1d9a812596cfe6c47964699693287be3199909e23ca19d21a0f2ce53ee14887b1c63f9854d3b257cde6a731cf03e25c5b1eb1a800276a2e4a76"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0) 03:26:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x97f1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000014) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x74, 0x280000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) [ 2118.184431][T16028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) poll(&(0x7f0000000040), 0x0, 0x9) [ 2118.297478][T16028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000240)={0x0, 0x3f, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa20936, 0x5, [], @p_u8=&(0x7f00000002c0)=0x81}}) write$P9_RFSYNC(r4, &(0x7f0000000280)={0x7, 0x33, 0x1}, 0x7) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54050000", @ANYRES16=r5, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000fb6f2fd25b2ecae6d68ac3792d1e552ba58e5667eddaa468147da9384dd2"], 0x54}}, 0x0) r6 = accept4(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x80, 0x80800) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) write$snapshot(r7, &(0x7f0000000100)="30337188b419b0d6de0d7bf5bf9ae191187227e0f15d4ca58efd128d3d1c53c0279dac458eb1fe904aa5922bda7817edd14cb0e6eaa272c792a9304ee0247bf024741a1f82456dad68", 0x49) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000000c0), 0x4) 03:26:36 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x460242, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', r4}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x9b, 0xfffff6be, 0x7, 0x1f, 0x17, "18c367ab48cb559ea3bb3639fd9eb00469c10c"}) [ 2118.380571][T16015] Bluetooth: hci0: no memory for command (opcode 0x0401) 03:26:36 executing program 1 (fault-call:1 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:36 executing program 3: pipe(&(0x7f0000000100)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 03:26:36 executing program 4: ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'nr0\x00', {0x401}, 0x6}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) [ 2118.531643][T16060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:36 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x10) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @bt={0x927, 0x0, 0x6, 0x6, 0x1, 0x3, 0x12, 0xc5291a1f4d250c52}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r0, 0x0, 0x6, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000000d0000008100000000000000000000000400000002000000030000000000000000000000000000000a000000d80000000300000006000000b2010000ae0000000900000000000000000000000000000019000080b3000000040000006d0f0000000000800900000000800000000000000000000000000000010000c0ffffffff09000000000400000200000001800000050000000000000000000000000000000100004008f8d9aa0f0000000000010006000000008000000300000000000000000000000000000008000080be00000002000000ffffffff0300000001000000fb0300"/248]) 03:26:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @initdev}, &(0x7f00000000c0)=0xc) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r2, 0x0, 0x4240a2a0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000140)={0x58be, 0x2, 0x7fffffff, 0x2, 0x3ff}) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x6, 0x4) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000001c0)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r5}, {r6}, {r7}, {r8}, {r9}], 0x5, 0x101) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000180)) [ 2118.626830][T16069] FAULT_INJECTION: forcing a failure. [ 2118.626830][T16069] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.684215][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2118.695268][T16069] CPU: 1 PID: 16069 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2118.703603][T16069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2118.713654][T16069] Call Trace: [ 2118.716940][T16069] dump_stack+0x1f0/0x31e [ 2118.721270][T16069] should_fail+0x38a/0x4e0 [ 2118.725690][T16069] should_failslab+0x5/0x20 [ 2118.730191][T16069] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 2118.735902][T16069] ? __kmalloc_node_track_caller+0x37/0x60 [ 2118.741707][T16069] __kmalloc_node_track_caller+0x37/0x60 [ 2118.747336][T16069] ? create_monitor_ctrl_open+0x169/0x6c0 [ 2118.753956][T16069] __alloc_skb+0xde/0x4f0 [ 2118.753986][T16069] create_monitor_ctrl_open+0x169/0x6c0 [ 2118.754002][T16069] hci_sock_ioctl+0x1a5/0x750 [ 2118.754020][T16069] sock_do_ioctl+0x7b/0x260 [ 2118.754039][T16069] sock_ioctl+0x4aa/0x690 [ 2118.754057][T16069] ? sock_poll+0x2f0/0x2f0 [ 2118.754068][T16069] __se_sys_ioctl+0xf9/0x160 [ 2118.754083][T16069] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2118.754094][T16069] do_syscall_64+0x73/0xe0 [ 2118.754107][T16069] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2118.754117][T16069] RIP: 0033:0x45cce9 [ 2118.754129][T16069] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2118.754135][T16069] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2118.754145][T16069] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2118.754154][T16069] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2118.850724][T16069] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2118.858692][T16069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2118.866671][T16069] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c 03:26:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) r2 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r2, 0x0, 0x4240a2a0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5, 0x1000, 0xff, 0xffff, 0x3, 0x5}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r6, 0x5}, &(0x7f00000000c0)=0x8) 03:26:37 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000240)={0xa8, 0x7, 0x1f, 0xfc, 0xc0, 0x7, 0xa, "36a78cb64467e17157aac09e0584256e6ac70071", "bb3227371ea043fc7c289d88d3843251548ae00e"}) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r2, &(0x7f0000000280)={0x1}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001900010400000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) 03:26:37 executing program 0: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000080)={[0x8508, 0x2, 0x1ff, 0x10001, 0x3, 0x3, 0x7, 0x7, 0x4, 0x8001, 0x1, 0xc5f8, 0x2, 0x7d, 0x1, 0x8, 0x3ff, 0x400, 0x41d, 0x9, 0x4, 0x5, 0xe3, 0x3f, 0x3, 0xbb24, 0xffff, 0x8, 0x1000, 0x1, 0x1ff, 0x8, 0x8, 0x8, 0x9, 0x100, 0x8, 0x8000, 0xbea0, 0x1ff, 0x4, 0x80, 0x2ba000, 0x40, 0x3, 0x9, 0x3, 0x3, 0x1, 0x1, 0x4, 0x4, 0x40, 0x6f, 0x7, 0x101, 0x1e, 0x5, 0x6, 0x7, 0x0, 0x7, 0x7, 0x3, 0x8, 0xfffffe00, 0x5, 0x1, 0x5, 0x2, 0x379, 0xffff, 0x1, 0x7, 0x2, 0x2, 0x7fff, 0x66, 0x6, 0x81, 0x2, 0x101, 0x401, 0x2, 0x5, 0x9, 0x1, 0x4, 0x10000, 0x4, 0x800, 0x8, 0x1000, 0x1, 0x0, 0x1ff, 0x0, 0x8000, 0x4, 0x7, 0x8, 0x7, 0x80000000, 0x1, 0x52978b50, 0x4, 0x7, 0x56, 0x730a, 0x4, 0x0, 0x9, 0x1000, 0x7, 0x1ff, 0x15, 0x58282e95, 0x8000, 0x4, 0x2, 0x5, 0x4, 0x0, 0x7, 0x7, 0xfffffff7, 0x8000, 0x8, 0x773, 0x5, 0x7, 0xff, 0x8, 0x7f, 0x0, 0x9896, 0x1, 0x9, 0x0, 0x1ff, 0xd3, 0xfffffe4a, 0x3ff, 0x6, 0xffffffff, 0x8, 0x4, 0x3, 0x5, 0x6, 0x3, 0xffffffff, 0x7, 0x335, 0xffffffff, 0x9, 0x1be0c078, 0x6, 0x4, 0x5, 0x2, 0x1, 0x3, 0xef08, 0x3, 0x2, 0x0, 0x6, 0x0, 0x5, 0x8, 0x90, 0x1, 0x7, 0x9, 0x8001, 0x80000000, 0x1, 0xff, 0x3f, 0x3, 0x4, 0x101, 0x100, 0x0, 0x7f, 0x1f, 0xffffffe1, 0x8b47, 0x6, 0x1f, 0x7ff, 0x6, 0x2, 0x7, 0x33a40a36, 0x800, 0x20, 0x2d, 0x1000, 0xffffffff, 0x8, 0x7fffffff, 0x80000000, 0x9, 0x7, 0x1000000, 0x4, 0x1, 0x80000001, 0xfffffff8, 0x4, 0x8541, 0x5ed9, 0x4, 0xfffffff7, 0x8, 0x4, 0x54, 0x7, 0x1000, 0xff, 0xa51, 0x39f, 0x1, 0xffffffff, 0x7fff, 0x8, 0xa4, 0x1, 0x2, 0x7c, 0x1f, 0x1, 0x5, 0x5, 0x7, 0xf774, 0x0, 0x2, 0x8000, 0x8, 0xfffffbff, 0x7, 0x2, 0x9, 0xfffffff8, 0x3, 0x101, 0xd585, 0x100, 0x1, 0x20d, 0x7, 0x0, 0x4, 0x4, 0x6, 0x7f4, 0x22ce, 0x31, 0xfffffff7, 0x10000, 0x8, 0x6, 0xce9, 0xffffffff, 0xc3b1, 0x7fff, 0x8, 0x1ff, 0x2, 0x6, 0x8, 0x1, 0x8, 0x1, 0x2, 0x7fff, 0x4, 0x6, 0x8001, 0x0, 0x6, 0x0, 0x8000, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x4, 0x0, 0x6, 0x9, 0x0, 0x800, 0x320141f, 0x8, 0x1, 0x4, 0x7, 0x4, 0xffff4b66, 0x20, 0x3, 0xf467, 0xffffffff, 0x1f, 0x100, 0x9, 0x9, 0xfffffff9, 0x6, 0xff, 0x8, 0x0, 0x401, 0x2, 0xb82, 0x22, 0xffffff97, 0x9, 0x4, 0x6, 0x706d, 0xf0000000, 0x6, 0x68a8, 0x57e96c26, 0x1, 0x4, 0xfffffaee, 0xfffffffa, 0x0, 0x3, 0xb4, 0x1, 0x6, 0x0, 0x8, 0x200000, 0x6, 0x4, 0x5, 0xffffffff, 0x33e, 0x7ff, 0x2, 0x6, 0x0, 0x1, 0x8, 0x0, 0xfff, 0xfffffffa, 0xffff, 0x2, 0x5, 0x7, 0x4, 0xb4, 0x9, 0x0, 0x6, 0x8, 0x237, 0x1, 0xfffffe00, 0xfffff000, 0x1, 0x0, 0x7fffffff, 0x1, 0x5, 0xcfc3, 0x4, 0x0, 0x97, 0x9, 0xbcc, 0x8001, 0x4, 0x9, 0x1f2, 0x6e5c7f2a, 0x8001, 0xfffffffc, 0x2963, 0x53800, 0x7, 0x3, 0x36ea, 0xfffffffd, 0x4, 0xfffffff7, 0x6325, 0xffffffff, 0x206, 0xff, 0x8, 0x5, 0x99f, 0x80000001, 0x5, 0x10000, 0xfffffff8, 0xfffffff9, 0x400, 0x200, 0x6d, 0x74, 0x9, 0x1f, 0x80000000, 0x80000000, 0x0, 0x5, 0x7f, 0xfffffffb, 0x80, 0x5, 0xfffffffb, 0x0, 0x2, 0x2, 0x4, 0x1f, 0x7, 0x4, 0xfe9c, 0x3, 0x20, 0x3, 0x10000, 0x1, 0x5, 0xb43, 0x6, 0x1, 0x2, 0xfff, 0x5, 0x6, 0x7, 0xfff, 0x9, 0x7, 0x9ac1, 0x3, 0x2, 0x1ff, 0x2, 0x3, 0x1000, 0x2, 0x5, 0x3ff, 0x4, 0x6, 0x2, 0x7ff, 0x1, 0x8001, 0x93c, 0x7, 0x2, 0x2, 0x80, 0x7, 0x9, 0x10000, 0x8, 0x80000001, 0xff, 0x5, 0xda, 0x2, 0x400, 0x6de, 0x0, 0x0, 0x8, 0xc8a6, 0x800, 0x7ff, 0x80000000, 0xfffffff8, 0x27a, 0x1ff, 0xdd5, 0x100, 0xb597, 0x4, 0x5, 0xaa, 0xe88, 0x2, 0xfffffff8, 0x1c, 0x1, 0x1, 0xdf2, 0x5, 0x5, 0x20, 0x5, 0x8d2b, 0x2, 0x2fdc, 0x3, 0x9, 0x80000000, 0x100, 0x6, 0xee, 0x80000001, 0x8, 0x8, 0xf7ac, 0x0, 0x6, 0xfffff800, 0x9c, 0x81, 0xff, 0x53de4b3f, 0x2, 0x10000, 0xf9a3, 0x3, 0x2, 0x2, 0x6, 0x9623, 0x80000000, 0x296e, 0xfffffff7, 0x0, 0x0, 0x6, 0x8, 0x4, 0xfffffff8, 0x80000000, 0x7fffffff, 0xff, 0x4, 0x7, 0x7fff, 0x81, 0x9, 0x1ccd, 0x7, 0x80, 0x3, 0x4, 0x40, 0xa8d1, 0x2, 0x401, 0xcb, 0x74, 0x7, 0x8, 0x3, 0x7fff, 0x7, 0x200, 0x7, 0x1, 0x7, 0x2, 0x2, 0xc2, 0xffffffff, 0x2, 0x9, 0x1, 0x2, 0x20, 0xfffffffe, 0x4, 0x7fffffff, 0xfffffffc, 0x4, 0x5, 0x80000000, 0x4, 0x3, 0x5, 0x6, 0x4, 0x6, 0xffff, 0xfffffffc, 0x4, 0x7ff, 0x8, 0x0, 0x0, 0x10000, 0x0, 0x1, 0xff, 0x7fffffff, 0x4, 0x3, 0x5, 0x2, 0x83, 0x9, 0x6, 0x6, 0x9, 0x1, 0x8000, 0x6, 0xf6, 0x2, 0x80, 0x20, 0x7, 0xdda9, 0x80, 0x1f, 0xb795, 0x10000, 0xcd, 0x7ff, 0x101, 0xbd0, 0x5, 0x7ff, 0xa622, 0x0, 0x2, 0x5, 0x2, 0x2, 0x101, 0x8, 0x4, 0x7, 0x200, 0x0, 0x20, 0x1, 0x1ff, 0x2, 0x6, 0x200, 0x6502, 0x3, 0x4282d4ae, 0x5, 0x6, 0x7fff, 0x0, 0x3, 0x10000, 0xfffffb14, 0x100, 0x100, 0x4e5, 0x6, 0x3, 0x7, 0x5, 0xeafc, 0x7, 0x5a5d, 0x800, 0x6ecc24f2, 0x1, 0x3, 0x200, 0x3, 0x8, 0x6, 0x10001, 0x5, 0x4b8, 0x40c, 0xffffffff, 0x6, 0x4, 0x0, 0xa1d0, 0x5, 0xe16af014, 0x5, 0x100, 0xfffffffc, 0x3, 0x4, 0x8, 0x0, 0x4, 0x3ff, 0x400, 0x0, 0x80000001, 0x3, 0x400, 0x2, 0x3, 0x50, 0x80000001, 0x55b, 0x8a4e, 0x6, 0x8001, 0x8, 0x868, 0xfffffff9, 0x37, 0x7fffffff, 0xfffffffe, 0xffffffff, 0x1ff, 0xffff, 0xdd7, 0x40cc, 0x9, 0x5d, 0x4, 0x800, 0x7, 0x3f, 0xde04, 0x3f, 0xfffffad7, 0xf3b7, 0xffffffc1, 0x0, 0x2, 0x200, 0x6, 0x7fffffff, 0x4, 0x800, 0x5, 0x2, 0x4, 0x9, 0xfffffc00, 0xfffffff9, 0x8, 0x40, 0x40, 0xd1, 0xa67, 0xffff, 0xe8, 0x8, 0x9, 0xfffeffff, 0x6, 0xfffffff9, 0x200, 0x2, 0x8, 0xfffffff9, 0x8fa00000, 0x6, 0x1f, 0x6, 0x9, 0xf98, 0x80, 0x0, 0x86a, 0x4, 0x4, 0x0, 0x62f, 0x4ee, 0x3d9, 0x9, 0x1, 0x8, 0x0, 0x81, 0x3, 0x401, 0x7ff, 0x8001, 0x8, 0xe26, 0xff, 0x80000000, 0x3, 0x7fff, 0x5, 0xba, 0x2, 0xffffff67, 0x0, 0x3e, 0xeb1, 0x1, 0x6, 0x9, 0x3, 0x4, 0x29409cb6, 0x8, 0x400, 0xffff, 0x7, 0x7fff, 0x8001, 0x1, 0x68, 0x3ff, 0x9, 0x92, 0x5, 0x5, 0xfffffff9, 0x81, 0x0, 0x5f, 0x6, 0x2, 0x0, 0x81, 0x0, 0x400, 0xffffffb6, 0x40, 0xffff, 0xfffffff8, 0x0, 0x9, 0x6, 0x40, 0x40, 0x80000001, 0x6, 0x5, 0x5, 0x5, 0x400, 0x8000, 0xffffff68, 0x40, 0xeb2, 0x200, 0x5, 0x0, 0x2, 0xa149a25, 0x3, 0x0, 0x1e1, 0x8000, 0xffff928c, 0x8000, 0xa74a, 0xfffffffa, 0x5, 0x9, 0x1000, 0x7f, 0x3, 0x0, 0x8, 0x5, 0x1, 0x417, 0x5, 0x1, 0x9, 0x7ff, 0x700, 0xba, 0x7, 0x2, 0x6, 0xfff, 0x0, 0x4, 0x1, 0x1, 0x80, 0x5c9, 0x10000, 0x6, 0x8, 0x1000, 0x0, 0x4, 0x9, 0x81, 0x7, 0x7, 0x4340, 0xfffffffa, 0x81, 0x1, 0x320, 0xfffffffa, 0x80000000, 0x4, 0x4, 0xfffffffb, 0x8, 0x8, 0x1ff, 0x1, 0x5, 0x2, 0x9, 0xba, 0x3, 0xfff, 0x487ff1ae, 0x100, 0x9, 0x1, 0x9, 0x4, 0x2, 0xfffffff7, 0x3f, 0x0, 0x1, 0x8001, 0x1, 0x1, 0x5, 0x8000, 0x0, 0x1, 0x0, 0x7, 0x3, 0x0, 0x3, 0x3, 0x0, 0x368, 0x401, 0x80000000, 0x9c52, 0x6, 0x0, 0x10001, 0x63, 0xa750, 0x8001, 0x6, 0x4, 0x7, 0x9, 0x9, 0x1, 0x4, 0xffffffff, 0x1ff, 0x6, 0x6, 0x6000000, 0x2, 0xffffb929, 0x2, 0x1, 0x80000001, 0x8, 0x8, 0x7f, 0x9, 0x5, 0x2ab, 0x6, 0x4, 0x80000000, 0x10000, 0x1, 0x1, 0x7fffffff, 0x7fffffff, 0xe4bc, 0xd0fd38b, 0x4, 0x45d6ceae, 0x3f, 0x1000, 0x15, 0x7, 0x7f, 0xff, 0x0, 0x80000000, 0x4, 0xfffffffa, 0x4, 0x5, 0x7f, 0x9, 0x101, 0x7, 0x9, 0x6, 0x1f, 0xac9d, 0x0, 0x3f, 0x5a0, 0x7e0, 0xfffffffb, 0x1ff, 0xffffb924, 0xffff, 0x5, 0xfffffff8, 0x0, 0x99b1cda, 0x8, 0x401, 0x5d, 0xffff]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xad95, 0x4) poll(&(0x7f0000000100), 0x0, 0x3) 03:26:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) 03:26:37 executing program 1 (fault-call:1 fault-nth:6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0, 0x9}], 0x1, 0x0) [ 2119.195594][T16111] FAULT_INJECTION: forcing a failure. [ 2119.195594][T16111] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.217286][T16111] CPU: 0 PID: 16111 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2119.225716][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2119.235765][T16111] Call Trace: [ 2119.239076][T16111] dump_stack+0x1f0/0x31e [ 2119.243411][T16111] should_fail+0x38a/0x4e0 [ 2119.247822][T16111] should_failslab+0x5/0x20 [ 2119.252320][T16111] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 2119.258034][T16111] ? __kmalloc_node_track_caller+0x37/0x60 [ 2119.263837][T16111] __kmalloc_node_track_caller+0x37/0x60 [ 2119.269465][T16111] ? create_monitor_ctrl_open+0x169/0x6c0 [ 2119.275181][T16111] __alloc_skb+0xde/0x4f0 [ 2119.279517][T16111] create_monitor_ctrl_open+0x169/0x6c0 [ 2119.285067][T16111] hci_sock_ioctl+0x1a5/0x750 [ 2119.289751][T16111] sock_do_ioctl+0x7b/0x260 03:26:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149b00, 0x14a) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x16e201, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) write$P9_RRENAMEAT(r4, &(0x7f0000000380)={0x7, 0x4b, 0xffff}, 0x7) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r7 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r7, 0x0, 0x4240a2a0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4$inet6(r7, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x1c, 0x800) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000260000000e0001006e656b6412300b192a83180600000000000073696d30000008008e00000000000c007e0000000000000000000c009000"/78], 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001d607631cca1d36262c8d990260000000e0001006e657464657673696d0000000f0002006e001000007673696d30000008008e0000cd000000"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x8c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3f}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x10) [ 2119.294255][T16111] sock_ioctl+0x4aa/0x690 [ 2119.298591][T16111] ? sock_poll+0x2f0/0x2f0 [ 2119.302999][T16111] __se_sys_ioctl+0xf9/0x160 [ 2119.307607][T16111] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 03:26:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) [ 2119.307619][T16111] do_syscall_64+0x73/0xe0 03:26:37 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x6, 0xc080) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r3, 0x20, 0xfffffffc, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x200040c0) fsetxattr(r2, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)='&:$($]^+++\x00', 0xb, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) dup(r1) [ 2119.307631][T16111] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2119.307641][T16111] RIP: 0033:0x45cce9 [ 2119.307653][T16111] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:26:37 executing program 1 (fault-call:1 fault-nth:7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2119.307659][T16111] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2119.307670][T16111] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2119.307676][T16111] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2119.307683][T16111] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2119.307689][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2119.307696][T16111] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c [ 2119.553509][T16138] FAULT_INJECTION: forcing a failure. [ 2119.553509][T16138] name failslab, interval 1, probability 0, space 0, times 0 03:26:37 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="0000ff00003f000000000000", @ANYRES32=r7, @ANYRESOCT, @ANYRESHEX, @ANYRES16=r7, @ANYRESHEX], 0x7, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x231022a2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0xb, 0x201, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0xa}, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=r7}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @u32=0x6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x81) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="286900000d14fd0008003e00000000000800030000ff0000000000000000f8b82f87e855424e42410ae1de964652b5d0d05a5a29a4151c41297aa804fafcfff6a202a72d43"], 0x28}}, 0x8094) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) poll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'netpci0\x00', {}, 0xd42d}) [ 2119.602828][T16138] CPU: 1 PID: 16138 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2119.611188][T16138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2119.621264][T16138] Call Trace: [ 2119.624554][T16138] dump_stack+0x1f0/0x31e [ 2119.628894][T16138] should_fail+0x38a/0x4e0 [ 2119.633308][T16138] should_failslab+0x5/0x20 [ 2119.637802][T16138] kmem_cache_alloc_node+0x64/0x290 [ 2119.642994][T16138] ? __alloc_skb+0x94/0x4f0 [ 2119.647505][T16138] __alloc_skb+0x94/0x4f0 03:26:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) [ 2119.651831][T16138] ? hci_req_sync+0x89/0xc0 [ 2119.656342][T16138] hci_req_add_ev+0xa4/0x3c0 [ 2119.660929][T16138] ? hci_inq_req+0x9a/0x1b0 [ 2119.665433][T16138] hci_inq_req+0x11a/0x1b0 [ 2119.669853][T16138] ? hci_inquiry+0xba0/0xba0 [ 2119.674433][T16138] __hci_req_sync+0x12d/0x7e0 [ 2119.679101][T16138] ? trace_lock_release+0x137/0x1a0 [ 2119.684303][T16138] ? hci_inquiry+0xba0/0xba0 [ 2119.688892][T16138] hci_req_sync+0x9d/0xc0 [ 2119.693217][T16138] hci_inquiry+0x5c9/0xba0 [ 2119.697633][T16138] ? __local_bh_enable_ip+0x133/0x230 03:26:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x3c, r3, 0x800, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff02}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1a4, 0x15, 0x100, 0x70bd25, 0x25dfdbfb, {0xb, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x97, 0x1, "a3cee83623ec5ab54140bc1bcd0c2696edef6125c708c5425d6c7e305011c4007b9e94aa96c23cae2fb8bff2ee0a7be67a0cb676f5636afd4b50389b9c7e5df2cf62b0f8a7667fd39bee6ef5976828af50f9995307c8b9c8265c4d1eddd1292234ea12028c44919eed9226344a29c7c6c1a92da72715546295fe69c8c2276d68a5e265d1093993eefa86a05e3f18a5ab8de00c"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "f00f4bffb0efd4b388eec12f18fa7a0121fc00dae2b00b80d544ee4308bf64a219751679e77b934f98cbb8b42952654051c3e5843a9a7e4e5ae0d87813035123fb61dc2bd324c0a9af2ae0bcd7e93a0f9db295f3c6f7dce823a21d78cee1da7d34e2ecc586e15738abcfc8e7d6027379f1f9f8b3dc4af6650f62cafdea7d2e1eefbe28c5d3f87add6f0dda39a0276f2668a654aff0962a18a3803b07e6dfea167baa0ac86c38890641a145f13ce7e7dd1d20230442f50b1f72357b08910e0c23de65a3572a47871e4a9a7552cb199cf876c5fe1c92c734fdedfe02934c5059927638313ecb63dbf3f4653d"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "835b"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4004094}, 0x40000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = gettid() tkill(r8, 0x33) ptrace$getenv(0x4201, r8, 0x8000, &(0x7f0000000380)) poll(&(0x7f0000000100)=[{r4}, {r5}, {r6}, {r7}, {}], 0x5, 0x101) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000340)={0x80000001, 0x0, 0xffffffff, 0x9, 0x6, "9c4b704ddfed8869e09ec55f5b327d3c1a1009", 0x0, 0x14d}) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000002c0)={0x0, 0x2, 0x401}) [ 2119.703000][T16138] ? hci_sock_ioctl+0x1f2/0x750 [ 2119.707864][T16138] hci_sock_ioctl+0x499/0x750 [ 2119.712543][T16138] sock_do_ioctl+0x7b/0x260 [ 2119.717049][T16138] sock_ioctl+0x4aa/0x690 [ 2119.721385][T16138] ? sock_poll+0x2f0/0x2f0 [ 2119.725797][T16138] __se_sys_ioctl+0xf9/0x160 [ 2119.730388][T16138] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2119.736452][T16138] do_syscall_64+0x73/0xe0 [ 2119.740873][T16138] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2119.746761][T16138] RIP: 0033:0x45cce9 [ 2119.750650][T16138] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2119.770268][T16138] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2119.770279][T16138] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2119.770290][T16138] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2119.794638][T16138] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2119.794643][T16138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2119.794648][T16138] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c 03:26:38 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800800050030623e2131eb0fdeb6afcfb6af045901bdf32ae9297c926cf919bd2fed4582e273612990cb8addf089b90f469ae50deecf87defd792f1639ec61bdbb", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 03:26:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc}}]}, 0x54}}, 0x0) poll(&(0x7f0000000000), 0x0, 0x10003) 03:26:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) [ 2120.159586][ T5027] Bluetooth: hci0: command 0x0401 tx timeout 03:26:38 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x43, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d809a4f0c9dd6e132e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5", 0xc9, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crct10dif-pclmul\x00'}}) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x43, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d809a4f0c9dd6e132e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r5, r4}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crct10dif-pclmul\x00'}}) r7 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000400)="8068ebe4ab3cba57e07bff44aa3a392e47eab222f0d2c2e4c8814be6dcc9841b4a0ec6e15474171ad350c5d6f98b1a34a207e51f53c0", 0x36, 0x0) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffb, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="b211b7c209d9c50342962976fcbbab43d78b8e6efcd67580759d43400bdd25cd9b91f8e506a572cb19dcf505216fe0", 0x2f, r7) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r4, r8}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f00000002c0)={&(0x7f0000000280)={'sha512-avx\x00'}, &(0x7f0000000340)="ced0687503911010dd619ea2404f986fb660c34e32dd19efe76c6ce405061a8d155d957b05c6601477cd01fec0f6e8b8a7853b2dcbeaed9c04df404689f30e1a0908a3b77ab1ccf3a221895c9af976bdc7d72f14698b8b3c", 0x58}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCEXCL(r0, 0x540c) splice(r9, 0x0, r0, 0x0, 0x6, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNIMAP(r10, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) [ 2120.322655][T16138] Bluetooth: hci0: no memory for command (opcode 0x0401) 03:26:38 executing program 1 (fault-call:1 fault-nth:8): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0='bpq0\x00', 0xe0000000, 'syz1\x00', @null, 0xcc, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000000)=""/29) 03:26:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {}], 0x5, 0x101) [ 2120.443332][T16198] FAULT_INJECTION: forcing a failure. [ 2120.443332][T16198] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.515339][T16198] CPU: 0 PID: 16198 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 2120.523700][T16198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2120.533775][T16198] Call Trace: [ 2120.533791][T16198] dump_stack+0x1f0/0x31e [ 2120.533805][T16198] should_fail+0x38a/0x4e0 [ 2120.545820][T16198] should_failslab+0x5/0x20 [ 2120.545832][T16198] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 2120.545842][T16198] ? __kmalloc_node_track_caller+0x37/0x60 [ 2120.545855][T16198] __kmalloc_node_track_caller+0x37/0x60 [ 2120.545865][T16198] ? hci_req_add_ev+0xa4/0x3c0 [ 2120.545875][T16198] __alloc_skb+0xde/0x4f0 03:26:38 executing program 1 (fault-call:1 fault-nth:9): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2120.545883][T16198] ? hci_req_sync+0x89/0xc0 [ 2120.545898][T16198] hci_req_add_ev+0xa4/0x3c0 [ 2120.545907][T16198] ? hci_inq_req+0x9a/0x1b0 03:26:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2120.545920][T16198] hci_inq_req+0x11a/0x1b0 [ 2120.545931][T16198] ? hci_inquiry+0xba0/0xba0 03:26:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {}, {}], 0x5, 0x101) [ 2120.545940][T16198] __hci_req_sync+0x12d/0x7e0 [ 2120.545949][T16198] ? trace_lock_release+0x137/0x1a0 [ 2120.545971][T16198] ? hci_inquiry+0xba0/0xba0 [ 2120.545981][T16198] hci_req_sync+0x9d/0xc0 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2120.545992][T16198] hci_inquiry+0x5c9/0xba0 [ 2120.546005][T16198] ? __local_bh_enable_ip+0x133/0x230 [ 2120.546015][T16198] ? hci_sock_ioctl+0x1f2/0x750 [ 2120.546029][T16198] hci_sock_ioctl+0x499/0x750 [ 2120.546045][T16198] sock_do_ioctl+0x7b/0x260 [ 2120.546061][T16198] sock_ioctl+0x4aa/0x690 [ 2120.546075][T16198] ? sock_poll+0x2f0/0x2f0 [ 2120.546084][T16198] __se_sys_ioctl+0xf9/0x160 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x10, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2120.546097][T16198] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2120.546106][T16198] do_syscall_64+0x73/0xe0 [ 2120.546117][T16198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2120.546127][T16198] RIP: 0033:0x45cce9 [ 2120.546137][T16198] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:26:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0xba, 0x8, 0x0, 0x6, 0x11, "ba9385c9045e1c14"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}, {r5}, {r6}, {r7}, {r8}], 0x5, 0x101) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000000)=0xa) [ 2120.546143][T16198] RSP: 002b:00007f88d04f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2120.546154][T16198] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4c01, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {r2}, {}, {}, {}], 0x5, 0x101) [ 2120.546160][T16198] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x541b, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2120.546166][T16198] RBP: 00007f88d04f6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.546172][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2120.546179][T16198] R13: 00007ffc76f56a8f R14: 00007f88d04f79c0 R15: 000000000078bf0c [ 2120.637726][T16198] Bluetooth: hci0: no memory for command (opcode 0x0401) 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x280801) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRES16=r5, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d3000ec08008e00000000000c008f00"/75], 0x54}}, 0x20044004) poll(&(0x7f00000000c0)=[{r2, 0x108}, {r3, 0x1000}, {r4, 0x6402}], 0x3, 0x2) 03:26:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}, {}, {}, {}, {}], 0x5, 0x101) 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:39 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x28000, 0x0) syz_open_pts(r1, 0x698442) 03:26:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x6364, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0xe01e, 0x0, 0x2000, 0x1, 0x2, 0x0, 0x1, 0x1}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x101) 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000380)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000380), 0x2, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000e02b000000000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x4a, 0x3, "0cd3168ab04f1db30df827f06622c43123d2d46a34938335d72bbe45c86736284a45b9dab3e7e6701da2eb382380ff7a0d9b0178e3d52f28aae1252c7f60a11a0643bface38d"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8090}, 0x6000c810) [ 2122.228971][ T5027] Bluetooth: hci0: command 0x0401 tx timeout 03:26:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x101) 03:26:40 executing program 3: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x40, 0x6a54, 0x0, 0x4, 0x4}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x17) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000a80)={0x934, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffbf}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffff80}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xaf67}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x1000, 0x20, 0xff, 0x7b52}, {0x40, 0x52, 0x2, 0x10001}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xa0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9e9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x934}, 0x1, 0x0, 0x0, 0x4050}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c5da976fcb1ff0500000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) [ 2122.336988][T16291] __nla_validate_parse: 10 callbacks suppressed [ 2122.336995][T16291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2122.380584][T16291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2122.413884][T16300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1, 0x20}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETX(r8, 0x5433, &(0x7f0000000200)={0x6, 0xfff8, [0x800, 0x2, 0xfff, 0x4, 0x7]}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) poll(&(0x7f00000001c0)=[{r6}, {r7}, {}, {r8}, {r9, 0x2}], 0x5, 0x101) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x98842, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000240)=""/92) 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8933, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2122.581795][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "463c0d9a173fd056"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x101) 03:26:40 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000200000005070000000000005c1600000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:41 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={'bridge0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8980, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:41 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/ptrace\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r9, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) poll(&(0x7f0000000040)=[{r6, 0x8401}, {r8, 0x3100}, {0xffffffffffffffff, 0x1204}], 0x3, 0xcb) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0xb, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) [ 2122.959142][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:41 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8981, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2123.112831][T16354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:41 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB='\x00?\x00eth\x00'/16], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2123.249374][T16380] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) [ 2123.376488][T16387] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:41 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2123.528948][T16401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2123.677579][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:42 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240)={'ip_vti0', 0x32, 0x34}, 0xa) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000001fe80280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x410001, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) tee(r9, r10, 0x9, 0x8) 03:26:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) [ 2124.319296][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:26:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:42 executing program 3: pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{}, {}, {}, {r1}, {r2}], 0x5, 0x101) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000500)) r3 = socket(0x1, 0x80807, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x72) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES32=r5, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0200000000000000140012800b6dd47d61f86dcecd2377cd6163736563000004820a0000000500", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0xc15, 0x70bd29, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r8, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) 03:26:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448de, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:43 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x11, r5, 0x1, 0x4}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) 03:26:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:43 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x5c, &(0x7f0000000240)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x80000001, @private2, 0xfffffffe}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000003c0)={r10, 0x2}, &(0x7f0000000400)=0x8) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="a5069398b9a5efded4f2a2306e1fb3c7309436ff447854617d64dbba023ac86a9e5c31b803135a03742af257d84def7ecde89672259cda0a8cd197ae890367ede2b70e6a52d3ce587a75a9c9befb2473e84e6c58418871678d85a13fa4b59fa6fa830c0994d6d19ae460a6d7ace3a5574d05b138bf7fac47b2a1820b6785fc39a8a4ed1a89a11d9c70c636e13831c1ec9fbfc17123040df3784866cb154c6f3566f8dba3167ffb1c0161630381a93959212391bc481a175058bb5d44977bf92516b4588256b099f51e1c932e0000000000000000"], 0x3c}}, 0x0) 03:26:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448df, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:44 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000240)={r4, 0x8}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r4, &(0x7f0000000040)=""/190}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r5}, {r6}, {r7}], 0x5, 0x101) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r10, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000036c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3424, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_WOL_MODES={0x108c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x716}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\xb2\xf7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&$+{,:+[-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.]\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x10e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x33, 0x5, "75b99e0125ce859fc9d2f884cdb902d9712850c87a122c0df5fae2a81d23ef0d87a0a79e7a5ea773810f89c63b1a90"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "b3a93fb722d4165a4f5bcda0fd12838508f15de94e83ed5d1a0a3cb391f0d023fc5f132b2e1aef6b233218cf0c2804948c01604a2317bffddb9df5bbef0e1aaefc53af85dd2b102aa2d6b9cd4bb36646077b459d2d558e53a7978293fcfb8e5e0b0ab089fb2e9196a9d592af5118adaa74a6d71d5506d3c5417be730438f35eb6cd1f068a58f65afb092b69caf2dc9712a125b6ff1a305648e5e8103190500db2e05a127e0fdf96edc3466c7932db2aa7c48776a32652909920d6e8d9dba94b6c19920239d0495e1294e13ab11644d47335caf75f163d2c746b44510875cf3d151684d8e6e2fe43f1d529c4ea07a830f7b211c0bdcbf51388d141b882e2dc318266d1d7d80daee640297732373fe88287c60d301ff64240abf7140fb759df528beab57ae06f04ce363c8f20f2ad0925d70797d6b386811c6b47ab755fdf71e9b4305b219a1b198d191670d35a4a58fd31def47b23fe81e854ed524d82a696d927133ec8c9be3d677a93dbf2b557b6eccd25ff619c7a2741455a35baf8e610feae74d9b6fa00235a6db2d52b78064b295056e23a3b3bf3c6ffea6ee4dd7c187a05378eabb35ed600e6196fad8e26bb1973665a9d837fea7a9859c262d60702d75d63698b89eb4566919f203237db8a362b8d49a448e05676e7403a941eda53e9dc544df88c8c70e3d47a04cc87dcd1c6a80e4ab9a4726dd05e54097d457adc8289207bce9515df3b7fbcfa4feb6bf471eda8e6e78692590d5219f489b50e5d2ded68102af4af4a508c6efe7fa9a76c3c3ad5e742aa78abd06e53d391b60f34ba58a7d6e774ee08635b5c10157fc9b727d43b687c2a367edb2611bdbe9d477a7437c5ca66a8755426ee11c7621ebaeee7583cf1c3b0f8840f182e6f1501b259f6b2be58b2534b60e98466d7367d792f59cec4898bf8760001043d0e841c69b12aee9b5f400cec4eadf45b7733a013e078e1c98151711c44108a5e329f6d370cabca2e7efa407c895507e184c77450d1aa11cad54edbe727997e5012347b3b3a41033a93d40d4f3b418012a9f586fb61769af20b4d12cce2c9d9cc8a465ce7da84a70220b8b984095ba394c082b020a5744700971ef4e7b6685c5695d42b94a7608b7fbb20b7dff06ba23344b5aff9e2c063a86f7f3131dbbebbd0cff6e568e48152cfaece25a8bc9db59828bda95e402c6c7a6894b379f18144ad04a3085c0b498eb6034089c92cbf04ad53f4ee75c9f23a3505ea6ceac5f01e02217ebbfe0d6ac20db7e222c5c6ba4b974f61b21ae830fe4a950c38e457cc312fdc3705ff62d38a29e6139701f31927851068de7566e309e316833e9ed4a38b56a8f9ea36ed078c10824b1fae83beb45640e7f72423d9c1c9800b6477cddeaf4dac8dbd855f802efb71df5f0f41855c437b8a3ac6548aa7e574cf0ff1163b3bef0787619f6576ae29adce9bf8ddc8d3396a187d07f15dfb019fb428a3fea1b57607a689b2f7f2d7b09c20fa3a4e58078c98cdbfa5cad2edd52404010e56d7abdcc7538ff3e3bf14b1a0ec0bb215a038c09d57c3b73f8c9f9d79533093790af1cf156e3875d0c94cd8390dba82a5713e3eecf00f0ccdf8e2659d99d2d2d67ec9092708f34ba3a76a5a600a89b73b425f0c71cb26283a4840b950625adea6351e1f390570e6c530e8d53219fa4157b32841455bf0bd17371ef296105a15ed193ad533ada048e99eb8d459bef882b5b2b552b8c7a4c92e45448de4434393bd9bed236b52aa411ad6881a7be346c5514235867429f6dcdf1e44a8776a456f1045b25ad797e3fbf14316072581ab5eaf0a96b322a7ab421847303f8b2edad009582715c8d74f89a3cb7c69fbe030b1f906833a4d7bf75b5d19bdbd0f780821c3cca829b10408e9f6ce1d71a921534c5fd6ea55c24e4ef17a8eb12ffec3a8ee8bff7cc306ea3fae4bd69ec05632e749ef2cafc241c59eddea27d9e3e72df560fb01c7d4130884b66d5968ad964579c33e88a21dbec702e60c075fc9c9a13c6565f7231f0357340ab98d07ff77760b077c6bdd36dcd253b11321ab5169e593fbd29c503cf45db80bf695ed22331fe976c4e1b69eca12137a3b13d3bebec6a9be72d3b4d6c174b5b233e042fc6017191a5e09333c852d6d828209211d26a4d7ae91827211bd8a1969b059383acc0e7c388837cac2c3a60d4aeefb363c8a641070023a513fad1cee9859a467c28a9acd6e9ecdae680dbffb635365850c756057fe80a8443fc7faf156db7c053f8c6e8749a7100013b3fbca5d649eb38240b92269779bc5e1dd33edb46828b85efe9abc76b75f28e6db83f220fc36e83e747ed6e5eb9492a768cb7896d0c1e87604e16843b9028e60a1c2be5f995b3e8cb19753c0aada5579714ecae69520b900a5c5634205aeb7c076c70e6397492a8152b81984126e2ae2a51558348a6009e46f1468397d10cb4d2cf35a75f4e90b8abc15e2bff59deaed97cd5db711a56e43b9487de500d1e026a1f79cf00a8499936ebae5bf5f6c187c31f61432c37ade533720e62f51b9d3c77dae3730a0cf5bce4b16145951b31cfe6073eee6e997cf8ffb82e6d622b78d1a0751e60cdd9e224c05de3e8b0a7be119caa8010649eb8ff0ffcc35b930c62ec859ced7d06520147ca9d1cd979f597ae7aba7e7cba08aa5e913ec17c1741e4ee8998885f5fba858337dd97ac5dede74f1be1b0da5ec78a0e42eb530dfec7edee0236026c5a09e8ee7ee1d133c00612c3f64aaaca52da6dce7be04e3b3a7952027c7c03035755650b7c45eb3ef318261cebaa6754a4a260970b43a01f8a0c2207ca833f3426c5443f1125485634b44e4de45b1b9c7df6d96a1c035d91148a7ab99b4aaa369ce716f37f4f5ade3ec33f0e38dd5f2467d1274111969c2622b2ca2f55e95b727647ecc4848cb1cb8bbb1e6c81525ba3dd68de19eee249ce94b1841e71083ee29facd568e46a53169a9e79e5e8ecd1419fd209a82531ee89c843db86637383a931f6b08a695c76ac73bb2d7dc4273288839ad6ae08b161a45df5a2c4e8db8f2c6b6d6c7204d245c19fbd55dfbf57810df9a636ad2de4b3809837d4672b1a98e611b7175264486a3b17830ae96db14b70231b5ce1b466566ba5c1074d02b3f081143d1391da0d06e6b4f6d770d6ba574a85e2da54f4270d56b4e6a694d52acd7618122648dff9b1fed9d4379994810cac41444da58e28a984e65c9a586a1040143131dea484923f683fb9e111ce87f91489a7772150d5837b38293f467ba8c49899fa793c6d922fdd4c0560f480aa6da31876e633b6cb10489c986ff03cb7fabaf26e208ada4c0e4928725f5e9b47e4b0fdf69011fc6b48a423b9a1e30462bbd1eae96b3f93d48de47f8aca9ea6c4b7afe1dedce3fc78bf6cc710f7a558a89a3c957857ba606af7f6c08fc589cb27c9fdc6e8656b2a333fa8ed178ef554deb84ee7dbcaf70b11cd632856487011ac2bfc84c9b6264e27a3fe47796f8f855a2f52c32563267ed140cf613c708207812faa8abf9ca4cf9b891d2798e461085f1ab7040b6612318bd36a439b36c17685042c3da32068343207afc6c7c339cf97ee67b52933cb875f5b6a8af91f91a315db93ee9eff5984d2cd79e191bc5e8dd18b5069eeb3f3673b1477935f462af0e2fd683bfa9185800db2b9ea6f0c2b78c0de93695db5f758ff2144fcebe6534c575478b0cbd83d8d38dd22d3a32cfaa9457e809713e90f605649876763c7d9c0638723a3122a7dd630fbaf9649ba208701362df6cea3606fae444a27e67d79f8b34c77a57391459daa398ca845ad3792090a69a99c504ad57e49da4766fc76e125205720f084f029f99a95a703ddace495565cf335542083c5d416b975f734b7b8e3b2ec99d36bd8df759dc50301585d96ae9b18f631a176155d28da7c77a4b9896c135d3bb994f7e40c6ca2180261dc0e6c15e355f585b09e6d1e33d0b131ea1a081183120ae732ddca002c924622449396f0d1022fda678bb88270b9029218e41c10324443a71a7492c85e39f31b55be59167b6143707f310c8c8e2108a1ac856c20d8b603431f028308a0964450648c6b85a98f6f5cd0cda01cdcb5b4fb82a25a07280e3539e5e4d182b1a7aa438285fc201d1d4f9710050e47b4f73e3bcaf5a54fa3dc01592b7ff6e1e396d6b931f26e3ee5c6fe6b91abf361ff08a4487e76ba075f3aae4db61e236d93e84900d89df70a418c3017c5b6de192071a284709b45373acf18519942329c27b11b4fdd51f4782a445433d6d0d6362c8b8dcc80269474847e615cd4b6be4a406871cc8271d854ef2732c4a5c44835c3eb88140e070bf1df997b43ad539db598a360368b196dcb37e63888b972ad2b3d9c144ea3743e21af6da6ff75f0a8df1b541b0af1339c201c99577433eedfd66494fa6aa159ea97b99cc977a286e1d253515ad7389bec22490b818aa27a6d0e01c028e7653f1f5a24a9e9f42e9e4782ae981342cd0df2c4f6db029c75f95c65e2f7d19b2680ee371aaea2cfa5c2bff8b7c122b6fba9880ead59d459584dc3f3cdc9ea2310856a1f0abd048ba46fcec7042c034d8efdf6511b494a0ea4ffa58bd05bc20a645fc09a1c6c0a0648c0667463da922a85a7c83b05dd2f87ffde8c5982a42b130229c89aecbc89f1dd0f5d7f7cdac21fd68b903e11d4c937db1d9105b03cdf53f2a2c9f94573185bbe3f5aef39a1976da96463ff2633bafe09816a572b8fd717ef6fcc5a640a5111682e10722f3ef572e551105618e00e1d14d319835b93f9d4945e46f95bd52d4e59405b81ee66f6d6790e6fcdecae227a1610a514a3048245f240ac6f3453f3b4676c7b99a148e36c7afc2ff05c5483507fe620b73bb02b2c27e91e250939831d1107c2ba9ed6132659809669995e1f2100b14e4d19c062cf3b67c960c4b09df45cdc55648a11194eaf7c0b14ae7a1ad459448cab7cb92785efe9041e6051832ff3768256327a9f448f6080ddb76b041a0b56081b6ca1155c1f2bf76c1806375b07f6bf70f0595e5c067168ae60ea281b9dd0705c87202241969093f078bf227f55ff8a25eef93db8f0e9ad0b86758bdd129c597a61dc250708ee9b9ece3f8453403b1d920846dfb569e3e8f79eb83e27e23f653dfebc0a769979c694d57a3de2d4d21d59eccd5f7c466cb236218e99d212a1761e6d777b04dd85ff4f6768f2cfcdb3c53db7043b0e5f5f0be3556ddcac261498b836b59787e1b81ede5e0253f94128c63b0b57bb1d5fc30a3abe61adb70cf0dd264f9940b5804317500663d5c1a8e184a29f73989a6a2789136c463b3f6fc9ea5725b2f87f8dcfd630bd986e4872a0c73a4490fbf492e1adfafa63edf8294fdb644d0415c5c47d989b8c5a3aa9ddca4ec0dc8e571106a839a4c5ed608fa8cbea8c39db7c6ee27090726c6476cc8a6b9774888a6db13e8de2af39c3cdc67ffa8a5a80b004a117b083c977907cd39e7910bd55f306abafd02aa07cfec78431cd949f36345ae2de327dd4b328aa1b363fbee117c1dce10129b7d8699eb1190065d8ce95cb21511f1066f8aa39ea57126d90b0c004e42569418426822166fb51380af1cd8f1b2a7e2bb970eea77e45db3787c7f62b287cd8f10f36bf6d2068cc5aac22ce052b4f7ba6bc660fecaf07f76771cb8d4670b9c3f01003fe28ddebd24df527a722b88bda1797bd675ffaa3acea638c9f081f727cbdc0338440e9ee2f925703eb6fbc23deb007b7347d80fe00ec0a793a612b6e465be732f9ab7c3b5b2b1867803e5e9278d008fe5562e2"}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "53292bebed843fec8639d0111716142db0105d9a43ac4300bdf3c13c0150bdd520f49301978e3b357baa8829a6947d5e6b4f26d6a63d43a7b35ace7af13d85f89491605346e0debfdb4447eca79c46013a037272951930978b1d06188a8ac6c7d283113bcc1bec6d3517fcf46ce7f18ce50cec1404df53650775a7366eca1337ac45850e662258292ccf61854074868400a1c1f59f85e5b0fd4ff43be9"}]}, @ETHTOOL_A_WOL_SOPASS={0xe1, 0x3, "ddf4a9bfc2a96e86de43084b4d3ec33f776cf1f8ab9f988aad2be23117eae6fbed2b430b21b845a29942368f002b9a9b1e36d7392a17f5ce635aa78d1ce6e8eac618e1348cefde1359127a16acb25dabee95cf6d241cdfceb8db18d9c9ba02e3744591a252865655552796d3b7fbc21e42d75bceab70d8515ba429a4a23f483ea6a6eeb51d1018659ec2ebe5b9119a331a95702587537867700bb67c56ce104b03310743029a647e7760750373d0e3b94c4336a8ceb3841c24d16fec41ff544553f365529c01a3e50b77cc749bc2be96937cea09b57605293de59390bb"}, @ETHTOOL_A_WOL_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0xbd, 0x3, "8134bdabfa34e995dd5bb6109812ced0e08e6a084fb7e6b2881ea4e0ac1676e416d26c7a500ec2a41de15ab8f3a00565d1472f82882790e6bc61af746893773927a7d871d849f38f0c462330e388f38723ec2247e9f956982e394db35fbabd4f76677832b0eba22a4c1766757b045449a53489b15d4e49444455d5f1e757e4298b03994a688ea630b1b8bf52a7c43c2665118908ffa0b05915cf4a9cfbec401349fe825c31ff8851cd56f540e0d7922aa2608fe57de6a1852a"}]}, 0x3424}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000000)={0xfffffeb0, 0x0}) 03:26:44 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x48}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) getsockname$l2tp(r8, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xfffffcec, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 03:26:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '.{\x98[(@:]\'\x00'}, &(0x7f0000000340)='/dev/full\x00', 0xa, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000260000000e0001186e657464657673696d0000000f0002006e020064657673696d30000008008e00000000000c008f00006ec31d284bc2a216737d35000000000000000c"], 0x54}}, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/btrfs-control\x00', 0x42800, 0x0) accept$nfc_llcp(r6, 0x0, &(0x7f0000001b00)) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D', @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf250600000014000600fe80000000000000000000000000001f34beda0000000000000000000100"/62], 0x44}}, 0x24048005) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x74}}, 0x4) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x10) 03:26:44 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newrule={0x0, 0x20, 0x400, 0x70bd2d, 0x25dfdbfb, {0x2, 0x14, 0x14, 0x5, 0x7, 0x0, 0x0, 0x0, 0x10000}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x0, 0x15, 0x3}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x0, 0xf, 0x200}]}, 0x60}}, 0x0) 03:26:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:44 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x404080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0xfe36) [ 2126.398657][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:26:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x2008000, 0x4) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000040)='+[)\x00', 0x4, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x1000, 0x2, 0x40, 0x9}, {0x6, 0x40, 0x1, 0x1}, {0x5, 0x37, 0x4, 0x80}, {0x7, 0x1f, 0x5, 0x80000001}, {0x800, 0x1, 0x52, 0x10001}, {0xd6, 0x8, 0x1, 0x2a}]}) 03:26:44 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000200", @ANYRES16=r1, @ANYBLOB="01000400000000000000260000000e0001f56d657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c52961071000000000000000c0090000000000000000000"], 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x400, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x10200, 0x0) ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000000180)=0x2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) 03:26:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000080)={0x7, 0x5}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x3) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000140)=@v={0x93, 0x5, 0xa0, 0x18, @generic=0x4a, 0x0, 0xf800}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000100)) 03:26:44 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x400000, 0x0) recvfrom$rose(r2, &(0x7f0000000300)=""/75, 0x4b, 0xb8b9e8864533dca9, &(0x7f0000000440)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000240)={0x2, [0x0, 0x0]}) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010077657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r1, &(0x7f0000000200)=[{0x2, 0xfe00}], 0x1, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x4, 0x1000}, {0x0, 0x40, 0x1000}, {0x0, 0xdb96, 0x1000}, {0x1, 0x3, 0x800}, {0x3, 0x8d7f, 0x800}, {0x0, 0x8}, {0x1, 0x100, 0x1800}], 0x7) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/110) 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:45 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 03:26:45 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r8 = geteuid() fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r8, @ANYRESOCT, @ANYRESHEX, @ANYRES16=r8, @ANYRESHEX], 0x7, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) setfsgid(r10) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, r8, r10}, 0xc) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 03:26:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400454ca, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:45 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) syz_read_part_table(0x80, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000000)="352959caf7e573c2284f9960f40e964fe23c6d70e382c1394408b31d6654441307ac99f7689bebf28f8c5d2a796179e37d215ea19ae11d24cc47665ce57da4b677477176a5de0ca28b54d3c516e7ca537afbeb01a62b9f752144f2bb99a638c39f52d04dbe3fabb107806d8c9e213054410a15c6", 0x74, 0x7f}, {&(0x7f0000000080)="b84ec6e1267222b58472b2e274def9621112d8b3ec7ec790debaca08efd797a3b0a7478809a057fb15ca1a7952d0b20eb805d7b7be4464d2243566915704e5cb0550c291b218e4235456775c0a3f52933db14d22893c9bebdea4ff4f18ccfb9662825e9010a3783c96b6f524db40334ba435568b60c350a3ed10335b8cc287023b3390b0e2bda4e49e510d6d7cf520e361a4b89efb6d15db6f704c005f55b37e434e9abc228b7e9857655bbc10e387948c1629fc318c619ed5ea30aeeea5e7ce462e1e1910e189c4a3738cbb99f5c74f4081b88010038d128c242758062e146398d19bbd06a77584c65680", 0xeb, 0x7}, {&(0x7f0000000180)="500eb3cefe9ea01b7a9e8426f4180ee96089ba3c564a9cf87e2b05f3223e03e2e2a379d34f959bd628c83d6b443510839bb88c82071efae43fd1d1f0d096598a8cfb6871fd4b6301aeb0fac3c1bdf10535c4ba82f72e1c50f3786b4b3b70cab369343a87fe78169f13877bb15b4e88d1fe8334c2bb2be7975c1e10b048fa8de54a3041bdd73f6bef9d09abf30600826316642ba78e55445af69e799f1e7fd702d47a8435664350c44d49d31b57209d8a96a1471befbcb4154ed241642811f1b6fe03c829d5c05bd1c3e9c749ee06564234", 0xd1, 0x8}, {&(0x7f0000000280)="5952e0aa2efa578173ab9b3e920b7cc0e1b3539ee6050eb5b6e1dadbfa73864e4d76f2662323f9e7b3d82a778bf746009b89119c41ec545ad8fca8ab37998a92ab06fbae9f5592f26782e75cd73867c0c4c6", 0x52, 0x1}, {&(0x7f0000000340)="2914f0782da23d627c9b03822bff63fd96a38d2832bd700583c38c8a77ce1c2adfccb62f3df615092e1d8762e2ed464640d9807b723dbdbaa8125436f4be91948fa75c3d83ebc882886574146d616084eb02fb5299e5b1a04b", 0x59, 0x3f}]) 03:26:45 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000300)) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001c000032abc4d72519363ff96bd3ea0126bd7000fae1df251c100000", @ANYRES32=r3, @ANYBLOB="0100200108000a00ffffffff08000b0000020000"], 0x2c}}, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000240)=0x1, 0xffff, 0x3) 03:26:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000040)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r7}], 0x5, 0x101) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000001c0)) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20a400, 0x0) statx(r8, &(0x7f0000000200)='./file0\x00', 0x2000, 0x80, &(0x7f00000000c0)) 03:26:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) [ 2127.421940][T16720] __nla_validate_parse: 21 callbacks suppressed [ 2127.421947][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:45 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x200000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r4, 0x0, 0x4240a2a0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @local, 0xffffffff}]}, &(0x7f0000000140)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={r6, 0x20, 0x4}, 0x8) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40186366, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2127.612035][T16728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d000027c6d47e00696d30000008008e00000000000c008f0000000000000000000c009000"/78], 0x54}}, 0x0) r3 = dup3(r0, r1, 0x80000) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 03:26:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) [ 2127.770800][T16756] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SET_FPEMU(0xa, 0x2) 03:26:46 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000500)={0x40, 0x31364d4e, 0x1, @stepwise={0x7f, 0x1, 0x2, 0x9, 0x5, 0x6}}) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x236}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) sendmsg$AUDIT_LIST_RULES(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d1) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) [ 2127.830134][T16756] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x20a080, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}}, 0x54}}, 0x240080c4) r5 = pidfd_getfd(r1, r3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="b9c524aa41d9a5ad85caa352d7158250", 0x10) [ 2127.956837][T16773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80086301, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0xfffffffffffffe1c) [ 2128.116507][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108906, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000280)={'veth1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r10, 0x0, r9, 0x0, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={r0}) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYRESDEC=r5], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000140012070b0001006d216373656300002700028008000200", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) [ 2128.468645][ T5027] Bluetooth: hci0: command 0x0401 tx timeout 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) [ 2128.530082][T16819] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:46 executing program 2: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2128.578484][T16825] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8041) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@hyper}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:46 executing program 2: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2128.722708][T16837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:47 executing program 2: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) [ 2128.854207][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:47 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x2, 0x0, "df6977"}) 03:26:47 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x3, 0x0, "df6977"}) 03:26:47 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x4, 0x0, "df6977"}) 03:26:47 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x5, 0x0, "df6977"}) 03:26:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, 0x0) 03:26:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, 0x0) 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x6, 0x0, "df6977"}) 03:26:47 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r7, @ANYRESOCT, @ANYRESHEX, @ANYRES16=r7, @ANYRESHEX], 0x7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r9) setfsgid(r9) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, r7, r9}, 0xc) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 03:26:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, 0x0) 03:26:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x6) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x3, 0x0, r1}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000003c0)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={r4, 0x0, r1, 0x3f, 0x80000}) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'vxcan1\x00', {0x5e}, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000340)={0x0, 'batadv_slave_1\x00', {0x210000}, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r4, 0x0, r5, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r4, 0x0, r3, 0x401}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r4, 0x81, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r4, 0xfffffffffffffffc, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={r4, 0x8, 0x200}) 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x7, 0x0, "df6977"}) 03:26:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0xba, 0x8, 0x0, 0x6, 0x11, "ba9385c9045e1c14"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}, {r5}, {r6}, {r7}, {r8}], 0x5, 0x101) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000000)=0xa) 03:26:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}], 0x5, 0x101) 03:26:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x8, 0x0, "df6977"}) 03:26:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x9, 0x0, "df6977"}) [ 2129.890818][T16927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2129.924031][T16927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:48 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 2129.944378][T16927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2129.957799][T16927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xa, 0x0, "df6977"}) 03:26:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) r2 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r2, 0x0, 0x4240a2a0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5, 0x1000, 0xff, 0xffff, 0x3, 0x5}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r6, 0x5}, &(0x7f00000000c0)=0x8) [ 2129.998560][T16927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2130.015217][T16927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:48 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0x101) [ 2130.054534][T16927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 03:26:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xb, 0x0, "df6977"}) [ 2130.098843][T16927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:26:48 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2130.142005][T16927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2130.179304][T16927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.217593][T16927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2130.266415][T16974] FAULT_INJECTION: forcing a failure. [ 2130.266415][T16974] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.289471][T16927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.314608][T16974] CPU: 1 PID: 16974 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 2130.323048][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2130.333104][T16974] Call Trace: [ 2130.336398][T16974] dump_stack+0x1f0/0x31e [ 2130.340735][T16974] should_fail+0x38a/0x4e0 [ 2130.345155][T16974] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2130.350870][T16974] should_failslab+0x5/0x20 [ 2130.355371][T16974] __kmalloc+0x74/0x330 [ 2130.359530][T16974] ? tomoyo_realpath_from_path+0xcb/0x630 [ 2130.365249][T16974] tomoyo_realpath_from_path+0xd8/0x630 [ 2130.370797][T16974] tomoyo_path_number_perm+0x18f/0x690 [ 2130.376284][T16974] security_file_ioctl+0x55/0xb0 [ 2130.381220][T16974] __se_sys_ioctl+0x48/0x160 [ 2130.385810][T16974] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2130.391874][T16974] do_syscall_64+0x73/0xe0 [ 2130.396291][T16974] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2130.402165][T16974] RIP: 0033:0x45cce9 [ 2130.406040][T16974] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2130.425623][T16974] RSP: 002b:00007ffba938ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2130.434013][T16974] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2130.441962][T16974] RDX: 0000000020000140 RSI: 00000000400448e2 RDI: 0000000000000004 [ 2130.449911][T16974] RBP: 00007ffba938aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2130.457859][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2130.465829][T16974] R13: 00007ffd9ec7f53f R14: 00007ffba938b9c0 R15: 000000000078bf0c [ 2130.548378][ T5027] Bluetooth: hci0: command 0x0401 tx timeout [ 2130.567971][T16974] ERROR: Out of memory at tomoyo_realpath_from_path. 03:26:48 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0xfffffd18, 0x0}) 03:26:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xc, 0x0, "df6977"}) 03:26:48 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:48 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0x101) [ 2130.799361][T17006] FAULT_INJECTION: forcing a failure. [ 2130.799361][T17006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2130.812587][T17006] CPU: 1 PID: 17006 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 2130.820911][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2130.830990][T17006] Call Trace: [ 2130.834295][T17006] dump_stack+0x1f0/0x31e [ 2130.838640][T17006] should_fail+0x38a/0x4e0 [ 2130.843075][T17006] prepare_alloc_pages+0x28c/0x4a0 [ 2130.848201][T17006] __alloc_pages_nodemask+0xbc/0x5e0 [ 2130.853493][T17006] ? __lock_acquire+0x116c/0x2c30 [ 2130.858525][T17006] kmem_getpages+0x49/0x900 [ 2130.863036][T17006] cache_grow_begin+0x7b/0x2e0 [ 2130.867809][T17006] cache_alloc_refill+0x359/0x3f0 [ 2130.872843][T17006] ? check_preemption_disabled+0x51/0x140 [ 2130.878569][T17006] __kmalloc+0x30c/0x330 [ 2130.882816][T17006] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2130.888563][T17006] tomoyo_realpath_from_path+0xd8/0x630 [ 2130.888587][T17006] tomoyo_path_number_perm+0x18f/0x690 [ 2130.888631][T17006] security_file_ioctl+0x55/0xb0 [ 2130.888651][T17006] __se_sys_ioctl+0x48/0x160 [ 2130.909124][T17006] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2130.915195][T17006] do_syscall_64+0x73/0xe0 [ 2130.919621][T17006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2130.925509][T17006] RIP: 0033:0x45cce9 [ 2130.929398][T17006] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xd, 0x0, "df6977"}) [ 2130.949004][T17006] RSP: 002b:00007ffba938ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2130.957427][T17006] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2130.965407][T17006] RDX: 0000000020000140 RSI: 00000000400448e2 RDI: 0000000000000004 [ 2130.973386][T17006] RBP: 00007ffba938aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2130.981364][T17006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2130.989341][T17006] R13: 00007ffd9ec7f53f R14: 00007ffba938b9c0 R15: 000000000078bf0c 03:26:49 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0x101) 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xe, 0x0, "df6977"}) 03:26:49 executing program 3: pipe(&(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="96061dd9187fd2099e2c96446b7c39f010d87621329d19943815ba4cdb42c037503d32106f06d0bc68384ff1722503db3e241c5549d1acf714e30fced7372ddecf3b50afcf3dae52e747cc3d2f632ef61c9f89e88a0413f5cf27d64fa054837dbb3185c75f8300ee601ba24d4b7f531b567e7836c233f56418248f678f8e3672cf387899c5633fb721a5471b46ffd0d023e847c8f4dfc3ee33d4d058d195954c84f78730bf", 0xa5, 0x4000, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000000000002823000000000000006574684a2f07000000a672137f64d5c35790f677d8adc1e870b905c3f67e46af82e1720b45939437502893ec215451afa126c25ac9ecd6ca875a575b9365c9fb9d737f52ae785422cefda29be33176554e1bf79e4dcedeecd0db"], 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0d804000000253a3e9de8015dbc4e3d0366968c7c6a9e424da5e031e386b68ed6ff8a39df9ddbe0d45765adb4b5b3f06079433fb087015449897dad68d544eb53383a9875ff97f2c8ad2cb220100737a036de35a349cb9653eb01ad058246cb68a8c8db0e362ab449736ae3e81111fa6ba85bc91cd6cbb8793adf11b6cba2156125d158f8b81ef4bb9441abad7661efd16110443536d"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0xa, 0xf0c3fe882cc54a4, 0x894) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000f0b4309e265a3f5678025afa9c6388ed1d9c7d60ef0e52a32cdf2d9969056d44e2", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) [ 2131.107963][ T5032] Bluetooth: hci2: command 0x0401 tx timeout 03:26:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x10, 0x0, "df6977"}) 03:26:49 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2131.198098][ T5032] Bluetooth: hci3: command 0x0401 tx timeout 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x11, 0x0, "df6977"}) 03:26:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0xff, 0x7}) [ 2131.307054][T17035] FAULT_INJECTION: forcing a failure. [ 2131.307054][T17035] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.358571][ T5032] Bluetooth: hci4: command 0x0401 tx timeout [ 2131.375528][T17035] CPU: 0 PID: 17035 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2131.383884][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2131.393940][T17035] Call Trace: [ 2131.397238][T17035] dump_stack+0x1f0/0x31e [ 2131.401575][T17035] should_fail+0x38a/0x4e0 [ 2131.406000][T17035] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2131.411731][T17035] should_failslab+0x5/0x20 [ 2131.416238][T17035] __kmalloc+0x74/0x330 [ 2131.420399][T17035] ? tomoyo_realpath_from_path+0xcb/0x630 [ 2131.426120][T17035] tomoyo_realpath_from_path+0xd8/0x630 [ 2131.431681][T17035] tomoyo_path_number_perm+0x18f/0x690 [ 2131.437173][T17035] security_file_ioctl+0x55/0xb0 [ 2131.442121][T17035] __se_sys_ioctl+0x48/0x160 [ 2131.446717][T17035] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2131.452783][T17035] do_syscall_64+0x73/0xe0 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x12, 0x0, "df6977"}) [ 2131.457205][T17035] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2131.463102][T17035] RIP: 0033:0x45cce9 [ 2131.466998][T17035] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2131.486626][T17035] RSP: 002b:00007f46175f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2131.486641][T17035] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2131.503049][T17035] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2131.503056][T17035] RBP: 00007f46175f3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2131.503062][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2131.503068][T17035] R13: 00007fff668ea43f R14: 00007f46175f49c0 R15: 000000000078bf0c [ 2131.547641][ T5032] Bluetooth: hci5: command 0x0401 tx timeout 03:26:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x25, 0x0, "df6977"}) 03:26:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}], 0x4, 0x101) 03:26:49 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80001, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0x3ad}, 0x9c) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDGKBLED(r11, 0x4b64, &(0x7f00000000c0)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x3a, 0x0}) 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x5c, 0x0, "df6977"}) 03:26:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x300, 0x0, "df6977"}) 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x10, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:50 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2131.819530][T17035] ERROR: Out of memory at tomoyo_realpath_from_path. 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4c01, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2131.924122][T17074] FAULT_INJECTION: forcing a failure. [ 2131.924122][T17074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2131.937377][T17074] CPU: 1 PID: 17074 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2131.945698][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2131.955752][T17074] Call Trace: [ 2131.959044][T17074] dump_stack+0x1f0/0x31e [ 2131.963378][T17074] should_fail+0x38a/0x4e0 [ 2131.967796][T17074] prepare_alloc_pages+0x28c/0x4a0 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x541b, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2131.972912][T17074] __alloc_pages_nodemask+0xbc/0x5e0 [ 2131.978196][T17074] ? __lock_acquire+0x116c/0x2c30 [ 2131.983223][T17074] kmem_getpages+0x49/0x900 [ 2131.987728][T17074] cache_grow_begin+0x7b/0x2e0 [ 2131.992496][T17074] cache_alloc_refill+0x359/0x3f0 [ 2131.997521][T17074] ? check_preemption_disabled+0x51/0x140 [ 2132.003226][T17074] __kmalloc+0x30c/0x330 [ 2132.007458][T17074] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2132.013178][T17074] tomoyo_realpath_from_path+0xd8/0x630 [ 2132.018727][T17074] tomoyo_path_number_perm+0x18f/0x690 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2132.024216][T17074] security_file_ioctl+0x55/0xb0 [ 2132.029154][T17074] __se_sys_ioctl+0x48/0x160 [ 2132.033741][T17074] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2132.039804][T17074] do_syscall_64+0x73/0xe0 [ 2132.044218][T17074] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2132.050105][T17074] RIP: 0033:0x45cce9 [ 2132.053995][T17074] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2132.073596][T17074] RSP: 002b:00007f46175f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2132.082008][T17074] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2132.090065][T17074] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2132.098049][T17074] RBP: 00007f46175f3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2132.106011][T17074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2132.113990][T17074] R13: 00007fff668ea43f R14: 00007f46175f49c0 R15: 000000000078bf0c 03:26:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}, {}], 0x3, 0x101) 03:26:50 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r0, 0x0, 0x4240a2a0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0x6}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) r7 = accept4$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x1388, @host}, 0x10, 0xe36c03c89f01a980) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000180)={0x9, 0x2, 0xffffffff, 0x1, 0x1, "1db4c5875376a4b57725f9c7411ad09a005a03", 0x7fff, 0x100}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000140)=0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f00000000c0)) 03:26:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x500, 0x0, "df6977"}) [ 2132.321423][T17097] FAULT_INJECTION: forcing a failure. [ 2132.321423][T17097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2132.334644][T17097] CPU: 0 PID: 17097 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2132.342965][T17097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2132.353018][T17097] Call Trace: [ 2132.356418][T17097] dump_stack+0x1f0/0x31e [ 2132.356433][T17097] should_fail+0x38a/0x4e0 [ 2132.356449][T17097] prepare_alloc_pages+0x28c/0x4a0 [ 2132.356465][T17097] __alloc_pages_nodemask+0xbc/0x5e0 [ 2132.356487][T17097] kmem_getpages+0x49/0x900 [ 2132.356503][T17097] cache_grow_begin+0x7b/0x2e0 [ 2132.356517][T17097] ____cache_alloc_node+0x179/0x220 [ 2132.356532][T17097] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2132.356541][T17097] __kmalloc+0x18b/0x330 [ 2132.356552][T17097] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2132.356564][T17097] tomoyo_realpath_from_path+0xd8/0x630 [ 2132.356584][T17097] tomoyo_path_number_perm+0x18f/0x690 [ 2132.356625][T17097] security_file_ioctl+0x55/0xb0 [ 2132.356641][T17097] __se_sys_ioctl+0x48/0x160 [ 2132.356654][T17097] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2132.356666][T17097] do_syscall_64+0x73/0xe0 [ 2132.436742][T17097] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2132.436754][T17097] RIP: 0033:0x45cce9 [ 2132.446511][T17097] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:26:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}], 0x2, 0x101) 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="95227b054b17511a1928b3cc275270c686997247cf577f0706116e79837f9c4952bee8bec26afaa595f2b56fd04b5703102e883af08e4da0a32760bcbac157acb125dfd6fd1a65d18df21dc049f7f6ec7c80e30a361bf4ea00c6a1fa3252bafc6218a3b2b58af5a08075d9c07ab480b4890eb583e33b78926b9f7e6eb0b2e0b13c39d51fd5b1614598374518927bc5551628590da330e219d8bec9cf7ed9520b3d2a72c99f02f9ce641991", 0xab}, {&(0x7f0000000180)="9a2d", 0x2}, {&(0x7f00000001c0)="99d6975025989bda723ffbbb2055e431320b8ea1d695253fca13827640dbf03416d6909e339881c75d231a96ecf0c5b0662c7f1a08501041c11a3a07f9ceb07c2861bf996a5965aa4bfefaa2cf75a0a70ee1b189a6d74b3da0a858b73823c42ef6493a3abbdacb806ac20d5a2a975e52aba72ffee5501d1acc27555a47f3dff281e82123cfd710175f1677d407e32e", 0x8f}], 0x3, &(0x7f00000002c0)=[{0xb8, 0x10c, 0xe4b, "49dddff2402999fb2f9262d4b90f113ac10fec7888e042c7d5f4b96fb6072b2c11d7f75d6aabe8a2261ea94338c98f5f46457dc940c15f9f7091ffa88e793f850754b74e249cd8ee3de66ab982fc11dcf7cefe5bbaa0d9a095e93e13cbf4480f060712eed0fb52789b8c8b77b3849da7b6a462e9afe2d5240e1f98271bb036ec8612e938ca7b1e4ed4b77a7bf00eef6975495c573fc470f40db3ab54fad8f5a32b2343"}], 0xb8}, 0x8000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) [ 2132.466109][T17097] RSP: 002b:00007f46175f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2132.474516][T17097] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2132.482492][T17097] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2132.490460][T17097] RBP: 00007f46175f3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2132.498428][T17097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2132.506393][T17097] R13: 00007fff668ea43f R14: 00007f46175f49c0 R15: 000000000078bf0c 03:26:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x600, 0x0, "df6977"}) 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x6364, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) ioctl$TIOCSCTTY(r0, 0x540e, 0xff) shmctl$SHM_UNLOCK(r1, 0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) setsockopt$packet_buf(r2, 0x107, 0x3c5a0ca2ac4489b4, &(0x7f00000000c0)="a33f36ff0226873a399f61b4eac9655c43f04b52401c7a2233ca0f9404171c459ba66ff1d21f37aa5dc0f55287f18d623ee75021a52407d10673387e2991598c9e361abaeccebb751b5184850115ec7574011c25b9c3a36ea6809081426e9d3bb431e0f514a77bcf0787a8a9d007f43c37878fe1a753da653c08d8b34e43e9e645179c1eb7e93452f2000a02f6269e2443031bef5232ac4157a083270106a350548ad5343fb80b13f4b312e89f6302d1dc31467cfe2a4cdcc1a04aedfaf053800dfe4771f5bd94dea60ec9ec6a9b44c805430d2ad60f3109051fd72ffc187eded9cd423a49967fe9309076", 0xeb) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r4, 0xff2c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) fsmount(r5, 0x1, 0x80) [ 2132.637855][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:26:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x700, 0x0, "df6977"}) 03:26:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:51 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x900, 0x0, "df6977"}) 03:26:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x5, 0xa9f, &(0x7f00000000c0)="2214e7d94f72935d1546eaaca30c663843e8d2a32190f70340f010c07ea046a668ce03562aa92f07a1d1b99a1cee5cf290dc5cca50100be8eb677fb9a3a7788fc79877811e951b79340f800a31ce489c2b602aed7651585c93c8baa6cc88ba47375e0e4dcca7c76d615ccad814dddb2e44687ba37c5c43798137b00cd473a2cce7898aae81774ea53e9141bc4a8abe3e9511af17f767ac8c1abd45dbd2a90c0453bba69891adf53658b6b52cf57a6b5b386ae03ffe76b4faac4a1269323234c4936a9ffde47909342fe9eba8d23619", &(0x7f0000000000)="b083a07d88312731e58529b7be434b94a0f5476070702a49aea0e1545d1a8f256f30f896e01662f17bea2e59435d223e00d223f20b44deb355b2043a3d8ea332830656ba19eb61ed2797595307db44da3aac0cb32c6b72cba80e28ce516e38b0647e6e477ecc3d8345fe48ee64fb6b7ca8bd322b3e6207985ac559", 0xcf, 0x7b}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x101) 03:26:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xa00, 0x0, "df6977"}) 03:26:51 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x14002, 0x81) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x600000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r1}) [ 2132.968329][T17137] FAULT_INJECTION: forcing a failure. [ 2132.968329][T17137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:26:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2133.033215][T17137] CPU: 1 PID: 17137 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2133.041568][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2133.051621][T17137] Call Trace: [ 2133.054910][T17137] dump_stack+0x1f0/0x31e [ 2133.059241][T17137] should_fail+0x38a/0x4e0 [ 2133.063674][T17137] prepare_alloc_pages+0x28c/0x4a0 [ 2133.068792][T17137] __alloc_pages_nodemask+0xbc/0x5e0 [ 2133.074090][T17137] kmem_getpages+0x49/0x900 [ 2133.078588][T17137] ? cache_grow_begin+0x54/0x2e0 03:26:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) [ 2133.083525][T17137] cache_grow_begin+0x7b/0x2e0 [ 2133.088292][T17137] fallback_alloc+0x135/0x1d0 [ 2133.092974][T17137] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2133.098689][T17137] __kmalloc+0x18b/0x330 [ 2133.102933][T17137] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2133.108798][T17137] tomoyo_realpath_from_path+0xd8/0x630 [ 2133.108822][T17137] tomoyo_path_number_perm+0x18f/0x690 [ 2133.119853][T17137] security_file_ioctl+0x55/0xb0 [ 2133.124796][T17137] __se_sys_ioctl+0x48/0x160 03:26:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r2, 0x1, 0x0, 0x0, {0x26}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc}, {0xc}}]}, 0x50}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040080) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) [ 2133.129387][T17137] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2133.135447][T17137] do_syscall_64+0x73/0xe0 [ 2133.139862][T17137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2133.145753][T17137] RIP: 0033:0x45cce9 [ 2133.149644][T17137] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2133.169258][T17137] RSP: 002b:00007f46175f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:26:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) [ 2133.169273][T17137] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2133.185642][T17137] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2133.193610][T17137] RBP: 00007f46175f3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2133.201577][T17137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2133.209548][T17137] R13: 00007fff668ea43f R14: 00007f46175f49c0 R15: 000000000078bf0c 03:26:51 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xb00, 0x0, "df6977"}) 03:26:51 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100), 0x0, 0x101) 03:26:51 executing program 4: sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x120, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x92, 0x7, 0x1, 0x0, "b815863c628e8329d3babff7ab9d591413aa7e8d9afc960e57dade1ffbe454e37512f9e454628d28c2b9a8bf7ef0f1e61a28ec733ca3df228a957ee70e312a8bbcba348144a0a843c9979230c2db1c44b079b6dca17081adefb300d7879dfc7f2e37232876041fabf2deb5aacd748490fbb208bad47b61c37aebf0182a81a995aebed3d36ce37a81a3d2a3a72822"}, @NFTA_RULE_USERDATA={0x6a, 0x7, 0x1, 0x0, "d861ca1efb4319450caa5aa5818434b82a6d1d67c08eb6e0c97309f80c6eda0f4f602f6caeaabb1b22fa3cc74950d598de4a2024707c9fc2914b75e623bd26e453eb6159be32778af688d4bb1e1af7e1e85f87cd8d017c9611f74e99a16ac6377c9b47bde502"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = socket(0x11, 0x6, 0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x880) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf25030000000c00100001000000000000000500220001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 03:26:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2133.382942][T17137] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2133.468391][T17175] FAULT_INJECTION: forcing a failure. [ 2133.468391][T17175] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.500851][T17175] CPU: 0 PID: 17175 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2133.509322][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2133.519370][T17175] Call Trace: [ 2133.522659][T17175] dump_stack+0x1f0/0x31e [ 2133.526992][T17175] should_fail+0x38a/0x4e0 [ 2133.531406][T17175] ? tomoyo_encode2+0x25a/0x560 [ 2133.536346][T17175] should_failslab+0x5/0x20 [ 2133.540845][T17175] __kmalloc+0x74/0x330 [ 2133.544998][T17175] tomoyo_encode2+0x25a/0x560 [ 2133.549669][T17175] ? sock_free_inode+0x20/0x20 [ 2133.554440][T17175] tomoyo_realpath_from_path+0x5d6/0x630 [ 2133.554459][T17175] tomoyo_path_number_perm+0x18f/0x690 03:26:51 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x9, 0x0}) shmget(0x2, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) 03:26:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xc00, 0x0, "df6977"}) 03:26:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2133.554502][T17175] security_file_ioctl+0x55/0xb0 [ 2133.570458][T17175] __se_sys_ioctl+0x48/0x160 [ 2133.575063][T17175] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2133.575074][T17175] do_syscall_64+0x73/0xe0 [ 2133.575086][T17175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2133.575094][T17175] RIP: 0033:0x45cce9 03:26:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xd00, 0x0, "df6977"}) [ 2133.575104][T17175] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:26:51 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100), 0x0, 0x101) 03:26:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8933, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2133.575109][T17175] RSP: 002b:00007f46175f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2133.575118][T17175] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2133.575124][T17175] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2133.575129][T17175] RBP: 00007f46175f3ca0 R08: 0000000000000000 R09: 0000000000000000 03:26:52 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xe00, 0x0, "df6977"}) 03:26:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2133.575135][T17175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2133.575140][T17175] R13: 00007fff668ea43f R14: 00007f46175f49c0 R15: 000000000078bf0c 03:26:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1100, 0x0, "df6977"}) [ 2133.815532][T17175] ERROR: Out of memory at tomoyo_realpath_from_path. 03:26:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2133.925260][T17208] FAULT_INJECTION: forcing a failure. [ 2133.925260][T17208] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.925274][T17208] CPU: 1 PID: 17208 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2133.925280][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2133.925285][T17208] Call Trace: [ 2133.925299][T17208] dump_stack+0x1f0/0x31e [ 2133.925313][T17208] should_fail+0x38a/0x4e0 [ 2133.925328][T17208] should_failslab+0x5/0x20 [ 2133.925338][T17208] kmem_cache_alloc_node+0x64/0x290 [ 2133.925349][T17208] ? __alloc_skb+0x94/0x4f0 [ 2133.925360][T17208] __alloc_skb+0x94/0x4f0 [ 2133.925378][T17208] create_monitor_ctrl_open+0x169/0x6c0 [ 2133.925394][T17208] hci_sock_ioctl+0x1a5/0x750 [ 2133.925412][T17208] sock_do_ioctl+0x7b/0x260 [ 2133.925429][T17208] sock_ioctl+0x4aa/0x690 [ 2133.925445][T17208] ? sock_poll+0x2f0/0x2f0 [ 2133.925454][T17208] __se_sys_ioctl+0xf9/0x160 [ 2133.925466][T17208] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2133.925476][T17208] do_syscall_64+0x73/0xe0 [ 2133.925487][T17208] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2133.925496][T17208] RIP: 0033:0x45cce9 [ 2133.925505][T17208] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2133.925511][T17208] RSP: 002b:00007f46175f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2133.925520][T17208] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 [ 2133.925526][T17208] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 03:26:52 executing program 3 (fault-call:1 fault-nth:6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:52 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100), 0x0, 0x101) [ 2133.925531][T17208] RBP: 00007f46175f3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2133.925537][T17208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2133.925543][T17208] R13: 00007fff668ea43f R14: 00007f46175f49c0 R15: 000000000078bf0c 03:26:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1200, 0x0, "df6977"}) 03:26:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}, {r3}, {r4}, {r5}, {r6}], 0x5, 0x101) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000100)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r1, 0x0, 0x6, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x727, 0x1}}) 03:26:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x2500, 0x0, "df6977"}) [ 2134.553911][T17231] FAULT_INJECTION: forcing a failure. [ 2134.553911][T17231] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.616762][T17231] CPU: 0 PID: 17231 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2134.625130][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2134.635224][T17231] Call Trace: [ 2134.638514][T17231] dump_stack+0x1f0/0x31e [ 2134.642849][T17231] should_fail+0x38a/0x4e0 [ 2134.647272][T17231] should_failslab+0x5/0x20 [ 2134.651771][T17231] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 2134.657661][T17231] ? __kmalloc_node_track_caller+0x37/0x60 [ 2134.663469][T17231] __kmalloc_node_track_caller+0x37/0x60 [ 2134.669099][T17231] ? create_monitor_ctrl_open+0x169/0x6c0 [ 2134.674820][T17231] __alloc_skb+0xde/0x4f0 [ 2134.679161][T17231] create_monitor_ctrl_open+0x169/0x6c0 [ 2134.684719][T17231] hci_sock_ioctl+0x1a5/0x750 [ 2134.689406][T17231] sock_do_ioctl+0x7b/0x260 [ 2134.693915][T17231] sock_ioctl+0x4aa/0x690 [ 2134.698253][T17231] ? sock_poll+0x2f0/0x2f0 [ 2134.702664][T17231] __se_sys_ioctl+0xf9/0x160 [ 2134.707261][T17231] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 03:26:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8980, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2134.713336][T17231] do_syscall_64+0x73/0xe0 [ 2134.717748][T17231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2134.723634][T17231] RIP: 0033:0x45cce9 [ 2134.727525][T17231] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2134.747133][T17231] RSP: 002b:00007f46175f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2134.755554][T17231] RAX: ffffffffffffffda RBX: 000000000000e600 RCX: 000000000045cce9 03:26:52 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}], 0x1, 0x101) [ 2134.763528][T17231] RDX: 0000000020000140 RSI: 00000000800448f0 RDI: 0000000000000004 [ 2134.771505][T17231] RBP: 00007f46175f3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2134.779477][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2134.787452][T17231] R13: 00007fff668ea43f R14: 00007f46175f49c0 R15: 000000000078bf0c [ 2134.797419][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:26:53 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x3f00, 0x0, "df6977"}) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8981, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x4000, 0x0, "df6977"}) 03:26:53 executing program 3 (fault-call:1 fault-nth:7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x5c00, 0x0, "df6977"}) 03:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}], 0x1, 0x101) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x5, [@volatile, @const, @union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @int]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xf5}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r1, 0x0, 0x6, 0x0) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x2, "df6977"}) 03:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x10, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xae01, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x3, "df6977"}) 03:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4c01, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xae60, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x4, "df6977"}) 03:26:53 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}], 0x1, 0x101) 03:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x541b, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xaf01, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x5, "df6977"}) [ 2136.867595][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:26:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000000)={0x3, 0x8, 0x9a, 0x1000, 0x5, 0x9, 0xfffffffffffffff9}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x6, "df6977"}) 03:26:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x107301, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r1, 0x5, 0x80, 0x200}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000002c0)={0x4, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000340)={0x0, r6, 0x0, 0xfffffffffffffff7}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x20000, 0x0) ioctl$KDDELIO(r7, 0x4b35, 0x2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r10, 0x0, r9, 0x0, 0x6, 0x0) utimensat(r9, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x100) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc}}]}, 0x54}}, 0x0) accept4(r2, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80, 0x0) 03:26:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x7, "df6977"}) 03:26:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000340)={0x9c0000, 0xffff, 0x2, r0, 0x0, &(0x7f00000000c0)={0xa00906, 0x0, [], @p_u32=&(0x7f0000000040)=0x48}}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000380)={0x1, 0x7fffffff, 0xfffffff8, 0xe8e0, 0xf, "58e758a5ba92c422eced87bb6ed3d5e58e65f9"}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x109a82, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="9297dd30998306859470b4485edadab93d1be4214b9c3fe0c3a4428081d4d27f1fa82b5d2bdd66892bfedb245921998c48a92aa3a9cc66134bdbe237be0e314fa5b55a375468c8d66e02da55864418474d5b17b6667ec6ec6f577a275e4842ef8d0190977fb648b880f33719374cfdf10e6a622e6ee73eaa8285e33eafd1913c8635f7cad183aac518ae320073746dbd83894b45a769a0634a2fd7ff2f7b165349bbf00ea4b935afd90318f8f5f6915084351a6397bba17b47b27c7c878c4e7986fc0b3e827f8c5676396e62948a4fa86e176099a3", 0xd5}, {&(0x7f0000000240)="ed9f4429a35a9572f6883fb1115e36be68dd6fc1ed92a61107f9f1dd0e1371690d36012e626105646d80792217d268bf64469ad9fefae5b32b38b367b87aa493ecacfb8c885dc1c4fca5885ed0668509664176ebddc32992fcfec77de1dac0f6ec9823d9995c88eda4a6a4b7c254b52913416d7238ebbcccafe8a0967e2b23527dd98ecc2919dd04cc9197b2f6f5adf189cdb1cea00aa81ec826b2eb1e32fa6fcf0aa90d0265e15a7b1fc0bf4d2cb14caf0361fb0ae62f87aa1b750e68c03cd4e9e935d6c90243", 0xc7}], 0x3, 0x4, 0x3) 03:26:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:26:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977"}) 03:26:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x8010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x40}}, 0x20004880) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) 03:26:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x9, "df6977"}) 03:26:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="f34eb4ebf20055445c118fd5a7d841b6bbcf98ed9efb2f40a510e614ab5735c2ed876e203142a0a02315828569078162044af1298b4ed8b505a39dc5787a4577b49ffbf80bfdd2785be0b49c1d86b12184b1a762f1372031026a143393d84e690b4af6d8605bf217e30d7ced5ec8c70212640348078db76fdb99ec8bed865a8f5e883b0c3fd51e125c200aed8687818adf15e4e207db0f445024fa01c3962da38f24f3fa25b416a77a699554e33acc24ba8bf34caa014bdf8581896613a30eb6a0141e7b219027ace47ffa93242e5b478d329801bcdb898f74fcffad7ff7836927bdbba3bbdfb6108c6195cc16fd211dd049d81a24939a6cc327c3c90a1e2ac729fe513f7a55ff0335dda7b559fc030455205ad7c1fb65251b7d7e3532e64fa1210e443f2b54d959a2d451f86ebaec739facf4fd2b3f49769c35c6a45c3773ce04eacc837bd0a256b7c72d033cfbc8379275f05bb938a9d09644642aded159d48f68c112b316ad94d289100e3d582934a8daa578c714735402b81e79f6731a0ac0260ea9743b2494ec1dacb508218b0cdf85e061d8db36283ce8ce64c6da25fcb1b5d1ed2f55b225b4f12c5086fe66f107b0b5c4c22953799184c9263a0e3ab05cbf9cdc7a301db211a333f1a72bd59471811ce3f0aa84960d09d7540dd5b8ede9fe4c1e3955dd1048c722297b9b50479e45c911ef9abb0ee0aca2f82f595b6e7c8d400a803b121c02d75d828bcd57d695e2e601095714a06da107e167876a99dfa83d7a336a6354d7452021a6b63fd5da038b7cc37089aaea05636a466dc909d0070c6e38ffcf3f11fe1b0c269f0363ba97ce22a4117fd9a9c6a5f292e4f9bc854761e35b0f7c06e1261a0b03208714a328565f0ee25653a4b89dbc65731a17bb17fbd7ba67b59769853e888178d61e54b14f99f74df1293789e2242f4d9840acdb7eec5eab549209f085ecea77fba9ad5918c3255086b48fc924c028d568723bfe88161fb54037870e7127ef02114c155f08a36a319ff94cfd2e207702bb331dac8e5cb80fbce0b717f65edb8f609802cde154fa489a2d3543c9e6bfa83fdf6b9240efc50642357876018633fb7e16f96fdaea0bcc1a989e8b3e70269983f7ebb45e07913004f81f68352b0fc3cff7cc78aafa55bdf9d750d6f2a0182a20679396a6475c7981150c7fd27968678a9a52a8223001d26c9366d5c8252b51662c620cd74977a315b5b7507bffee96e94fdce01f23dec0359783605b4df153c1a923e76782b4e73bf828f5b10c7752e7bac3af14261604dd51cd30299abff447db092135ca6a9aa4a9f1658c1f20f8842ab59c363824087bebd66d1b64bd444b8b126f6ccbd9d3e5593da0d762185209104ce1774f2a930a43f0a687689a090cd27323097cdf8ec58c16f9b23642030e9bb8fd0d6737ef38f8c9857cbc38008b12"}) 03:26:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2138.947385][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:26:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xa, "df6977"}) 03:26:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:26:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x6364, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 03:26:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x2c, 0x8, 0x2d, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x10, 0x401, 0x4}}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={r2, @multicast2, @rand_addr=0x64010101}, 0xc) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) dup(r4) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000800)='/dev/full\x00', 0x101000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000840)=0x28, 0x4) syz_usb_control_io(r3, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x1, 0x85, {0x85, 0x22, "fe1395a6fd96b29ac897a3c9c78d4a3a38b9fd2a80b5083c0c9ef932abf349eeb99a858e686abe117f5bcd6f3abce19d6e920517dc75d8a18023b216fcbd6ff1990c31a7d3cc1f13df2d730b075e9f48d2fedc868567094ec3ee5562edf1bfa753b5953583e79e79f8bc1b23546aa36baf9cf75a9c0c2c3c5383aea41a1d7828282e8f"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000180)={0x0, 0xf, 0x6c, {0x5, 0xf, 0x6c, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x83, 0x3, 0x9, 0x7, 0x40}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x20, 0xf, 0xfffb, [0x3f00, 0xc00f, 0xc00f, 0xbf4ce92dc4efdcc8, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x3, 0x7, 0x8, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x88, 0x0, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x7f, 0xf, 0x1, [0xf0, 0xff0f, 0xff00a0, 0x3f2e]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x81, 0x16, 0x1000, 0x4}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x3f, 0x5, "f03cbe4c", "0a4cbde2"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x3, 0x7, 0x1, 0x1, 0x1}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0xb, 0xb9, "d7df9df4938a76340580569bec9630f545db3197d0f978aceceef2f5395a55e21f65bb5b6d048362624adc26890338aa34b2b1c75df1313f9a92120d0bc49630edfb0a0375c885a9769e7c103b566ee37233aac27a8976f22746d8b81936eac17d9953627c0c40a4ba00b9ddcb397686e06143d8448bdea3a07fe364da64e0eeb3b55f76c14ad24dc14318fbdf5ff9e1d54e44f9afc47c22a266734203ce3880e99a5c927ac44ea66838019bc0ed4abbe865fc96bf2d77abb4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x40, 0x1, [0xf00f]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000500)={0x40, 0xb, 0x2, "8ad2"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="747937af6e13"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000880)={0x40, 0x19, 0x2, 'UH'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x20}}) 03:26:57 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 03:26:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:26:57 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) [ 2139.656917][ T5271] usb 5-1: new high-speed USB device number 8 using dummy_hcd 03:26:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448de, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:58 executing program 5: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 03:26:58 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x20001, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1d30a00}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20020001}, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r5}], 0x1, 0x0) 03:26:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xb, "df6977"}) [ 2139.896932][ T5271] usb 5-1: Using ep0 maxpacket: 8 03:26:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:26:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) [ 2139.936332][T17463] __nla_validate_parse: 6 callbacks suppressed [ 2139.936340][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2140.037301][ T5271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2140.071621][ T5271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2140.098718][T17467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2140.121426][ T5271] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2140.152534][ T5271] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2140.184708][ T5271] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2140.200757][ T5271] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2140.366931][ T5271] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2140.376393][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.385346][ T5271] usb 5-1: Product: syz [ 2140.390300][ T5271] usb 5-1: Manufacturer: syz [ 2140.395138][ T5271] usb 5-1: SerialNumber: syz [ 2141.037093][T17382] Bluetooth: hci0: command 0x0401 tx timeout [ 2141.319021][ T5271] cdc_ncm 5-1:1.0: bind() failure [ 2141.325675][ T5271] cdc_ncm 5-1:1.1: bind() failure [ 2141.333416][ T5271] usb 5-1: USB disconnect, device number 8 [ 2142.066783][ T5271] usb 5-1: new high-speed USB device number 9 using dummy_hcd 03:27:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r3, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r7}, {r8}], 0x5, 0x101) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 03:27:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x501400, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) write$UHID_INPUT(r2, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x4}, 0x8) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x3, [@ptr={0x101, 0x0, 0x0, 0x2, 0x4}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @const={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x401}}, @datasec={0x6, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x42}, {0x1, 0xffffffff, 0xfffffffd}], "84"}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000001240)=""/251, 0x8b, 0xfb, 0x1}, 0x20) 03:27:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448df, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xc, "df6977"}) 03:27:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 03:27:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 0: rt_sigaction(0x18, &(0x7f0000000080)={&(0x7f0000000000)="43db0ec4027d9a32420f55859e000000c4827959c3660ffbc866450ff1c0c48385cf30f2d0b3d7780000c482fd1e6574aa", 0x40000000, &(0x7f0000000040)="8f097098bbc583000077f5c481bd5cdcc402492f31c4a1aec2f039c443094cf6f4c4c2797802c423e148f2b067438844390ac4e3f916787000", {[0x22c]}}, &(0x7f0000000180)={&(0x7f00000000c0)="dd44f6824614b7400f6aacb6b676f58dc4417fe6ab1c000000c4e17de681f33f472644dfef660f2c322666460f75edc4e1adfdbcaaa17278203e470f0d5109", 0x0, &(0x7f0000000140)="8f2978e13940d1180f67820b0000003e654a0f6ec80f38028b03000000c482c0f38e08c60000dfd9c4e21107744f32c423c56ce3210f127a3a"}, 0x8, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000200)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) 03:27:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xd, "df6977"}) 03:27:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8933, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 03:27:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xe, "df6977"}) 03:27:00 executing program 0: poll(&(0x7f0000000100)=[{}], 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) inotify_init() ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)={0x30, r5, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x190, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x60, 0x3, "cbd9729679052d5a79b5d43678dc4290aec019ef27b1b5047ea7bc4a8e59703314f79292ab363959d7ac3e132237d386d78bf2f6055e8bb4842046acb50648ad866809b5d01b6f306d213f32121715c1b5728168684d44fb828fb90a"}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0xfffffffffffffcea, 0x2, 0x40000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bb73e78c9dee8d2eae9124b91a2015e81fc75d5ba8312d32178dd49d"}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x11}, 0x800) 03:27:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2142.610749][T17556] tipc: Started in network mode 03:27:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x10, "df6977"}) 03:27:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0) [ 2142.631691][T17556] tipc: Own node identity , cluster identity 4711 03:27:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100), 0x0, 0x0) r0 = gettid() getpgid(r0) 03:27:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0) 03:27:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0xff, 0x4) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) [ 2143.116988][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:27:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0) 03:27:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8980, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:01 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x4, 0x6) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) 03:27:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) syz_open_pts(r1, 0x80101) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000040)={0xcc, 0x2, 0x4, 0x100000, 0x3, {0x0, 0x2710}, {0x4, 0xc, 0xf9, 0x1, 0x3f, 0x4, "aa0be0e3"}, 0x16a1, 0x4, @fd, 0x1, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r7}, {r4, 0x18}], 0x200002b3, 0x0) 03:27:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x11, "df6977"}) 03:27:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r3, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r7}, {r8}], 0x5, 0x101) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8981, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x12, "df6977"}) 03:27:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x25, "df6977"}) 03:27:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2200, 0x90, 0x8}, 0x18) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x9, 0x1, 0xa2, &(0x7f00000000c0)="752e1544ea82e06aac7fa5a0d117607fe87902a91ba97e09b559e2ab889af10a1002606e21411530445f836b4e62ad22af423fa3f847864f86df37149a9adb15568d9fd8e88638609dd2402827b151cb9345716d5b969e90adfed317ac5d33b4308dba039ec9155466157dc38da00841c74ecea91e07ac50d5f52e11e2fc21509f8bb072a94a6a1ffaf438ddbb1296a1f9b498db75d6e1763a56176b64dd09fbbdcc"}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) 03:27:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400454ca, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x5c, "df6977"}) 03:27:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0xffff) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r3, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r7}, {r8}], 0x5, 0x101) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x300, "df6977"}) 03:27:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4008af03, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x4}}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x1ff) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x500, "df6977"}) 03:27:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40186366, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) 03:27:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x600, "df6977"}) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r3, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r7}, {r8}], 0x5, 0x101) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012b10c67b30009000100"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005600020026bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="7942923f2f381407cf1e679a78c4c19ec641c88d1abc756dc05916393e6a6ee7da3449f9cf4a52e4831956e1f4901e6747ff27a73a053bbfed106ea60fc86c7233a47ee2a786018eee2eced03229c7e12da66100b39fa3cb135647d1dbf0f6a70637959b4803cc5989bd3d3445136dd191ae05b615577bbb654a3eecddb0dc059c03782a4aa5f534de60c6790cab39f6f6b0b9a7"], 0x18}, 0x1, 0x0, 0x0, 0x1804}, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r7, 0xff2c) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000340)={'icmp\x00'}, &(0x7f0000000380)=0x1e) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10, 0x800) 03:27:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x700, "df6977"}) 03:27:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x800000) poll(&(0x7f0000000040)=[{r0, 0x2589}, {r3, 0x2000}, {r10}, {r5, 0x2}], 0x4, 0x7ff) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x900, "df6977"}) 03:27:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1, 0xf7, 0x9, 0x81}, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) 03:27:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000000c0)) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='#:.\x00', r1}, 0x10) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xa00, "df6977"}) 03:27:02 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r2, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r2}, {r6}, {r7}], 0x5, 0x101) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x5, 0x2}, 'port0\x00', 0xc3, 0x40, 0x398, 0x3, 0x9, 0x1cc, 0xc8e, 0x0, 0x1, 0x4}) 03:27:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x1c8, 0x1d, &(0x7f0000000140)="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"}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 03:27:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xb00, "df6977"}) 03:27:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/9, &(0x7f0000000040)=0x9) 03:27:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xc00, "df6977"}) 03:27:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xd00, "df6977"}) 03:27:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x2, 0x369102) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) recvfrom$l2tp(r1, &(0x7f00000000c0)=""/180, 0xb4, 0x20, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 03:27:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80086301, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x50, r3, 0x1, 0xfffffffc, 0x0, {0x26}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc}, {0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040), 0x10) poll(&(0x7f0000000100)=[{}], 0x1, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0x4a4c80, 0x2) 03:27:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108906, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) 03:27:03 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) [ 2145.196942][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:27:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$TIOCSCTTY(r5, 0x540e, 0x3) 03:27:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8040ae9f, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448de, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x10000, 0x7}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:03 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r5}, {0x4}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x880}, 0x40010) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r6, 0x8280}], 0x9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x27c200, 0x0) 03:27:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:27:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xe00, "df6977"}) 03:27:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000004c0)={0x9c0000, 0x7, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0951, 0x1, [], @value=0x278}}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2145.905349][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:27:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0xfff, 0x3f, 0x0, 0x8000}, 'syz0\x00', 0x28}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@any, 0x2}) [ 2145.961451][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:27:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) [ 2146.054075][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:27:04 executing program 4: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448df, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x301100, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write$capi20_data(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="10000008ff81209047000000000000003f00a05aa4f1b769c0668a9648f7dc0b5e716f5daa961aa64fc2fffffeff9ab9f93ad6238c383b79f72b0b6657a727d182ebb5c3ca7eaf20221a1c7098b13e55b7280f495fc115f6b8af098d9f9f59812083bde585c0afab4cc20c88fe8fcaa24d7010f69e618d482ce852ed38f39c39ecae71e2c211912ed0a5388b0c1ffe9c812d55f50668"], 0x51) 03:27:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5482ab22", @ANYRES16=r1, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r9, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00 \x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) r12 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r4, 0x40e}, {r6, 0xb100}, {0xffffffffffffffff, 0x8040}, {r10, 0x2046}, {r12}], 0x5, 0xffffffff) 03:27:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x1100, "df6977"}) 03:27:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) fdatasync(r1) 03:27:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x1200, "df6977"}) 03:27:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:05 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x2500, "df6977"}) 03:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x3, 0x0, @descriptor="33361311136fc5e4"}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) r6 = gettid() tkill(r6, 0x33) r7 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r9 = geteuid() fsetxattr$system_posix_acl(r8, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r9, @ANYRESOCT=r7, @ANYRESHEX, @ANYRES16=r9, @ANYRESHEX], 0x7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000040)={0x6, 0x1, {r6}, {r9}, 0xffffffff, 0x4}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r10}], 0x1, 0x0) 03:27:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x2, 0x0, "df6977"}) 03:27:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x3, 0x0, "df6977"}) 03:27:05 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x3f00, "df6977"}) 03:27:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) 03:27:05 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r0, 0x0, 0x6, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000000)={{0x3, @name="2c1065d58d42e706c8c0b63acd4491e744d1b05067fb490a52d20c55727bcf92"}, "5b2bd7d8e1cdbc665e0ccc219644921480f683b63e93655c6f42e244d0724697"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) [ 2147.266704][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:27:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x4, 0x0, "df6977"}) 03:27:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$VT_WAITACTIVE(r2, 0x5607) 03:27:05 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$TIOCSCTTY(r2, 0x540e, 0xc50) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:05 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x5, 0x0, "df6977"}) 03:27:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x6, 0x0, "df6977"}) 03:27:06 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x4000, "df6977"}) 03:27:06 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000410000000e0001006e657464657673696d0000000f0002006d30000008008e00000000000c008f0000000000000000000c0090000000000000000000000000000000000020c47dcf76eb3e2b33c7a956237dd3375cc7f3ab176a86018b0f33a8ca793ac9d4499d"], 0x54}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x5}}]}, 0x54}}, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000001c0)=0xc4157ac, 0x400) connect$rose(r5, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r9, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x40, 0x0) poll(&(0x7f0000000000)=[{r0, 0x100}, {r3}, {r2, 0xf201}, {r10, 0x200}], 0x4, 0x3) 03:27:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x7, 0x0, "df6977"}) 03:27:06 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x5c00, "df6977"}) [ 2148.094686][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:27:06 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x5, 0x10000) setsockopt$inet6_dccp_buf(r2, 0x21, 0x4e79dc3c2e958a8d, &(0x7f00000004c0)="09abfbb8f36f73cbbdc8dbf4bdd99fab2f76167f84f2a7275f04c4f9ab0e5ccfbee9ea09a50417c35af51f37e27d553abc1492333295d56b", 0x38) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}, {r1}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$FIOCLEX(r5, 0x5451) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00=', @ANYRES16=r7, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) fcntl$setstatus(r6, 0x4, 0x0) [ 2148.182514][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:27:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x8, 0x0, "df6977"}) 03:27:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r5 = accept4$llc(r3, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x1000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='/],).*#@\x00', 0x0, r5) 03:27:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df2577"}) 03:27:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x9, 0x0, "df6977"}) 03:27:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 03:27:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400454ca, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xa, 0x0, "df6977"}) 03:27:06 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/249, 0xf9) 03:27:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x2}) 03:27:06 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0x0, 0x8001, 0x8}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="159300400300000000006b0000000800178104"], 0x3}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x118, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:06 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:06 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x800, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000140)) poll(&(0x7f0000000100)=[{r0, 0x7086}], 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000080)=0x915f) syz_open_dev$tty1(0xc, 0x4, 0x3) 03:27:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40186366, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xb, 0x0, "df6977"}) 03:27:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r1, 0x0, 0x6, 0x0) getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) 03:27:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:07 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:07 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r0, 0x0, 0x4240a2a0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100), 0x0, 0x0) 03:27:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3f2, 0x108, 0x70bd25, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/48, &(0x7f00000000c0)=0x30) [ 2149.346320][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:27:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x3}) 03:27:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xc, 0x0, "df6977"}) 03:27:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0) 03:27:07 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa30000, 0x0, 0x5, r2, 0x0, &(0x7f0000000040)={0x9b0906, 0x400, [], @p_u16=&(0x7f0000000000)=0x9}}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000100)={0x4, {{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x44}, 0x7}}, 0x1, 0x9, [{{0xa, 0x4e20, 0x76e02d0f, @private0={0xfc, 0x0, [], 0x1}, 0x8}}, {{0xa, 0x4e21, 0x4, @mcast2, 0xff}}, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, {{0xa, 0x4e23, 0x7, @private1, 0x8}}, {{0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, [], 0x1}, 0x1}}, {{0xa, 0x4e24, 0x803, @remote, 0x40}}, {{0xa, 0x4e24, 0x3ff, @private2={0xfc, 0x2, [], 0x1}, 0x4}}, {{0xa, 0x4e23, 0xffffff00, @dev={0xfe, 0x80, [], 0x40}, 0x2}}, {{0xa, 0x4e23, 0x8, @mcast1, 0x4}}]}, 0x510) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:07 executing program 0: poll(&(0x7f0000000100)=[{}], 0x1, 0x0) 03:27:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0) 03:27:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/109, 0x6d) ioctl$TCXONC(r0, 0x540a, 0x3) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x1) 03:27:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xd, 0x0, "df6977"}) 03:27:07 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 03:27:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xe, 0x0, "df6977"}) 03:27:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 03:27:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80086301, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0) 03:27:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x4}) 03:27:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x10, 0x0, "df6977"}) 03:27:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x11, 0x0, "df6977"}) 03:27:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0xb, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108906, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x18, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000080)={0x4, 0xfb2, 0x1}) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 03:27:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x12, 0x0, "df6977"}) 03:27:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x10, 0x2d, &(0x7f00000000c0)}) 03:27:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x25, 0x0, "df6977"}) 03:27:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x5}) 03:27:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x2d, &(0x7f00000000c0)}) 03:27:09 executing program 4: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000380)='>', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)='*\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000260000000e0001006e260eb92a351439bd657464657673696d0000000f0002006e657464657673696d30000208008e00000000000c008f0000000000000000000c009000"], 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x224, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004088}, 0x8050) 03:27:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x5c, 0x0, "df6977"}) 03:27:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) 03:27:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f0000000640)=""/79, 0x4f}], 0x7) [ 2151.426000][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:27:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x300, 0x0, "df6977"}) 03:27:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:27:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x500, 0x0, "df6977"}) 03:27:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xe00, "df6977"}) 03:27:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x6}) 03:27:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x600, 0x0, "df6977"}) 03:27:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:10 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20801, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x700, 0x0, "df6977"}) 03:27:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r6}, {r7}, {r8}, {r9}, {r10}], 0x5, 0x101) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000040)) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000000)={0x1152}) 03:27:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x900, 0x0, "df6977"}) 03:27:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x628402, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x7}) 03:27:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xa00, 0x0, "df6977"}) 03:27:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xe00, "df6977"}) 03:27:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x30000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r8, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) splice(r2, 0x0, r7, 0x0, 0x4, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000000)) 03:27:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x2, 0x0, "df6977"}) 03:27:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xd, "df6977"}) 03:27:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x3, 0x0, "df6977"}) 03:27:11 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xb00, 0x0, "df6977"}) 03:27:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x4, 0x0, "df6977"}) [ 2153.505826][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:27:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x8}) 03:27:12 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:12 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0101000000000000000026000000000001007063690006000000303030303a30303a31302e300000000024008e00000000000c008f000100000000f5019000"/74], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4040001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) splice(r4, 0x0, r1, 0x0, 0x7, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x6, 0x10010, r0, 0x82000000) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x2, 0x3ff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a94, 0x6, [], @p_u8=&(0x7f0000000040)=0x8}}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r9, 0x6}}, 0x10) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) 03:27:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xc00, 0x0, "df6977"}) 03:27:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x5, 0x0, "df6977"}) 03:27:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x6, 0x0, "df6977"}) 03:27:12 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xea) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000000, 0x810, r0, 0x46d2b000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="aa904c5cbc33e0eaf27324a2c3406b97c0c0c314", 0x14}, {&(0x7f0000000100)="739939d0964d8316ca97a1def0ec8d3b3b3e7c297e24665d700534721d43ee431d3367a95433aee48c01805f866f7ad476f7e289103848212692c2919f322b0bfe13d8c999f4f07b4330cd4f380fe9ee8f34253c7e67d243d08e7443f2a20e969634881c3dd1f91f011d245967103e97de279365fc9dce43ef08b1d280d518f08b61108dba4094dd825ffc617cc0f258c8d7ab8f4300b7bb867e2780ddba8d85befe173b148e630ff4daf10f0a6c44142e7c6fe3d98468e8a749ac3cd2f3", 0xbe}, {&(0x7f00000001c0)="0d656bc211fc29dd92ac906adb0d0cc7c1faa6f29f0511aeeda1b78cd46d22a0ed641c19b2626c17fbb9cf18a6b5496ea5678cecc64c5648033af8b2db687c2b9e68a1d771fae93b4e7b", 0x4a}, {&(0x7f0000000240)="8f3cfc79c5d44d927e626bfb7556725e1b3ba58c0a77c6adda5bfbc32ba24c6a980eb180360e23bbc2cdb99d3ca05c83a06215ae6b0928c61abd4ed9d3a97ee59465ac0af8dd6cb7a0f3405e67644ad9cfabacca9c869b409f1e88a30f8e99190e8c5c1b351f7c9c6b4817b01e4de89e183b4ad1e28bc5d016", 0x79}, {&(0x7f00000002c0)="166e78876f15052b754f", 0xa}, {&(0x7f0000000300)="cf51e70c7369eea0be5064", 0xb}, {&(0x7f0000000340)="c026e5a9058e8fdf3c1cfa51b068bc022de7b2a2da5bb8d7e7ed89c92d734a5cce6ed0dbb264a3b6126a8d922e06290f03aff46bf388ae2ef1f180427179e1f130008fe9018b7a00ec", 0x49}, {&(0x7f00000003c0)}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/461], 0x1a8}, 0x0) 03:27:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xd00, 0x0, "df6977"}) 03:27:12 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x7, 0x0, "df6977"}) 03:27:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x9}) 03:27:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f00000000c0)) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x230000) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x200, @mcast1, 0x4}, {0xa, 0x4e24, 0xfffffffd, @ipv4={[], [], @local}, 0xaded}, 0x4, [0x6e7, 0x1, 0x0, 0x1, 0x1, 0x6600000, 0x7, 0xf60]}, 0x5c) 03:27:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xe00, 0x0, "df6977"}) 03:27:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x8, 0x0, "df6977"}) 03:27:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x9, 0x0, "df6977"}) 03:27:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x1100, 0x0, "df6977"}) 03:27:13 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:13 executing program 4: r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x803, 0x5) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002c00270d000000000000f3ffffff8000", @ANYRES32=r4, @ANYRESHEX=r5], 0x74}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x36, &(0x7f0000000000)={@loopback, r4}, 0x14) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xa, 0x0, "df6977"}) [ 2155.139138][T18314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2155.195294][ T5032] Bluetooth: hci2: command 0x0401 tx timeout [ 2155.300876][T18314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2155.345385][ T5032] Bluetooth: hci3: command 0x0401 tx timeout [ 2155.435355][ T5032] Bluetooth: hci4: command 0x0401 tx timeout [ 2155.595675][ T5032] Bluetooth: hci0: command 0x0401 tx timeout 03:27:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xa}) 03:27:13 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x1200, 0x0, "df6977"}) 03:27:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xb, 0x0, "df6977"}) 03:27:13 executing program 4: r0 = socket(0x3, 0xa, 0x4) getpeername$qrtr(r0, &(0x7f00000002c0), &(0x7f0000000340)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x16c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000100)=""/40) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x6, 0x0) r8 = accept4$rose(r7, &(0x7f0000000000)=@short={0xb, @dev, @netrom, 0x1, @bcast}, &(0x7f0000000040)=0x1c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000000000000000000000f3ff00"]) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:14 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2155.851618][T18341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:27:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffe0, 0x8, 0x81, 0x8, 0x1}}) 03:27:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x2500, 0x0, "df6977"}) 03:27:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xc, 0x0, "df6977"}) 03:27:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x3f00, 0x0, "df6977"}) [ 2155.998015][T18347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:27:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xd, 0x0, "df6977"}) [ 2156.066082][ T5032] Bluetooth: hci5: command 0x0401 tx timeout 03:27:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xb}) 03:27:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 03:27:14 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0x7ff, 0x7f, 0x1ff, 0x10}}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x5c00, 0x0, "df6977"}) 03:27:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xe, 0x0, "df6977"}) 03:27:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 03:27:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x10, 0x0, "df6977"}) 03:27:15 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 03:27:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xc}) 03:27:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x2, "df6977"}) 03:27:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x40, 0x40, 0x6, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01030000000000000000020000008f40af6fde4d66f59c8ece89b007949e9ca50018a452fa3295a64f85d53ab8cc042bfc76df721fb6840ce4425747efeeca28ab7149f7433365722c80ccd50e7c89e18a968562a7a6dfd4a4e268336628bb334a49471bb4822679f175a1dbb043e0384b5e1fa4fa796f4d1a1477460ae333b3f15c184ed82e943e963e4bf804da85069c8a4ae597defe53b7e8c1b35995665932b6fee383fa96f765d825a8ecb5c473af65c79289e386df1f41700dcad94d250da67a03eac40ae9ea"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="10450000", @ANYRES16=r5, @ANYBLOB="080026bd7000ffdbdf25010000000500060005000000050006008000000008000200030000000500060009000000050006000000000014000100fe880000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r1, 0x0, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r7, r8/1000+60000}}, 0x0) 03:27:15 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x11, 0x0, "df6977"}) 03:27:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x8, 0x81, 0x8, 0x1}}) 03:27:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x3, "df6977"}) 03:27:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x81, 0x8, 0x1}}) 03:27:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3) 03:27:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, 0x0) 03:27:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x12, 0x0, "df6977"}) [ 2157.675367][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:27:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x4, "df6977"}) 03:27:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xd}) 03:27:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x5, "df6977"}) 03:27:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x0, 0x8, 0x1}}) 03:27:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x25, 0x0, "df6977"}) 03:27:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, 0x0) 03:27:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) 03:27:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}) 03:27:16 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x5c, 0x0, "df6977"}) 03:27:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x6, "df6977"}) 03:27:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, 0x0) 03:27:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xe}) 03:27:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x7, "df6977"}) 03:27:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x300, 0x0, "df6977"}) 03:27:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1a, 0x803, 0xfffffffc) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) iopl(0xfc) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', r5}) write$sequencer(r1, &(0x7f0000000000)=[@s={0x5, @generic=0x80, 0x15, 0x42}, @n={0x0, 0x4b, @generic=0x9}], 0x8) 03:27:17 executing program 5: r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x803, 0x5) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002c00270d000000000000f3ffffff8000", @ANYRES32=r4, @ANYRESHEX=r5], 0x74}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x36, &(0x7f0000000000)={@loopback, r4}, 0x14) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x500, 0x0, "df6977"}) [ 2159.382111][T18494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:27:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x8, "df6977"}) [ 2159.460600][T18500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:27:17 executing program 5: r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0xff2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x803, 0x5) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002c00270d000000000000f3ffffff8000", @ANYRES32=r4, @ANYRESHEX=r5], 0x74}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x36, &(0x7f0000000000)={@loopback, r4}, 0x14) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x600, 0x0, "df6977"}) 03:27:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) [ 2159.578440][T18510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2159.659379][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2159.755386][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:27:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x10}) 03:27:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x9, "df6977"}) 03:27:18 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 03:27:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x700, 0x0, "df6977"}) 03:27:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r6, 0x1}, &(0x7f0000000040)=0x8) 03:27:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xb, "df6977"}) 03:27:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xa, "df6977"}) 03:27:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xa, "df6977"}) 03:27:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x900, 0x0, "df6977"}) 03:27:18 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r4}, {r5}, {r6}, {r7}, {r8}], 0x5, 0x101) ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000100)={0x8, 0x8, 0x5}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000002bc0000260000000e0001006e647464657673696d0000000f0002006e657464657673696d30000008008e000028000600008f0000000000000000000c0090e70000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000000c0)={r0, 0x7fffffff, 0x6, 0xd98}) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:18 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 03:27:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xb, "df6977"}) [ 2160.508507][T18576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:27:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x11}) 03:27:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xa00, 0x0, "df6977"}) 03:27:19 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 03:27:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xc, "df6977"}) 03:27:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:19 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x48082) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 03:27:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xd, "df6977"}) 03:27:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xb00, 0x0, "df6977"}) 03:27:19 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 03:27:19 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) [ 2161.417147][T18610] FAULT_INJECTION: forcing a failure. [ 2161.417147][T18610] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.441913][T18610] CPU: 0 PID: 18610 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 2161.450440][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.460488][T18610] Call Trace: [ 2161.463763][T18610] dump_stack+0x1f0/0x31e [ 2161.468092][T18610] should_fail+0x38a/0x4e0 [ 2161.472506][T18610] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2161.478214][T18610] should_failslab+0x5/0x20 [ 2161.482716][T18610] __kmalloc+0x74/0x330 [ 2161.486872][T18610] ? tomoyo_realpath_from_path+0xcb/0x630 [ 2161.492584][T18610] tomoyo_realpath_from_path+0xd8/0x630 [ 2161.498131][T18610] tomoyo_path_number_perm+0x18f/0x690 [ 2161.503597][T18610] security_file_ioctl+0x55/0xb0 [ 2161.508526][T18610] __se_sys_ioctl+0x48/0x160 [ 2161.513114][T18610] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2161.519267][T18610] do_syscall_64+0x73/0xe0 [ 2161.523675][T18610] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2161.529544][T18610] RIP: 0033:0x45cce9 [ 2161.533415][T18610] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2161.553129][T18610] RSP: 002b:00007f889c8dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2161.561537][T18610] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2161.569492][T18610] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2161.577455][T18610] RBP: 00007f889c8deca0 R08: 0000000000000000 R09: 0000000000000000 [ 2161.585428][T18610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2161.593396][T18610] R13: 00007ffdc6ca16ff R14: 00007f889c8df9c0 R15: 000000000078bf0c [ 2161.614659][T18610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2161.835081][T17382] Bluetooth: hci0: command 0x0401 tx timeout 03:27:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xc00, 0x0, "df6977"}) 03:27:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xe, "df6977"}) 03:27:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 03:27:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x12}) 03:27:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:20 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x10, "df6977"}) [ 2162.072347][T18622] FAULT_INJECTION: forcing a failure. [ 2162.072347][T18622] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.120754][T18622] CPU: 1 PID: 18622 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 2162.129109][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.139166][T18622] Call Trace: [ 2162.142462][T18622] dump_stack+0x1f0/0x31e [ 2162.146801][T18622] should_fail+0x38a/0x4e0 [ 2162.151230][T18622] ? tomoyo_encode2+0x25a/0x560 [ 2162.156083][T18622] should_failslab+0x5/0x20 [ 2162.160592][T18622] __kmalloc+0x74/0x330 [ 2162.164760][T18622] tomoyo_encode2+0x25a/0x560 [ 2162.169449][T18622] tomoyo_realpath_from_path+0x5d6/0x630 [ 2162.175090][T18622] tomoyo_path_number_perm+0x18f/0x690 [ 2162.180587][T18622] security_file_ioctl+0x55/0xb0 [ 2162.185533][T18622] __se_sys_ioctl+0x48/0x160 [ 2162.190130][T18622] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2162.196204][T18622] do_syscall_64+0x73/0xe0 [ 2162.200636][T18622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2162.206544][T18622] RIP: 0033:0x45cce9 03:27:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x11, "df6977"}) 03:27:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x12, "df6977"}) 03:27:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x25, "df6977"}) [ 2162.210440][T18622] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2162.230046][T18622] RSP: 002b:00007f889c8dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2162.238468][T18622] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2162.246443][T18622] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2162.254415][T18622] RBP: 00007f889c8deca0 R08: 0000000000000000 R09: 0000000000000000 [ 2162.262387][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:27:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xd00, 0x0, "df6977"}) 03:27:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 03:27:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x5c, "df6977"}) [ 2162.270358][T18622] R13: 00007ffdc6ca16ff R14: 00007f889c8df9c0 R15: 000000000078bf0c [ 2162.293338][T18622] ERROR: Out of memory at tomoyo_realpath_from_path. 03:27:20 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xe00, 0x0, "df6977"}) [ 2162.431175][T18647] FAULT_INJECTION: forcing a failure. [ 2162.431175][T18647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2162.444490][T18647] CPU: 1 PID: 18647 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 2162.452817][T18647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.462868][T18647] Call Trace: [ 2162.466161][T18647] dump_stack+0x1f0/0x31e [ 2162.470495][T18647] should_fail+0x38a/0x4e0 [ 2162.474916][T18647] prepare_alloc_pages+0x28c/0x4a0 [ 2162.480123][T18647] __alloc_pages_nodemask+0xbc/0x5e0 [ 2162.485413][T18647] kmem_getpages+0x49/0x900 [ 2162.489918][T18647] cache_grow_begin+0x7b/0x2e0 [ 2162.494686][T18647] ____cache_alloc_node+0x179/0x220 [ 2162.499885][T18647] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2162.505591][T18647] __kmalloc+0x18b/0x330 [ 2162.509817][T18647] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2162.515523][T18647] tomoyo_realpath_from_path+0xd8/0x630 [ 2162.521057][T18647] tomoyo_path_number_perm+0x18f/0x690 [ 2162.526509][T18647] security_file_ioctl+0x55/0xb0 [ 2162.531424][T18647] __se_sys_ioctl+0x48/0x160 [ 2162.535991][T18647] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2162.542040][T18647] do_syscall_64+0x73/0xe0 [ 2162.546621][T18647] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2162.552496][T18647] RIP: 0033:0x45cce9 [ 2162.556380][T18647] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2162.575962][T18647] RSP: 002b:00007f889c8dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2162.584357][T18647] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2162.592306][T18647] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2162.600255][T18647] RBP: 00007f889c8deca0 R08: 0000000000000000 R09: 0000000000000000 [ 2162.608217][T18647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2162.616225][T18647] R13: 00007ffdc6ca16ff R14: 00007f889c8df9c0 R15: 000000000078bf0c 03:27:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x25}) 03:27:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 03:27:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="f34eb4ebf20055445c118fd5a7d841b6bbcf98ed9efb2f40a510e614ab5735c2ed876e203142a0a02315828569078162044af1298b4ed8b505a39dc5787a4577b49ffbf80bfdd2785be0b49c1d86b12184b1a762f1372031026a143393d84e690b4af6d8605bf217e30d7ced5ec8c70212640348078db76fdb99ec8bed865a8f5e883b0c3fd51e125c200aed8687818adf15e4e207db0f445024fa01c3962da38f24f3fa25b416a77a699554e33acc24ba8bf34caa014bdf8581896613a30eb6a0141e7b219027ace47ffa93242e5b478d329801bcdb898f74fcffad7ff7836927bdbba3bbdfb6108c6195cc16fd211dd049d81a24939a6cc327c3c90a1e2ac729fe513f7a55ff0335dda7b559fc030455205ad7c1fb65251b7d7e3532e64fa1210e443f2b54d959a2d451f86ebaec739facf4fd2b3f49769c35c6a45c3773ce04eacc837bd0a256b7c72d033cfbc8379275f05bb938a9d09644642aded159d48f68c112b316ad94d289100e3d582934a8daa578c714735402b81e79f6731a0ac0260ea9743b2494ec1dacb508218b0cdf85e061d8db36283ce8ce64c6da25fcb1b5d1ed2f55b225b4f12c5086fe66f107b0b5c4c22953799184c9263a0e3ab05cbf9cdc7a301db211a333f1a72bd59471811ce3f0aa84960d09d7540dd5b8ede9fe4c1e3955dd1048c722297b9b50479e45c911ef9abb0ee0aca2f82f595b6e7c8d400a803b121c02d75d828bcd57d695e2e601095714a06da107e167876a99dfa83d7a336a6354d7452021a6b63fd5da038b7cc37089aaea05636a466dc909d0070c6e38ffcf3f11fe1b0c269f0363ba97ce22a4117fd9a9c6a5f292e4f9bc854761e35b0f7c06e1261a0b03208714a328565f0ee25653a4b89dbc65731a17bb17fbd7ba67b59769853e888178d61e54b14f99f74df1293789e2242f4d9840acdb7eec5eab549209f085ecea77fba9ad5918c3255086b48fc924c028d568723bfe88161fb54037870e7127ef02114c155f08a36a319ff94cfd2e207702bb331dac8e5cb80fbce0b717f65edb8f609802cde154fa489a2d3543c9e6bfa83fdf6b9240efc50642357876018633fb7e16f96fdaea0bcc1a989e8b3e70269983f7ebb45e07913004f81f68352b0fc3cff7cc78aafa55bdf9d750d6f2a0182a20679396a6475c7981150c7fd27968678a9a52a8223001d26c9366d5c8252b51662c620cd74977a315b5b7507bffee96e94fdce01f23dec0359783605b4df153c1a923e76782b4e73bf828f5b10c7752e7bac3af14261604dd51cd30299abff447db092135ca6a9aa4a9f1658c1f20f8842ab59c363824087bebd66d1b64bd444b8b126f6ccbd9d3e5593da0d762185209104ce1774f2a930a43f0a687689a090cd27323097cdf8ec58c16f9b23642030e9bb8fd0d6737ef38f8c9857cbc38008b12"}) 03:27:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x300, "df6977"}) 03:27:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1100, 0x0, "df6977"}) 03:27:21 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x500, "df6977"}) 03:27:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x600, "df6977"}) [ 2162.957497][T18663] FAULT_INJECTION: forcing a failure. [ 2162.957497][T18663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:27:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1200, 0x0, "df6977"}) 03:27:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 2163.045574][T18663] CPU: 1 PID: 18663 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 2163.053915][T18663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.063968][T18663] Call Trace: [ 2163.067254][T18663] dump_stack+0x1f0/0x31e [ 2163.071591][T18663] should_fail+0x38a/0x4e0 [ 2163.076007][T18663] prepare_alloc_pages+0x28c/0x4a0 [ 2163.081128][T18663] __alloc_pages_nodemask+0xbc/0x5e0 [ 2163.086426][T18663] kmem_getpages+0x49/0x900 [ 2163.090927][T18663] ? cache_grow_begin+0x54/0x2e0 03:27:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x700, "df6977"}) 03:27:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 2163.095867][T18663] cache_grow_begin+0x7b/0x2e0 [ 2163.100632][T18663] fallback_alloc+0x135/0x1d0 [ 2163.105315][T18663] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2163.111115][T18663] __kmalloc+0x18b/0x330 [ 2163.115355][T18663] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2163.121074][T18663] tomoyo_realpath_from_path+0xd8/0x630 [ 2163.126629][T18663] tomoyo_path_number_perm+0x18f/0x690 [ 2163.132116][T18663] security_file_ioctl+0x55/0xb0 [ 2163.137081][T18663] __se_sys_ioctl+0x48/0x160 [ 2163.141669][T18663] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2163.147735][T18663] do_syscall_64+0x73/0xe0 [ 2163.152150][T18663] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2163.158037][T18663] RIP: 0033:0x45cce9 [ 2163.161929][T18663] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2163.181524][T18663] RSP: 002b:00007f889c8dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2163.189940][T18663] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2163.197899][T18663] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2163.205844][T18663] RBP: 00007f889c8deca0 R08: 0000000000000000 R09: 0000000000000000 [ 2163.213792][T18663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2163.221753][T18663] R13: 00007ffdc6ca16ff R14: 00007f889c8df9c0 R15: 000000000078bf0c [ 2163.246979][T18663] ERROR: Out of memory at tomoyo_realpath_from_path. 03:27:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x5c}) 03:27:21 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x900, "df6977"}) 03:27:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x2500, 0x0, "df6977"}) 03:27:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:21 executing program 4 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xa00, "df6977"}) [ 2163.812258][T18689] FAULT_INJECTION: forcing a failure. [ 2163.812258][T18689] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.828901][T18692] FAULT_INJECTION: forcing a failure. [ 2163.828901][T18692] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.872725][T18689] CPU: 0 PID: 18689 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 2163.881078][T18689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.891138][T18689] Call Trace: [ 2163.894429][T18689] dump_stack+0x1f0/0x31e [ 2163.898775][T18689] should_fail+0x38a/0x4e0 [ 2163.903190][T18689] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2163.908899][T18689] should_failslab+0x5/0x20 [ 2163.913394][T18689] __kmalloc+0x74/0x330 [ 2163.917547][T18689] ? tomoyo_realpath_from_path+0xcb/0x630 [ 2163.923258][T18689] tomoyo_realpath_from_path+0xd8/0x630 [ 2163.928843][T18689] tomoyo_path_number_perm+0x18f/0x690 [ 2163.934317][T18689] security_file_ioctl+0x55/0xb0 [ 2163.939247][T18689] __se_sys_ioctl+0x48/0x160 [ 2163.943829][T18689] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2163.949887][T18689] do_syscall_64+0x73/0xe0 [ 2163.954299][T18689] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2163.960182][T18689] RIP: 0033:0x45cce9 [ 2163.964062][T18689] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2163.983775][T18689] RSP: 002b:00007fe329acfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2163.992172][T18689] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2164.000822][T18689] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2164.008782][T18689] RBP: 00007fe329acfca0 R08: 0000000000000000 R09: 0000000000000000 03:27:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x3f00, 0x0, "df6977"}) 03:27:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xb00, "df6977"}) [ 2164.016749][T18689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2164.024718][T18689] R13: 00007ffeac5b910f R14: 00007fe329ad09c0 R15: 000000000078bf0c [ 2164.032699][T18692] CPU: 1 PID: 18692 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 2164.034089][ T5032] Bluetooth: hci0: command 0x0401 tx timeout [ 2164.041016][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.041021][T18692] Call Trace: [ 2164.041035][T18692] dump_stack+0x1f0/0x31e [ 2164.041048][T18692] should_fail+0x38a/0x4e0 [ 2164.041062][T18692] ? tomoyo_encode2+0x25a/0x560 [ 2164.073863][T18692] should_failslab+0x5/0x20 [ 2164.078364][T18692] __kmalloc+0x74/0x330 [ 2164.081777][T18689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2164.082514][T18692] tomoyo_encode2+0x25a/0x560 [ 2164.082531][T18692] tomoyo_realpath_from_path+0x5d6/0x630 [ 2164.099531][T18692] tomoyo_path_number_perm+0x18f/0x690 [ 2164.099581][T18692] security_file_ioctl+0x55/0xb0 [ 2164.110088][T18692] __se_sys_ioctl+0x48/0x160 [ 2164.114672][T18692] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 03:27:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x4000, 0x0, "df6977"}) [ 2164.120735][T18692] do_syscall_64+0x73/0xe0 [ 2164.125150][T18692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2164.131034][T18692] RIP: 0033:0x45cce9 [ 2164.134923][T18692] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2164.154522][T18692] RSP: 002b:00007f889c8dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2164.162928][T18692] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 03:27:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) [ 2164.171850][T18692] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2164.179814][T18692] RBP: 00007f889c8deca0 R08: 0000000000000000 R09: 0000000000000000 [ 2164.187775][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2164.195739][T18692] R13: 00007ffdc6ca16ff R14: 00007f889c8df9c0 R15: 000000000078bf0c [ 2164.351246][T18692] ERROR: Out of memory at tomoyo_realpath_from_path. 03:27:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:22 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x5c00, 0x0, "df6977"}) 03:27:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xc00, "df6977"}) 03:27:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:22 executing program 4 (fault-call:1 fault-nth:5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) [ 2164.636727][T18720] FAULT_INJECTION: forcing a failure. [ 2164.636727][T18720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2164.649960][T18720] CPU: 1 PID: 18720 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 2164.658284][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.668345][T18720] Call Trace: [ 2164.671646][T18720] dump_stack+0x1f0/0x31e [ 2164.675986][T18720] should_fail+0x38a/0x4e0 [ 2164.680411][T18720] prepare_alloc_pages+0x28c/0x4a0 [ 2164.685539][T18720] __alloc_pages_nodemask+0xbc/0x5e0 [ 2164.690830][T18720] ? __lock_acquire+0x116c/0x2c30 [ 2164.695869][T18720] kmem_getpages+0x49/0x900 [ 2164.700381][T18720] cache_grow_begin+0x7b/0x2e0 [ 2164.705155][T18720] cache_alloc_refill+0x359/0x3f0 [ 2164.710189][T18720] ? check_preemption_disabled+0x51/0x140 [ 2164.715915][T18720] __kmalloc+0x30c/0x330 [ 2164.720167][T18720] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2164.725898][T18720] tomoyo_realpath_from_path+0xd8/0x630 [ 2164.731463][T18720] tomoyo_path_number_perm+0x18f/0x690 [ 2164.736962][T18720] security_file_ioctl+0x55/0xb0 [ 2164.741910][T18720] __se_sys_ioctl+0x48/0x160 [ 2164.746520][T18720] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2164.752595][T18720] do_syscall_64+0x73/0xe0 [ 2164.757019][T18720] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2164.762913][T18720] RIP: 0033:0x45cce9 [ 2164.766811][T18720] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:27:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="f34eb4ebf20055445c118fd5a7d841b6bbcf98ed9efb2f40a510e614ab5735c2ed876e203142a0a02315828569078162044af1298b4ed8b505a39dc5787a4577b49ffbf80bfdd2785be0b49c1d86b12184b1a762f1372031026a143393d84e690b4af6d8605bf217e30d7ced5ec8c70212640348078db76fdb99ec8bed865a8f5e883b0c3fd51e125c200aed8687818adf15e4e207db0f445024fa01c3962da38f24f3fa25b416a77a699554e33acc24ba8bf34caa014bdf8581896613a30eb6a0141e7b219027ace47ffa93242e5b478d329801bcdb898f74fcffad7ff7836927bdbba3bbdfb6108c6195cc16fd211dd049d81a24939a6cc327c3c90a1e2ac729fe513f7a55ff0335dda7b559fc030455205ad7c1fb65251b7d7e3532e64fa1210e443f2b54d959a2d451f86ebaec739facf4fd2b3f49769c35c6a45c3773ce04eacc837bd0a256b7c72d033cfbc8379275f05bb938a9d09644642aded159d48f68c112b316ad94d289100e3d582934a8daa578c714735402b81e79f6731a0ac0260ea9743b2494ec1dacb508218b0cdf85e061d8db36283ce8ce64c6da25fcb1b5d1ed2f55b225b4f12c5086fe66f107b0b5c4c22953799184c9263a0e3ab05cbf9cdc7a301db211a333f1a72bd59471811ce3f0aa84960d09d7540dd5b8ede9fe4c1e3955dd1048c722297b9b50479e45c911ef9abb0ee0aca2f82f595b6e7c8d400a803b121c02d75d828bcd57d695e2e601095714a06da107e167876a99dfa83d7a336a6354d7452021a6b63fd5da038b7cc37089aaea05636a466dc909d0070c6e38ffcf3f11fe1b0c269f0363ba97ce22a4117fd9a9c6a5f292e4f9bc854761e35b0f7c06e1261a0b03208714a328565f0ee25653a4b89dbc65731a17bb17fbd7ba67b59769853e888178d61e54b14f99f74df1293789e2242f4d9840acdb7eec5eab549209f085ecea77fba9ad5918c3255086b48fc924c028d568723bfe88161fb54037870e7127ef02114c155f08a36a319ff94cfd2e207702bb331dac8e5cb80fbce0b717f65edb8f609802cde154fa489a2d3543c9e6bfa83fdf6b9240efc50642357876018633fb7e16f96fdaea0bcc1a989e8b3e70269983f7ebb45e07913004f81f68352b0fc3cff7cc78aafa55bdf9d750d6f2a0182a20679396a6475c7981150c7fd27968678a9a52a8223001d26c9366d5c8252b51662c620cd74977a315b5b7507bffee96e94fdce01f23dec0359783605b4df153c1a923e76782b4e73bf828f5b10c7752e7bac3af14261604dd51cd30299abff447db092135ca6a9aa4a9f1658c1f20f8842ab59c363824087bebd66d1b64bd444b8b126f6ccbd9d3e5593da0d762185209104ce1774f2a930a43f0a687689a090cd27323097cdf8ec58c16f9b23642030e9bb8fd0d6737ef38f8c9857cbc38008b12"}) 03:27:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xd00, "df6977"}) [ 2164.786413][T18720] RSP: 002b:00007fe329acfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2164.794827][T18720] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2164.802804][T18720] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2164.810777][T18720] RBP: 00007fe329acfca0 R08: 0000000000000000 R09: 0000000000000000 [ 2164.818754][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.826732][T18720] R13: 00007ffeac5b910f R14: 00007fe329ad09c0 R15: 000000000078bf0c 03:27:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0xe00, "df6977"}) 03:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:23 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x2}) 03:27:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x2, "df6977"}) 03:27:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x1100, "df6977"}) 03:27:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x3}) [ 2165.059784][T18749] FAULT_INJECTION: forcing a failure. [ 2165.059784][T18749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2165.073008][T18749] CPU: 1 PID: 18749 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 2165.081332][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.091388][T18749] Call Trace: [ 2165.094679][T18749] dump_stack+0x1f0/0x31e [ 2165.099013][T18749] should_fail+0x38a/0x4e0 [ 2165.103442][T18749] prepare_alloc_pages+0x28c/0x4a0 03:27:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) [ 2165.108559][T18749] __alloc_pages_nodemask+0xbc/0x5e0 [ 2165.113862][T18749] kmem_getpages+0x49/0x900 [ 2165.118462][T18749] cache_grow_begin+0x7b/0x2e0 [ 2165.123228][T18749] ____cache_alloc_node+0x179/0x220 [ 2165.128450][T18749] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2165.134163][T18749] __kmalloc+0x18b/0x330 [ 2165.138404][T18749] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2165.144119][T18749] tomoyo_realpath_from_path+0xd8/0x630 [ 2165.149669][T18749] tomoyo_path_number_perm+0x18f/0x690 [ 2165.155160][T18749] security_file_ioctl+0x55/0xb0 03:27:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x1200, "df6977"}) [ 2165.160102][T18749] __se_sys_ioctl+0x48/0x160 [ 2165.164697][T18749] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.170852][T18749] do_syscall_64+0x73/0xe0 [ 2165.175272][T18749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.181187][T18749] RIP: 0033:0x45cce9 [ 2165.185081][T18749] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) [ 2165.204686][T18749] RSP: 002b:00007fe329acfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2165.213098][T18749] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2165.221068][T18749] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2165.229120][T18749] RBP: 00007fe329acfca0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.237087][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.245150][T18749] R13: 00007ffeac5b910f R14: 00007fe329ad09c0 R15: 000000000078bf0c 03:27:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x4}) 03:27:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x3, "df6977"}) 03:27:23 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3f00}}) 03:27:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x2500, "df6977"}) 03:27:23 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x5}) 03:27:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x4, "df6977"}) [ 2165.537565][T18787] FAULT_INJECTION: forcing a failure. [ 2165.537565][T18787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:27:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) [ 2165.611691][T18787] CPU: 1 PID: 18787 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 2165.620052][T18787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.630238][T18787] Call Trace: [ 2165.633537][T18787] dump_stack+0x1f0/0x31e [ 2165.637876][T18787] should_fail+0x38a/0x4e0 [ 2165.642302][T18787] prepare_alloc_pages+0x28c/0x4a0 [ 2165.647422][T18787] __alloc_pages_nodemask+0xbc/0x5e0 [ 2165.652723][T18787] kmem_getpages+0x49/0x900 03:27:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) [ 2165.657234][T18787] ? cache_grow_begin+0x54/0x2e0 [ 2165.662178][T18787] cache_grow_begin+0x7b/0x2e0 [ 2165.666952][T18787] fallback_alloc+0x135/0x1d0 [ 2165.671635][T18787] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2165.677358][T18787] __kmalloc+0x18b/0x330 [ 2165.681646][T18787] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2165.687381][T18787] tomoyo_realpath_from_path+0xd8/0x630 [ 2165.692958][T18787] tomoyo_path_number_perm+0x18f/0x690 [ 2165.698498][T18787] security_file_ioctl+0x55/0xb0 [ 2165.703462][T18787] __se_sys_ioctl+0x48/0x160 03:27:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x3f00, "df6977"}) [ 2165.708064][T18787] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.714140][T18787] do_syscall_64+0x73/0xe0 [ 2165.718564][T18787] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.724461][T18787] RIP: 0033:0x45cce9 [ 2165.728370][T18787] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2165.747978][T18787] RSP: 002b:00007fe329acfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2165.756400][T18787] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2165.764380][T18787] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2165.772362][T18787] RBP: 00007fe329acfca0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.780345][T18787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2165.788323][T18787] R13: 00007ffeac5b910f R14: 00007fe329ad09c0 R15: 000000000078bf0c 03:27:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x6}) 03:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x3f00}}) 03:27:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) [ 2165.861712][T18787] ERROR: Out of memory at tomoyo_realpath_from_path. 03:27:24 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x5c00, "df6977"}) 03:27:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x5, "df6977"}) 03:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:24 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x6, "df6977"}) 03:27:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x7}) 03:27:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df2577"}) [ 2166.064604][ T5032] Bluetooth: hci0: command 0x0c1a tx timeout [ 2166.066209][T18821] FAULT_INJECTION: forcing a failure. [ 2166.066209][T18821] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.133563][T18821] CPU: 1 PID: 18821 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 2166.141920][T18821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.151982][T18821] Call Trace: [ 2166.155277][T18821] dump_stack+0x1f0/0x31e [ 2166.159612][T18821] should_fail+0x38a/0x4e0 [ 2166.164035][T18821] ? tomoyo_encode2+0x25a/0x560 [ 2166.168885][T18821] should_failslab+0x5/0x20 [ 2166.173418][T18821] __kmalloc+0x74/0x330 [ 2166.177590][T18821] tomoyo_encode2+0x25a/0x560 [ 2166.182280][T18821] tomoyo_realpath_from_path+0x5d6/0x630 [ 2166.187918][T18821] tomoyo_path_number_perm+0x18f/0x690 [ 2166.193410][T18821] security_file_ioctl+0x55/0xb0 [ 2166.198353][T18821] __se_sys_ioctl+0x48/0x160 [ 2166.202942][T18821] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2166.209020][T18821] do_syscall_64+0x73/0xe0 [ 2166.213449][T18821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2166.219335][T18821] RIP: 0033:0x45cce9 [ 2166.223227][T18821] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2166.242921][T18821] RSP: 002b:00007fe329acfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2166.251333][T18821] RAX: ffffffffffffffda RBX: 0000000000018580 RCX: 000000000045cce9 [ 2166.259309][T18821] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000003 [ 2166.267277][T18821] RBP: 00007fe329acfca0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.275274][T18821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 03:27:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x3f00}}) 03:27:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x7, "df6977"}) 03:27:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x8}) [ 2166.283247][T18821] R13: 00007ffeac5b910f R14: 00007fe329ad09c0 R15: 000000000078bf0c 03:27:24 executing program 0 (fault-call:1 fault-nth:5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:24 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:27:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x2}) 03:27:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x8, "df6977"}) 03:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) [ 2166.470228][T18821] ERROR: Out of memory at tomoyo_realpath_from_path. 03:27:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xa}) 03:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3f00}}) 03:27:24 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) 03:27:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x3}) 03:27:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x9, "df6977"}) 03:27:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xb}) 03:27:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x4}) 03:27:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, 0x0) 03:27:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xa, "df6977"}) 03:27:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f00000000c0)) 03:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, 0x0) 03:27:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3f00}}) 03:27:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xc}) 03:27:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xb, "df6977"}) 03:27:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x5}) 03:27:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x10, &(0x7f00000000c0)) 03:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, 0x0) 03:27:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 03:27:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xc, "df6977"}) 03:27:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xd}) 03:27:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x6}) 03:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)="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"}) 03:27:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f00000000c0)) 03:27:25 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xd, "df6977"}) 03:27:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x7}) 03:27:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xe}) 03:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)="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"}) 03:27:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f00000000c0)) 03:27:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x8}) 03:27:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xe, "df6977"}) 03:27:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 03:27:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f00000000c0)) 03:27:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x10}) 03:27:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x9}) 03:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)={0x30, r4, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x1fc, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a0b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf84b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc92a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb08}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800000}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) 03:27:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f00000000c0)) 03:27:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x10, "df6977"}) 03:27:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x11}) 03:27:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xa}) [ 2167.684736][T18970] tipc: Started in network mode 03:27:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x125, 0x20, &(0x7f0000000140)="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"}) [ 2167.712987][T18970] tipc: Own node identity , cluster identity 4711 03:27:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f00000000c0)) 03:27:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x11, "df6977"}) 03:27:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0xc401, 0x0) accept4$packet(r1, &(0x7f0000000080), &(0x7f0000000100)=0x14, 0x800) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0xff2c) bind$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x7fffffff, @empty, 0x138, 0x4}, 0x20) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x81, 0x4f, 0x200, 0x8, 0x7}) 03:27:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x12}) 03:27:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xb}) 03:27:26 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f00000000c0)) 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x12, "df6977"}) 03:27:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xc}) 03:27:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x25}) [ 2167.984681][T19009] FAULT_INJECTION: forcing a failure. [ 2167.984681][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.030533][T19009] CPU: 0 PID: 19009 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 2168.038897][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.048956][T19009] Call Trace: [ 2168.052253][T19009] dump_stack+0x1f0/0x31e [ 2168.056589][T19009] should_fail+0x38a/0x4e0 [ 2168.061022][T19009] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2168.066752][T19009] should_failslab+0x5/0x20 [ 2168.071264][T19009] __kmalloc+0x74/0x330 [ 2168.075432][T19009] ? tomoyo_realpath_from_path+0xcb/0x630 [ 2168.081165][T19009] tomoyo_realpath_from_path+0xd8/0x630 [ 2168.086739][T19009] tomoyo_path_number_perm+0x18f/0x690 [ 2168.092244][T19009] security_file_ioctl+0x55/0xb0 [ 2168.097197][T19009] __se_sys_ioctl+0x48/0x160 [ 2168.101798][T19009] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2168.107883][T19009] do_syscall_64+0x73/0xe0 [ 2168.112317][T19009] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2168.118221][T19009] RIP: 0033:0x45cce9 03:27:26 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1000000000000000000026000000"], 0x14}}, 0x894) poll(&(0x7f0000000100)=[{r0}, {r1}, {r4}, {r2}, {r3, 0x6}], 0x5, 0x101) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc}}) r6 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8000, 0x200000) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000040)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "5804f8e20a2b6743", "70da18e13123b898712e2b14e7a93359032ec1c85e95f2c0ca497b68382a3174", "f00dd5b0", "4c994d6b13bf5566"}, 0x38) 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x25, "df6977"}) 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x5c, "df6977"}) [ 2168.122123][T19009] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2168.141733][T19009] RSP: 002b:00007fe40123ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2168.150271][T19009] RAX: ffffffffffffffda RBX: 0000000000012240 RCX: 000000000045cce9 [ 2168.158250][T19009] RDX: 0000000020000000 RSI: 0000000000004b6c RDI: 0000000000000003 [ 2168.166227][T19009] RBP: 00007fe40123eca0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.174218][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x300, "df6977"}) 03:27:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xd}) [ 2168.174226][T19009] R13: 00007ffd5a0c899f R14: 00007fe40123f9c0 R15: 000000000078bf0c [ 2168.184443][ T5032] Bluetooth: hci0: command 0x0c20 tx timeout 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x500, "df6977"}) 03:27:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f00000000c0)) 03:27:26 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xe}) 03:27:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x5c}) 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x600, "df6977"}) 03:27:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f00000000c0)) [ 2168.335807][T19009] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2168.436181][T19051] FAULT_INJECTION: forcing a failure. [ 2168.436181][T19051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2168.449403][T19051] CPU: 0 PID: 19051 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 2168.457722][T19051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.467772][T19051] Call Trace: [ 2168.471065][T19051] dump_stack+0x1f0/0x31e [ 2168.475396][T19051] should_fail+0x38a/0x4e0 [ 2168.479826][T19051] prepare_alloc_pages+0x28c/0x4a0 [ 2168.484941][T19051] __alloc_pages_nodemask+0xbc/0x5e0 [ 2168.490226][T19051] ? __lock_acquire+0x116c/0x2c30 [ 2168.495252][T19051] kmem_getpages+0x49/0x900 [ 2168.499928][T19051] cache_grow_begin+0x7b/0x2e0 [ 2168.504692][T19051] cache_alloc_refill+0x359/0x3f0 [ 2168.509713][T19051] ? check_preemption_disabled+0x51/0x140 [ 2168.515429][T19051] __kmalloc+0x30c/0x330 [ 2168.519670][T19051] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2168.525389][T19051] tomoyo_realpath_from_path+0xd8/0x630 [ 2168.530943][T19051] tomoyo_path_number_perm+0x18f/0x690 [ 2168.536432][T19051] security_file_ioctl+0x55/0xb0 [ 2168.541372][T19051] __se_sys_ioctl+0x48/0x160 [ 2168.545960][T19051] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2168.552023][T19051] do_syscall_64+0x73/0xe0 [ 2168.556438][T19051] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2168.562325][T19051] RIP: 0033:0x45cce9 [ 2168.566214][T19051] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:27:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:26 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0xe0240, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, "c149f5", 0x0, 0x7f}) 03:27:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x6daa40, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000000)=""/28) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f}}, 0x20) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f00000000c0)=0xfffffffe, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000180)={0xc, "fdcd01bfaea89542bfde456c8e5b443c12f873d34636592feafad30143050710", 0x1, 0x100, 0x100, 0x4, 0x1, 0x2, 0xffff, 0xba}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="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"], 0x54}}, 0x20000000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000100)={{0x1, 0x0, @descriptor="13f4b9d4cfe64793"}}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "64ae00"}) 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x700, "df6977"}) 03:27:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x10}) 03:27:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f00000000c0)) [ 2168.585829][T19051] RSP: 002b:00007fe40123ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2168.585840][T19051] RAX: ffffffffffffffda RBX: 0000000000012240 RCX: 000000000045cce9 [ 2168.585846][T19051] RDX: 0000000020000000 RSI: 0000000000004b6c RDI: 0000000000000003 [ 2168.585852][T19051] RBP: 00007fe40123eca0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.585858][T19051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2168.585870][T19051] R13: 00007ffd5a0c899f R14: 00007fe40123f9c0 R15: 000000000078bf0c 03:27:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)) 03:27:26 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x8, 0x1018c1) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r1, 0x0, 0x6, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000ad00f06425bd7000fcdbdf25fe880000000000000000000000000101ac1414aa0000e3050000000000000067000000368d57b8482c4600fcfaffcea41557b2b769b671843ba4cbd4357619bd472ac08f8f7b35cc25a2326daaf3924f3e93f9b3a2990d70905fb4b29388d7e879d12f67f04518cae7a81177404f4e17d87ac2332b2c74a36a5bfcdf2a00"/156, @ANYBLOB="ace21ecf3dea8325944234fdd964e877028c3ef0436ebf0df86e4d022570cf1746d7efc055fc6bd78fba7f90bb8e217a37a2d2a03b5f4df40e9b64eec0587f2b8ec725fe253ece7ac402d06451bd1f4c29853dd0b99bc64f2b4502b12220066b2ce6b45a48047de537090ecfd2aaa8b691b26ad48e18d076816c93688e941f7a7d41881d6378495b84634ed0fd72437807088260ebdbd42b30e0ec9bdb0678100134f6fd3a10d31a80b356583816270e04dc487932e624d8", @ANYRES32=r4, @ANYBLOB="b76b6e0001000000240009000000000800000004020000000000000002000000000000000800000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000c800}, 0x40884) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7) 03:27:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x900, "df6977"}) 03:27:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x11}) 03:27:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f00000000c0)) 03:27:27 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r4 = accept(r2, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)) [ 2168.954551][T19095] FAULT_INJECTION: forcing a failure. [ 2168.954551][T19095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2168.967785][T19095] CPU: 0 PID: 19095 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 2168.976109][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.986179][T19095] Call Trace: [ 2168.989474][T19095] dump_stack+0x1f0/0x31e [ 2168.993807][T19095] should_fail+0x38a/0x4e0 [ 2168.998227][T19095] prepare_alloc_pages+0x28c/0x4a0 [ 2169.003343][T19095] __alloc_pages_nodemask+0xbc/0x5e0 [ 2169.008643][T19095] kmem_getpages+0x49/0x900 [ 2169.013159][T19095] cache_grow_begin+0x7b/0x2e0 [ 2169.018041][T19095] ____cache_alloc_node+0x179/0x220 [ 2169.023246][T19095] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2169.028969][T19095] __kmalloc+0x18b/0x330 [ 2169.033219][T19095] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2169.038948][T19095] tomoyo_realpath_from_path+0xd8/0x630 [ 2169.044517][T19095] tomoyo_path_number_perm+0x18f/0x690 [ 2169.050009][T19095] security_file_ioctl+0x55/0xb0 [ 2169.054955][T19095] __se_sys_ioctl+0x48/0x160 [ 2169.059555][T19095] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.065628][T19095] do_syscall_64+0x73/0xe0 [ 2169.070060][T19095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.076131][T19095] RIP: 0033:0x45cce9 [ 2169.080038][T19095] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:27:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x12}) 03:27:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f00000000c0)) 03:27:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x25}) 03:27:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f00000000c0)) 03:27:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xa00, "df6977"}) 03:27:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x1b, &(0x7f0000000000), 0x4) [ 2169.099649][T19095] RSP: 002b:00007fe40123ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2169.108069][T19095] RAX: ffffffffffffffda RBX: 0000000000012240 RCX: 000000000045cce9 [ 2169.116052][T19095] RDX: 0000000020000000 RSI: 0000000000004b6c RDI: 0000000000000003 [ 2169.124050][T19095] RBP: 00007fe40123eca0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.132036][T19095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.140012][T19095] R13: 00007ffd5a0c899f R14: 00007fe40123f9c0 R15: 000000000078bf0c 03:27:27 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x5c}) 03:27:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xb00, "df6977"}) 03:27:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f00000000c0)) 03:27:27 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000180)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r5, 0x0, 0x4240a2a0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x6d, &(0x7f0000000080)={r8}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={r8, 0x61e}, 0x8) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) getsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) poll(&(0x7f00000001c0)=[{r0}, {r1}, {r2}, {r3}, {r4}], 0x5, 0x101) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x20, 0x1ff, 0x0, 0x1, 0x1}}) 03:27:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xc00, "df6977"}) 03:27:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f00000000c0)) 03:27:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2169.416502][T19130] FAULT_INJECTION: forcing a failure. [ 2169.416502][T19130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2169.480841][T19130] CPU: 0 PID: 19130 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 2169.489195][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.499350][T19130] Call Trace: [ 2169.499367][T19130] dump_stack+0x1f0/0x31e [ 2169.499381][T19130] should_fail+0x38a/0x4e0 [ 2169.499398][T19130] prepare_alloc_pages+0x28c/0x4a0 [ 2169.499413][T19130] __alloc_pages_nodemask+0xbc/0x5e0 [ 2169.499435][T19130] kmem_getpages+0x49/0x900 [ 2169.499445][T19130] ? cache_grow_begin+0x54/0x2e0 [ 2169.499459][T19130] cache_grow_begin+0x7b/0x2e0 [ 2169.499475][T19130] fallback_alloc+0x135/0x1d0 [ 2169.499492][T19130] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2169.499501][T19130] __kmalloc+0x18b/0x330 [ 2169.499512][T19130] ? tomoyo_realpath_from_path+0xd8/0x630 [ 2169.499524][T19130] tomoyo_realpath_from_path+0xd8/0x630 [ 2169.499544][T19130] tomoyo_path_number_perm+0x18f/0x690 [ 2169.499587][T19130] security_file_ioctl+0x55/0xb0 [ 2169.499602][T19130] __se_sys_ioctl+0x48/0x160 03:27:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f00000000c0)) 03:27:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x2}) [ 2169.576877][T19130] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.576890][T19130] do_syscall_64+0x73/0xe0 [ 2169.587470][T19130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.593357][T19130] RIP: 0033:0x45cce9 [ 2169.597248][T19130] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2169.616850][T19130] RSP: 002b:00007fe40123ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:27:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xd00, "df6977"}) [ 2169.625263][T19130] RAX: ffffffffffffffda RBX: 0000000000012240 RCX: 000000000045cce9 [ 2169.633232][T19130] RDX: 0000000020000000 RSI: 0000000000004b6c RDI: 0000000000000003 [ 2169.641200][T19130] RBP: 00007fe40123eca0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.649183][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 03:27:27 executing program 5 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x3}) [ 2169.649190][T19130] R13: 00007ffd5a0c899f R14: 00007fe40123f9c0 R15: 000000000078bf0c [ 2169.700324][T19130] ERROR: Out of memory at tomoyo_realpath_from_path. 03:27:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0xe00, "df6977"}) 03:27:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f00000000c0)) 03:27:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f00000000c0)) [ 2169.870797][T19161] FAULT_INJECTION: forcing a failure. [ 2169.870797][T19161] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.921982][T19161] CPU: 1 PID: 19161 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 2169.930333][T19161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.940390][T19161] Call Trace: [ 2169.943685][T19161] dump_stack+0x1f0/0x31e [ 2169.948016][T19161] should_fail+0x38a/0x4e0 [ 2169.952437][T19161] ? tomoyo_encode2+0x25a/0x560 [ 2169.957280][T19161] should_failslab+0x5/0x20 [ 2169.961790][T19161] __kmalloc+0x74/0x330 [ 2169.965944][T19161] tomoyo_encode2+0x25a/0x560 [ 2169.970623][T19161] tomoyo_realpath_from_path+0x5d6/0x630 [ 2169.976264][T19161] tomoyo_path_number_perm+0x18f/0x690 [ 2169.981747][T19161] security_file_ioctl+0x55/0xb0 [ 2169.986687][T19161] __se_sys_ioctl+0x48/0x160 [ 2169.991268][T19161] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.997311][T19161] do_syscall_64+0x73/0xe0 [ 2170.001710][T19161] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2170.008333][T19161] RIP: 0033:0x45cce9 [ 2170.012349][T19161] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2170.032092][T19161] RSP: 002b:00007fe40123ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2170.040494][T19161] RAX: ffffffffffffffda RBX: 0000000000012240 RCX: 000000000045cce9 [ 2170.048588][T19161] RDX: 0000000020000000 RSI: 0000000000004b6c RDI: 0000000000000003 [ 2170.056589][T19161] RBP: 00007fe40123eca0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.064545][T19161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2170.072520][T19161] R13: 00007ffd5a0c899f R14: 00007fe40123f9c0 R15: 000000000078bf0c [ 2170.093448][T19161] ERROR: Out of memory at tomoyo_realpath_from_path. 03:27:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f00000000c0)) 03:27:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x1100, "df6977"}) 03:27:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x7b30}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000140)=0x10) socket$inet(0x2, 0x4, 0x80084) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x2e}, 0xfffffff9}}, 0x5e, 0x4}, 0x90) gettid() ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x0, 0xff, 0x1}}) 03:27:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x4}) 03:27:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x0, 0x25dfdbff, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x20000000) r6 = dup2(r2, r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xca}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8129}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, 'L1\x00', 0x0, 0x8}) 03:27:28 executing program 5 (fault-call:1 fault-nth:5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) [ 2170.223876][T17382] Bluetooth: hci0: command 0x080f tx timeout 03:27:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f00000000c0)) 03:27:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x1200, "df6977"}) 03:27:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x5}) 03:27:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x4, "df6977", 0x4, 0x6}) 03:27:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f00000000c0)) 03:27:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x6}) 03:27:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x2500, "df6977"}) 03:27:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x50000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000001c0)={0x1, 0xff, 0x6, 0x0, 0x8}) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x5, "df6977", 0xfc}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x76e, 0x5}, 0x8) 03:27:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f00000000c0)) 03:27:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x7}) 03:27:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x3f00, "df6977"}) 03:27:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f00000000c0)) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x8}) 03:27:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x4, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000001340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001240)={r2, 0x0, 0x10}, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5, r2}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x3, r3}, 0x8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xfffc, 0x3, '\x00', 0x20, 0xcd}) 03:27:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x4000, "df6977"}) 03:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x2402, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f00000000c0)) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x9}) 03:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b23, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x5c00, "df6977"}) 03:27:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f00000000c0)) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xa}) 03:27:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2400, 0x10, 0x8}, 0x18) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x2, "df6977"}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101381, 0x0) ioctl$RTC_WIE_OFF(r4, 0x7010) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900011d76657468cea177c5427cf0225088c621adc3f2f0d3bc534df57a10129728aeff684e6da1161cb6890611de69f66505c96a367562a21d513d5936f1d7da48ad992eb6c716ada57f860cc507320e44811a091188"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYRESHEX=r6], 0x74}}, 0x20040804) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', r5}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000200)={0x3, {0x7, 0x6, 0x1, 0x8001}, {0x7, 0x3f, 0xffff, 0x4}, {0x7, 0x8}}) 03:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b25, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f00000000c0)) 03:27:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df2577"}) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xb}) [ 2171.283294][T19269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b2a, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f00000000c0)) 03:27:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xc}) [ 2171.366406][T19278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:27:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x20100) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x1a3, 0x19, &(0x7f0000000180)}) r2 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r2, 0x0, 0x4240a2a0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x5, 0x4) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f00000000c0)=0x30b) 03:27:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x2}) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xd}) 03:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b2b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f00000000c0)) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0xe}) 03:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b2d, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f00000000c0)) 03:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x10}) 03:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b2e, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x11}) 03:27:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f00000000c0)) [ 2172.312465][ T2493] Bluetooth: hci0: command 0x0401 tx timeout 03:27:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f00000000c0)) 03:27:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x3}) 03:27:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b2f, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x12}) 03:27:30 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x40) r1 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r3 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000300b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r3, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES16=r3, @ANYRESHEX], 0x7, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setfsgid(r5) fchownat(r0, &(0x7f0000000040)='./file0\x00', r3, r5, 0x1000) 03:27:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f00000000c0)) 03:27:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b30, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x25}) 03:27:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f00000000c0)) 03:27:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000040)) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x107}, {r4}, {r5}, {r6}, {r7}, {0xffffffffffffffff, 0x40}], 0x6, 0x101) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="d2af107841ec86193f12c30761d4125171be629103761f0bed88e1079370f41afc11d17d24a04a14ca7aeec17377c3a2d3618a87a6f0105bf18f601b0d99ceb0b9d3fc1957674e076a6a8464b2482d24a66f577d381f92712dbd25e5447195c1ebfa82b603037fd86245689cdb1ef08300e1f34c4375189cc7184612d27798fc4cdb7c4c511110ecd76a66c8b54a1681f721cc9413171ca84bafbd859897df8f72c763cd") 03:27:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x0, 0x5c}) 03:27:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b31, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f00000000c0)) 03:27:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x4}) 03:27:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b32, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f00000000c0)) 03:27:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000340)={0x8}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x1000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsu\x00', 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r3, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x101, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x2}, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x9, 0x7, 0x7}, &(0x7f00000000c0)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) ioctl$HCIINQUIRY(r2, 0x400448e2, &(0x7f0000000140)={0x400, 0x0, "dfb12a", 0x0, 0x1}) fcntl$setsig(r1, 0xa, 0x1a) 03:27:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0x85, 0x3, 0x9, 0x1f, 0x5, 0x3, 0x3, 0x5, 0xc5, 0x40, 0x7e, 0x2d12, 0x1, 0x38, 0x1, 0x8, 0x9, 0x42cb}, [{0x10000002, 0x8, 0x9, 0xfffffffffffffffc, 0x4, 0xffff, 0x195, 0x2}, {0x3, 0x0, 0x7000000000000000, 0x401, 0x80, 0x386, 0x7ff, 0xfffffffffffffffa}], "729f9155b770ae76f14b6c03c46e297607", [[], [], [], [], [], [], [], []]}, 0x8c1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x1000, &(0x7f0000000180)="f93b909a8a5e33aaf6b071de1bcab568c48d759f24727a53f98ff4db50ce2770f336029e545d9648bbb5467b9c235db684fa821f76d8a10ca9efb8acdfd81398b52a9ea42ce3e3178b407fb1706fbcad1adc4cf45a9d3620f235aa90037bce7d0c106447fb0a9cf289e5bf961aaa19675e69939a26a46d68087820c762868e92671a5074b787f5eeed4cc932d697b0626207b88d65f9a0d7abb8b31e31e9b467617641a3fada4d54f5879622c90822636dfc479e7d6b3a3c4be94af21c89f9262504d38738d5fe3b3b06731e3aecc3e3007143cd5c81e629b0aff23d86e70897fbed5383881a6ec5071ebce2dd1fa6060ca61eb90a6adbe0d734f10733f8e2deb9f8ba5c1f5b35983410da519efb28ee23404db42b99ff6f810af8a66194090f439de1fdcc89eda762dd6ca745b8ea0de4e23a60a806353dc3a742d8537d3cf1f846bba220eb79b90e28f7556042429faf3a5620f51dca6896be2f9247c25aa0f4f463efefe7baf44b5101b68a314430fcb6a1e5ce2c22f8acdb8a92452a235b54e483d2ace9abce3d1aca9285c418920886263efd988f895fe266c643a714d402ac1c820754ba134e6e5a877fbb705b5771d232325bf55aeec4374ff6c62279cabb04b20802d0ec84790ef06273073145b77600455dbb43add0c85e19bca3c7e77f49a613c41ec247a032f31f7a344c0d13891a9ccf2c403d9f1b08bd596cf8171c92f6237132912beeb5e828ff8cf6f6d6a0050bdce1cd2f13a04d1802c934d251702454e90edb724d9ccad129abcb74c06e36b49514ba24d21f0dfb56435cc63d0e680b27fc5db27af62e2f5dab595ecd6fd81fe6849de70321bce475643cda40d4e07f29c8c019089d4a5cfd2a1e2d6a9387616a3bb3843f2c5184b1a13867fe55f6436474ddadf35626b6a3e1a755d603faab4ef655bdf6c7aa6a995dcdbda72b5321e1b01bcadf93d63600542fb14fa1771f3e74ad49f9ff5d034d387d6cbcb9cd3dcf4d7e40ae5a51fa0f2d80e35e552a56766bd864a5407077f0056f4c952b2d883a4ca98f76029ef5ca1f06cf9f0caf9fb39cc97afbbf64dcd4e195c24fb683f4ea2422c8d3c2e411e0bdd9f45fba10625dad7e7b76e1d2722125b2fac95dd9db0a171cd4a232da3adce5c9a5161fcca63b12bf8a658b22b1d9c1a6b8c743f751225a1bd9e0b4fc2da25c4f02e4f719d3e608d391a4812926113c645218298e34557eb8adc254c0b70d63887d28f4ff7a7f9949ca11aeffdf660c6ebc0e6760114f119d91f1e7720a6fbe851ba25efefc78a23785f0cbaaa4f394d9ee117924e62407047db54c27ecad380c0714c82170eb4947d9f971da9890a04924143e915eda32c0fe4baf898f487e34330ea187fa5fc8fa5acb40a07c1e6b8165673102140145a9f32f37c6348f830ef572d329c617c4ab8bf53c46450a9f21b2ec2214035ac7ea38d5823f1f4d3038079481e9dfea4513e7ff23b8ab335a8795f912c313324a32f78967434679536a6971c9a236974dc4ed9c014c97dea4cd48efbd3391c4fd5a60bd58ab9ce625cfba41e2e0c77e6398bbf4e97156999a746c95db1b8a057833c2478daa29b307323bf31e356a1523aecc4d0f6dc2814136d9ed4d48e9895a0b9667db80298b31812e2a451cf5250a366fb1ffe3c84dcb84c3290a6a25f9d555b27b1efa084f4cf3a65eea990b6ac1ef089f71309c51e9134cdcf4474a38ab624f7744ced7c3aecdb3b89ca0fb998db7002b9d343b3081e5338805e5eb6e3d75edb1f1f7435ec6c0586961dd500a56039fbad9a25f915d40b621c5f50a77328e8a1ecb72469939507154634252780710e33733868d58ca9df4c062beb92d6985c142511ec8d8b33de6ea2369397e0bafd738f9df344ce89f00959f52dd8340dd3af03af616b6e4736c559e5de72d8e77551f2134807e7be81e71c5d6caeba02b6b7dd8fa5113738fd326a63d793784f3a9a319ffcc4e6602fc98ccfa408232f751ff284a4aa84ae64df9b9f383fb48e570228a8d5aea31ea497222963f5040e31623ae2c85259dce69ba42dd502dcd67f934a4450c44b49f0cd0ec1eee89236fb15c5f293e00d9673b41dc6fc6e3817674fe762434e4316bdb1b18adf00d361fa8e79da7a3f9b69c879286025e8ea6c265b95c95ead837b5d2d18e4701580fd4b8ebe2c650979e64547e4236e054be0c88fcf96402e6e35d65afe5c11c8538065b93c1c2ce0b8dfeab96475d1e8127c45002e2cd3c335a19a417ed386b7e27fede0ffe2e6fb75ade12d4bf6569a22fcbd277368000b6d8965f8f69a2b8ae17c74dd85e4182b0b7827da05aa5c00ffe882b8f35842dab9b0888e6e9b96fc36a7b7c11e75f791fb9cf74c63b03918d461f93524cc028ee7592d60a2c4ab88155a8a2c8ce277380b9ec2c2b53e914a3e8fcd7009504c61f99096445d5cde3c9618fae86decdf91477ef922b0557341138f0bdc0ca21aa7f37b254898ac5f821ef18de507e9faf6665609620370ed3fa43a6d0a8ca66f56f7e79c692fcacfb34e3583d84b464e537cbde13bc6a99b2c3471773291c7e173aabea4149c68d6e8cb70e83cdcad128b1b396160150e05ba93d3831f8c7fcf34ff1c087b07c33cc5bf7157542f9262b02f4b38206f53d42c281c7b8b8b15dbfccf81100d8c9c9dd9b30b9ea9ee97d1a3a0649eac2d1bc1ac0bffbff805eeb9a4d4dac43e05e14d22a95c0ca7cadfe5de1e981f3ac4f23387a7242b376f01bab62bfb96513181986d26b810fce4963770c62e2e77468147847f8abc8c4fd4ea5ef69d85df1011ed5b5cf5479b0fae71839ae6d300a824f0467bc0b33c786ab1c5f1773875f2545d9670889f0e60b14c9f46685ac0d7d0ec141065f3b68ded88ae150afd2b8b7775e14dd5aca7ed4508b923ee83408704ddac89bdd8ce2c9c0a899d6d8ae00db5922d633f874d3535a7ff1a1e62c1db88d71f0032b0dfaf1feb5591c8fb12eaf40ee92c8e620cfa06bf6a9ec79530eb2dac1721e5dced1d8e4fe63b8c684104df69552963ab29b7f02f55d314d90420eaa1e9ca7b9b5e403ec63fd986bf9d084ed4253c61a8ec0432df7274bf9428a3e7d96faeee6c2ad4aea31b7fa8e99e0e4baa260795151b1a45fd20641d28e247981bbb59e3df8464e49194fa3c271511720c2900e4684270680ff5c72e678b897c22ed43dfae3af342893b341375319c4f1126fe3391c1a27ffcad52f8b39c362b7d320869cdb3ca633033f873c90d858368f17eaa928098f515844cd7cda25a2cb1a4710b45a60839b70259ba22d0ad653163b5849636bb0c2d520886903b457106a5bc6f0b93ef4fddab7a3f56fb6e3b1ae6009e17c8b9aa1651bbab2b0e93c833b3139998eeb3595db7423b20b4fbbae0ea5cb5be18336bd1cca42cb83efa900badc6a0a63cf19973ca048729656d07d37d5aa2b8680b52b9e1794ae6d4ab0e0977f8cf71356bc367de8e8d3aabebe0ad88d0f6429bcd376ed256b7c948e1e277c23273209030f642bca1841aa58ee561dec6f88dce2c368841f998e85420d31e0818b0ec7e312a0cd4d08b6c7d7cc69ecc394087691ad91097d3435e3a23dfd6c85b196af0d35d3618a8f949f51dce9893ea1966b249f1d3f65216fb1f8ecd07d88c2b26d26583441c11c2b6edc437881e99b8a6454479bd41f92cbadaf59dbbbd3478b11ea16cc21ec9310c829fa317773e4b7d7c453bef2403c4f03edc4a4f2b4bf44495a642483b5ca8c6b67609b97188c0318623bc128195d57bb7b9d9576a982583eab44df57f2a2f0cb5e48ccd6eed5dfddb62a9988dd87758f4fe4416d3a01b825777e6b85bba746dd1d8a9f725f65acc6b4c1b3e069613be15d99807cf6ebde3502a0d2d9a5ebef8ce285b479135ddacd880505c25d18a884b9020cf3c5a5256cdfcf27661d8b935e092f4f85a69c1ace0a1009c719464b4005546263dbaa57b5c17bdf49030bce15c75ddf5de6d60248536c07d9a25c1eb819d3989e287c9adcb96eb86de22793c0c818af618cce46d974a65791b4a894e3059f714cbfe47e3a987ddb4e1656e6e572a16c4a9e0c63a539e9e1a25078cdd42be0ce51fe10c0f37df756fe797dcc285c2354bbdc5de84ed9acbd695132a5b20e337ae2a8cce7639bfeace7c4bc8a6291cfb4d1cef3e6c3ef6d19ffe05ca6a5236fb3279dde8e1dd2b404502bd3f72b720092a1771b7d43c019e4863f6e572f1aa0c5d0abf9f398fc4a9c27031b6d8a9c0ba7264852cd616cc0bc9c1b706edf36e34091e41dc1aae72041a50bcfaeff543639e19ef02ba5220a6e3ffacbf9dd0fe9c6cf119eb0708b418ef2afecf009ff102df0733fd31389376804b480a05c34eed9038518df0658b798d2f2e30776a770f0840eb0587da022f3d80671acd5cdfaf831ec9a9529ec1474a4996a706caf6f8c35e1c75a0fe82a8658834b3989236f0ef1fb35bb71da0c4a6c32e5171eb0146a0df3947be4929b37bb1fe82ec4152da0dc7e8fcb0fa60ded7f867ca081f686b4647d32313bab37d2cb7a906a3abb6c8a87185a04d0dabb8f0692f124cf9f54e6270c54b6527190a6448d7bd6e4f017f34661bb65d7a8e49c9951ccdabf90b538de5daf1156d4be72b6855bd6e828328250a9a09178a54b17af3f0c3ccd2803b92e66c3fa78d480a81f2d805ffee395a473e35616a2248d8f2ae740a81668ae5c2634be6464313e21f853eace4ea2808c24dc5275d6b45b110df0a30d83e2e868ec6160e5680c5d7af5ea9a68c079b363b529341d384dc88910639acfb6051d7f9fce0669a03af6dc8debe4ab76c012d367e0387d1b8bc7738a63516101e602cdf4c7fe7e0fdee2e6edc8509e30f249b392898e7135534b081ae3b2a8f6dcc58e2dabc46940b6fd9ea2281b5fa62068d27348fc6ccab88686e9216076dcdc27b628937cff3dbabc5ee07e60c550b06ea5e437cc483349c78e20c159a4320744d2d0a44a093e84654eedccf67ee8f20b98e0ab4413ac5480a5377310bd67b7dc0351438f6480e6bf4af70ce5b25f3cdb2a570df4e1cd2cd8d1d4f224abd2ff75371c8f609ad6bc0814cf983e70c3b72e7f081f285661aece662514c0756b594aa6d576a9b3e19671f72d7e5e83446622794c0a220acc884e0385c59999bcf7b29501a654d94042bb0784db5c77dea0cced913d7e76f4e1c9e88c79dceeaa86ed0246a6b44b0653f3cc270b04ae95f0bf06520ca705d6c776b5d8d1cfc745a0e2cdc143e20b115846230f8b8f8876f0d5f67ac840ee56552aa2380c99870f15ac9eb43ba30c55f43fde09355be9994ceb18b25e4eedda49052891c6967f76641b7b9978b2b0dace8083ae08ef1dba5fa82150607059b04c71e5d46a6d78756ea66f1612dc80bee4274b1fc7dd4a79d442631bab48603f3c76c5dde931b552b3230336acc347525ed31d5e50c9099ce9f2bc99d7f43842bb58a2659b72fe0078ef0cdcb7317f2a1f2185eb81eaa99e9ddb9a4f750822592cad203739ba2cab472050df10059bde4d316d300524977c529c267857bcf7fecdd2e5eec58473e08dfcf3214fa2e2a83303c13c77472a912a1311de991b8aff616401bccb1887907d58ac67b2f2101133416ca072399040f90498f7f5611b59d9e15787a95a468e947075c48131e1294c31b78d1db80f4722e8137eecb8bf971c67c9425b965ccf9c19dfdfb1dc5ecbbd30f2f0e264c771bf17ae0527e9e80426d79b6661b1e6fa7feed5cc15c9b00fadeb140defca1399dd411ab8137fa739456a116d7f3dba", 0x8a, 0x0, &(0x7f0000000000)="6bf798ab861afb9b57443dae8165c059073a02f4f7901aedf3dfb8f4fc11e0bbc360e3e132bca809466f5c195bf00b11d0b720cbded4abc458f8fb3f52617aa02cdedfda88091977a52c1cec19688771785ed4f1d2c8b61f056055b0f696f18ab8b6d9f192b407e2a17e2d35472b0e0c05134aa60391779929d5fcedb283dbd1e888884cfd207059917f"}) 03:27:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b33, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f00000000c0)) 03:27:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x200, 0x0) 03:27:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x1a, 0x5, 0x12, 0xa, 0xfffffffc, 0x1f, 0x5, 0x9d, 0x1}}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x820, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1068c22de8355aeb}, 0x4000800) 03:27:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b34, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f00000000c0)) 03:27:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$isdn_base(0x22, 0x3, 0x0) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0xfff, @multicast1}, 0x50, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_macvtap\x00', 0x9, 0x2, 0x3}) [ 2173.768387][T19399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:27:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x5}) 03:27:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b35, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f00000000c0)) 03:27:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000100)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r9, 0x4, 0x1}, &(0x7f0000000040)=0x8) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) [ 2174.272650][T19405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:27:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b36, &(0x7f0000000000)={0x0, 0x0, 0x0}) [ 2174.383355][ T5271] Bluetooth: hci0: command 0x0401 tx timeout 03:27:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f00000000c0)) 03:27:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b37, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f00000000c0)) 03:27:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b3a, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f00000000c0)) 03:27:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b3b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x6}) 03:27:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f00000000c0)) 03:27:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b3c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r3, 0xc694d42685586125, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x24}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r10, @ANYBLOB="00df580000000000040008000c0001007463696e6465780044000200400006003c0001"], 0x74}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x42000}, 0x0) 03:27:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b3d, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f00000000c0)) 03:27:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b40, &(0x7f0000000000)={0x0, 0x0, 0x0}) [ 2175.334793][T19476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:27:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f00000000c0)) 03:27:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b41, &(0x7f0000000000)={0x0, 0x0, 0x0}) [ 2175.465381][T19482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:27:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f00000000c0)) 03:27:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b44, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f00000000c0)) 03:27:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x7}) 03:27:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b45, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f00000000c0)) 03:27:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000100)=0x84) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0xff2c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000080)=0x101, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f00000000c0)={@host}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/87) 03:27:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4c01, &(0x7f00000000c0)) 03:27:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b46, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f00000000c0)) 03:27:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x0}) [ 2176.463125][ T5271] Bluetooth: hci0: command 0x0401 tx timeout 03:27:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write$UHID_CREATE(r3, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000001c0)=""/178, 0xb2, 0xfffc, 0x81, 0x31, 0x6, 0x1}}, 0x120) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r6, 0xc13, 0x10, 0x4}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={r6, @in={{0x2, 0x4e20, @remote}}, [0x1c, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x27c3, 0xffffffff80000001, 0x6, 0x5, 0x7]}, &(0x7f0000000180)=0x100) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f0000000000)={0x8, 0xfff7}) ioctl$HCIINQUIRY(r7, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f00000000c0)) 03:27:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b48, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b49, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x8}) 03:27:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f00000000c0)) 03:27:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0xfffc, 0x3, "000300", 0x7f}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz1\x00') 03:27:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b4b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f00000000c0)) 03:27:35 executing program 2: r0 = gettid() tkill(r0, 0x33) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/anycast6\x00') sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x8040) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$HCIINQUIRY(r2, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) vmsplice(r3, &(0x7f00000018c0)=[{&(0x7f0000000240)="08d524c7e5a66752b30cd4dd60564f84bdb636f38e07", 0x16}, {&(0x7f0000000280)="334373429fa78af66795665b1d96a7bb686424a2057415cfecbd640a26b4994245b35e7338fed35b8619d241eb92e85584a7f32637a16b64891ce7aa87d8b9029f843f64078772df95c7f6ae30568193799e5b16918ee360cc654371d4138a4565c8a412b84e10437b9ca542205b2d1b81bd4810915b3830297b65998305ae6acd362a3ded9dcc39918b3b6a08f3723e4a00e04af52a44689322c39c29094024aa3e54bc9ba24edf8ba022a48d155742f214f985322f31ed9bd983ffce1ba61c553f5af0e38f25cc165d58c24f", 0xcd}, {&(0x7f0000000380)="9a4543dc9b3d66c174c2ee644f4e2492bc06224c1fd0acf3637048afb7a090f26c97c603f28027bc8c9a19e1774fda67af0817c6022a64a1477d61c0d676a76da87ed8e1bc467bbfd4829bcd78683d142ca302aa8f2f521d42ac2f10fea9b691bc878742ade1a20216a5ceb33c9d87c7c46ef39392f10d59ee114deff65e096859b9da2470298d12cf6efd13becbe42ced6b0cd063b7ca4564cbf50c19e45031ce7c977ff3ed53529d06", 0xaa}, {&(0x7f0000000440)="b13a6f311479ef0f746809ced69925ef291dab08074cf332644a2903a4135be0b9e9fc44e125b2b653612cf6affb8e422691964932ddfe91f62079364d85dae65ca1460ea803ca9186cadf8888f1d9f57819ac5da76a23e42cc7b316d0c38656877186c52f5b4954fb6ceff922e229df9a56031cd046982e245e4b8b9e9efa790a", 0x81}, {&(0x7f0000000500)="94c26224df3a5dc5788ea04002b1aff837c410a189645935e622e80fa81dcc659028445a53b578b389acafdf1ed18827cc80e2608079bb77ec3a090488913bc12f9d6a60c3ea7726dd8b751a8f", 0x4d}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="9a654de87380f350e90b45238b9f913a5da29730290cf203bdb3a9b1e89c2e66c53e6855865d86c75996a54656307d85295c81a8f7f79f214dbd03c3df3ac65a854f97b4992749c5fc52e2ae542612a0526470845d764cfc32f99d8b3cd78ee06df06b4fe226f7b8b4253ee8a6e05a6e3c8e844a8c93589dd724b61e684001f8082c212809f36cb1b2f266acbd9a741297709d4b929c957e86f751141617191d9822435dbeb93d5b414dfaa4a75c234c4b4ff045bfea99fbd68bc2912d102dec89e479a80855d32d3c0995e9e63396a6debd", 0xd2}, {&(0x7f0000001680)="4a7426de221443d27bb5d5f4792bfddd0218758c5c607b464c7567c24fe0a3da47d484e919d9c010930084735881bbe8f6cc605f18e34286548ff777ab7caa1c0d3fc8a034165fe3b300cda796472060c33ea6ed221e4bbc7708ab70ba39825b333484fb9c539b564756111ea1c069680b44d0da909bd271aa6bfc3b2ed8b7c11ffa52a2157848999217002bfa3373c35c705d", 0x93}, {&(0x7f0000001740)="991cbf5805078fbb461d4000868c719a6f9269e8cc66ca0dc95e0582151cfef659b3087b4f6d7bd8889baa2e07928e46cf8016421f018562d97a5b591ee9d85dd1a9827932d244cc87fd802027b770ce0637e8325253a42674dd5acd796bd4cc9d470a9a5e533248458c5f81c36cdf38eff66633e6cb25f18b84c4c64b5ac00b79d0c256c0da", 0x86}, {&(0x7f0000001800)="26371b6d5197bfca0c496d035442852beb1e6fd9ab0b6f2cece5273c818bd271ff9d940ca07cd63b9baa2058988cc5f407d8c37fe63b2c3a019a016923d2ea2cb68487d3102cdea239d43d4c204cb6a6577cf23e91fe15fb6bd34cb3807236723104de704f5ab9739b0d7d066289164b37b56fe45de73803e82bcc75a3c22a5d7fb5602e1045f36e354a251e436fe541a4a4085a1d31b8f19f0fef1228e77305c1fe26d0d320c1d6947963019f042f71b0e5702b59753d9bf592b69484", 0xbd}], 0xa, 0x3) 03:27:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b4c, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f00000000c0)) 03:27:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000000)={0x7af2, "e18cf6830d70faf466cc27a3f183f2cff6ea5e1cfdb2bf27fd1a222d4e106837", 0x20, 0x795, 0xcd, 0x4, 0x2}) 03:27:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f00000000c0)) 03:27:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x9}) 03:27:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000260000000e0001006e6574647e001dd0931ed7eb988b3d22bb04c974c4000f0002006e757464657632b1cb30a4108f6d73e55a543b3d73696d30000008008e00000000000c008f000000000000"], 0x54}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b4e, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f00000000c0)) 03:27:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)) 03:27:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f00000000c0)) [ 2177.925067][T19603] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 03:27:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:36 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x6, 0x0, 'client1\x00', 0xffffffff80000002, "b61132e8e184edfc", "a1b66746dcd239e2b762c7aa152ede7cfbdef21d73d533e28b588ba907277dcb", 0x5, 0x7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) [ 2177.984908][T19611] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 03:27:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f00000000c0)) 03:27:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x54, r3, 0x1, 0x2, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x14000}}]}, 0x54}}, 0x4045) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000480)=""/88, 0x58}], 0x7) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000040)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @multicast2}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x9, 0x2, 0x1, 0xc, 0x75, 0x40}, 0x20) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x80}) 03:27:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b58, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:36 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$KDMKTONE(r5, 0x4b30, 0x9e6) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)) [ 2178.542873][T19880] Bluetooth: hci0: command 0x0401 tx timeout 03:27:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xa}) 03:27:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f00000000c0)) 03:27:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b60, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:36 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400240, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x4}, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1}}) 03:27:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f00000000c0)) 03:27:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b61, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000140)="56bd6afb68e433f50bddbca93f283fa5333352f895496a1511ffc19c358995d0861584ed28fd57dae74930c23dd5a903608b2dd55aa25d69e7510886850a8925403a97eee295f688269c822ca01ad269b122c700f684d08a68fbd8a375f8010c7132fd11cd1ab5dfb45da333f05ed08d14d1c475aded88d97b21670c", &(0x7f00000001c0)=""/77, &(0x7f0000000240)="d0ef85af01e6fe6771e1f290f647e991046eca9a01", &(0x7f0000000280)="0aedcd81f0471c01e6c9cec93934f94603ab4b5966cfca93", 0x1, r1, 0x4}, 0x38) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001140000000800010001000000080001000100000043e04d70157eddefad9207ce7a1c62de0d29e0dff5130ad6bd3646bf02e0ae7aa67c788f157b89b3c6869b55bf6da9dc552354c2b0b72310dafb19f2ec2da0b7"], 0x28}, 0x1, 0x0, 0x0, 0x24048090}, 0xc040000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f00000000c0)) 03:27:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b62, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:37 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 03:27:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, &(0x7f00000000c0)) 03:27:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b63, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xb}) 03:27:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f00000000c0)) 03:27:37 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0x5, 0xa58, 0x3ff, 0x6, 0x4}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r7, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r8, 0x0, r4, 0x0, 0x6, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2cd) ioctl$HCIINQUIRY(r2, 0x400448e2, &(0x7f0000000000)={0x2, 0xd7d, '\x00', 0x0, 0x40}) 03:27:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x397bc3, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xffff, 0x0, 0x0, 0xffed, 0x2}}) 03:27:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b64, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b65, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:27:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f00000000c0)) 03:27:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x9a0000, 0x66c3, 0x0, r0, 0x0, &(0x7f0000000040)={0x9b0908, 0xf7c, [], @p_u8=&(0x7f0000000000)=0x6}}) r4 = geteuid() sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x12d4, 0x24, 0x2, 0x70bd2d, 0x25dfdbfd, {0xd}, [@generic="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", @nested={0x23b, 0x7a, 0x0, 0x1, [@generic="69a7517350be93174642909c8d38183a0baa53997ba51e9fcc92602259e6e778fcd7cfe8f2fad13fa4aa49a4a39ce4", @typed={0x8, 0x15, 0x0, 0x0, @u32=0x3}, @typed={0x15, 0x85, 0x0, 0x0, @binary="3483efdf0f3d5efbd8c2254db14d310bdf"}, @typed={0x8, 0x6d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x93, 0x0, 0x0, @u32=0x80000001}, @generic="f5d289b07c66f07e38c029e08c35e3d21fbfcaaa5c28098cff06fb02432faa435ba4b888fa1f2ca7675e3fd6f7c72159b7f485ea656325e231394df03e91db6e632158ee12a43912a150c2956b7010a079fda8ce4822643c90f07063f17ac91c3b240b19a12aa07020c41e46ee28829ddd30acd5f23c832840747ca3669d7a0c339f81c9d6c2cd82f0b0d55da3cedf11e9735c91bc6f3e2840e1fb6dac4450c22c0c0830856ea71d4a914ace362ed1ee8112959d2d24d01511cbee0102dea46174b13719fc69a426002b9b31438285d274d3b5fd00ba9a2034ed38835fc9ee8d0c6aff126e74d90b9cb353657509c467", @generic="c47e6f7385f99242d32c514b0c8516e0f04c5bc1a721253d0f7f03a7e0746c1be16d07c4fcb63d07b7504f669914f3993c08ee40999eb9152151e2cbfa98207e995e26202c3286dbf27670b6342a5e2b9f121a132a0437a4cbc84d203ce98df2ece4964be33421f9f702e8a2971e3e3a24e701e2cd8eeb20eff1136b91b605c72db9eaeca15eb175e8878d91c40619ac4f53be3b063e0f58786ec1212522e8c71afffc61c2ba2bf57883971d93bbf83f9b1d1ae0ac507c3dce1d055c07854360a5b24ea779c57e8fea1de31929770d7177b4dd4eeb95391ea83368c8f3677c1d", @typed={0x8, 0x6a, 0x0, 0x0, @uid=r4}]}, @generic="709b99d598e0a5e6a4300e406b6cbf0d394ced059b36fb9bda95bd131ecf9d35dfb8289fff3fdb8a10fbc08ac35fa20d3a930a98bcd278b0f9187f3b48eb954d44164b2829be61a4e76d13cd0d9b225cf0cd5558cc952f8e887b56911f6878ed4afa31a42c679d16f41ee18c80e3872026c9cc3e150e723d6f53", @typed={0x8, 0x87, 0x0, 0x0, @fd=r0}]}, 0x12d4}, 0x1, 0x0, 0x0, 0x4}, 0x90) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$HCIINQUIRY(r5, 0x400448e2, &(0x7f0000000140)) 03:27:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f00000000c0)) 03:27:38 executing program 4: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xbe3, 0x8800) 03:27:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xc}) 03:27:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b67, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0xd0042, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x41008, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r6 = geteuid() fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020080000100576eff8c76a4ddd53530a5a4a79827a1dfd20903000000b570000000000002", @ANYRES32, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r6, @ANYRESOCT=r4, @ANYRESHEX, @ANYRES16=r6, @ANYRESHEX], 0x7, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000002c0)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_mmap='cache=mmap'}, {@noextend='noextend'}, {@uname={'uname'}}, {@debug={'debug', 0x3d, 0x7}}, {@cache_fscache='cache=fscache'}, {@mmap='mmap'}, {@privport='privport'}, {@access_user='access=user'}, {@noextend='noextend'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_type={'subj_type', 0x3d, '/dev/full\x00'}}, {@smackfsdef={'smackfsdef'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/full\x00'}}]}}) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xd122) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f00000000c0)) 03:27:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x0, 0x67}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="dc1c40ad9cab2a3a2ff7c9e4f637", 0xe}, {&(0x7f0000000100)="8664e91b7cb04c7451a3649e4fd3d45b1cfe340155e5ff0bea88417c3fcff93baf2f105a78158066b13b951ecb102ea00ac969cd173e11865a70d0a226", 0x3d}, {&(0x7f0000000140)="32ca2aaa3095b78059678d66bb0c962d45ad3d31041301e0d228eb0de1be6fa06549216d54447c4188bec8266152628fba028d9fe68d0234f18c01edab2ff0658adb06078babfc1bf953eec2c4f97833229f2eb6795236523f58651c165a9a12a17c6ba6ce56da1d8ef3df9544cd12eec443eed322840aa676b62e5bd513fc00c453347ba3710d06494c6269c45bb37be2816c0ddc5faee4eb1c56d362e25663fe9de925f75648975f574e558c95776fa444e347", 0xb4}], 0x3, &(0x7f0000000240)=[{0xc0, 0x109, 0x10000000, "ba91fd6aae7227055a1c093baf980892126837d192ee394e1479427ff75b035d3e659e6c7bc534cd6ddbe6598c02fece382f8116291295e5648b2d125c43f703cface20b06179ca6b850efb8ae3bd6c2dbbaff2df046991e5adb85c4bd9dffc3d0ba05c7fadc45645d543c494125bfb76a9043fe4418082962206db999630d2c3a4781a60c17644e0c304e3bfdde14b59f771c6ac872adb15c81bc0d77230369b91ab45f926725331202dfdb671ed5"}, {0x28, 0x84, 0x80000000, "16db4f8f68debe74abe0841af2fabba089afd6a3d9b89782"}], 0xe8}, 0x40000) 03:27:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b68, &(0x7f0000000000)={0x0, 0x0, 0x0}) [ 2180.622659][T19880] Bluetooth: hci0: command 0x0401 tx timeout 03:27:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f00000000c0)) 03:27:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x3, 0x0, "df6977"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x7f}) 03:27:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b69, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f00000000c0)) 03:27:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6a, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x8180, 0x0) splice(r2, 0x0, r4, 0x0, 0x8000006, 0x2) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000000)) 03:27:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xd}) 03:27:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f00000000c0)) 03:27:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x4f23, 0x9}) openat$cgroup_freezer_state(r3, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x6, 0x2, 0x7dd6, 0x9, 0x1, 0x8000}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffa4b, 0x0, 0x1, 0xffffff8000000000}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000040)={0x81, r7, 0x1, 0x7}) 03:27:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x20) r4 = io_uring_setup(0x171e, &(0x7f0000000040)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x0, &(0x7f0000000180), 0x0, 0x4) r6 = syz_io_uring_complete(r5) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000001c0)=r6, 0x1) ioctl$CHAR_RAW_FLSBUF(r1, 0x1261, &(0x7f0000000140)=0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0x1) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000200)=0xfffffffffffffe27) 03:27:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6d, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "d69145dbe8b4c8c68e4914fc186269a41790c27c43e4442930de1a78bd34733dabb01b4226f635e53b116f118fcf1e385a77ea05b01ff4719ba1a847752eff773605da406a38a918e8e16238e7982200ac5fe77aa6dff969bafc873a7ffceee506a26035a1de50e78ee92c74a355cfbad4b6ceb996f592c813f04970"}, 0x80) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1}, {r2}, {r3}, {r4}, {r5}], 0x5, 0x101) ioctl$KDDELIO(r2, 0x4b35, 0x7d3edc8d) 03:27:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f00000000c0)) 03:27:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b70, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="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") 03:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0xe}) 03:27:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f00000000c0)) 03:27:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r9, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$FIONCLEX(r8, 0x5450) write$binfmt_elf64(r7, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0xf9, 0x3f, 0xa7, 0xfffffffffffffff9, 0x2, 0x6, 0x3, 0x28b, 0x40, 0x3d0, 0x7, 0x9, 0x38, 0x1, 0x8, 0x400, 0x8}, [{0x6474e551, 0x80, 0x7, 0x3, 0x7, 0x4, 0x5}], "72e2988dbd3e381116e207ac78873774d934c82f1cd1444dd58660d39b17cbacf7e699193cb5cdcd5fac00683061d6359b25bfa5bfa2445f0b10385a", [[]]}, 0x1b4) poll(&(0x7f0000000100)=[{r2}, {r3}, {r4}, {r5}, {r6}], 0x5, 0x101) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r10, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) ioctl$FIOCLEX(r1, 0x5451) 03:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf9c}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000054}, 0x1084) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) 03:27:40 executing program 1: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="47cdc2afd15d34dd23659991d8a6683bb9bbce3bb8a5373c8b9e08bc0f22ca960a7285ebf9a4ffa0df003aa75d3cf0c6e1d6c2d86f98c8b9011c342cfac719a017018817a8041f", 0x47) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) fcntl$setsig(r1, 0xa, 0xf) 03:27:40 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = accept4$llc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) getsockopt(r2, 0x8, 0xfffffffa, &(0x7f0000000080)=""/96, &(0x7f0000000100)=0x60) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="30070000000000000011377a8dc82a01001400001a3aeea6e714ed7eeb74984b79218a6cf335ff70aaacf5a482a354fdc0007897baf6f22d93b6ac5cee95df9dabf150c8a787ca9cec070ae8d0740df3c927910a1cc313da3e9132d516aace2dde748deb0a6f3bf401ba944547837a0a5e17cfa18c8fbf657a49b3862f58"], 0x14) 03:27:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b74, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f00000000c0)) 03:27:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b7a, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x40) 03:27:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f00000000c0)) [ 2182.703075][ T5271] Bluetooth: hci0: command 0x0401 tx timeout 03:27:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f00000000c0)) 03:27:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4bfa, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:41 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:41 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x6, 0x4, 0xff}}, 0xa) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000040)) 03:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977", 0x10}) 03:27:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4bfb, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f00000000c0)) 03:27:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) accept4$x25(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2e, 0x25dfdc01, {{}, {}, {0x8, 0x11, 0x8ba3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x400c051) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x200, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "947632e5201721f9", "374a55baa0707bbf388a2bd66628349f0ca9a47df0ccf0e046fd70743a3c1495", "0796328d", "6fa1166e3d147924"}, 0x38) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:41 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2000}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setsig(r2, 0xa, 0x3d) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "df6977"}) 03:27:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x4, &(0x7f0000000080)=0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000000)="cdf7e7e6fcedb1577c79175dd39aa4d3a7590cffc6a3cca02ccd8fb9e5ad6112d3258846ddafca7534aeaf2efa29e3c1ab4ded81b7015632b57046499187b2bd2c1782c679c72f4d09dc970ee6c08812944baf35acb771e9716bd6aa0eadf1d219b53ed781d806a7140092e44c71717b5427912b28557ceebccd21d3fdb95d0bbee426", 0x83, 0x3f, 0x0, 0x1}]) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)) 03:27:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4c01, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f00000000c0)) 03:27:41 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$HCIINQUIRY(r0, 0x400448e2, &(0x7f0000000040)={0x0, 0x0, '\x00\x00 ', 0x0, 0xed}) 03:27:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x5409, &(0x7f0000000000)={0x0, 0x0, 0x0}) 03:27:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f00000000c0)) [ 2184.099679][T19853] BUG: unable to handle page fault for address: ffff880000000010 [ 2184.107408][T19853] #PF: supervisor read access in kernel mode [ 2184.113355][T19853] #PF: error_code(0x0000) - not-present page [ 2184.119302][T19853] PGD 0 P4D 0 [ 2184.122670][T19853] Oops: 0000 [#1] PREEMPT SMP KASAN [ 2184.127838][T19853] CPU: 1 PID: 19853 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 2184.136135][T19853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2184.146182][T19853] RIP: 0010:mm_update_next_owner+0x316/0x6d0 [ 2184.152144][T19853] Code: 48 89 ef e8 9c 9d 6c 00 4c 8b 7d 00 49 83 c7 10 4c 89 fb 90 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 7a 9d 6c 00 <48> 8b 1b 49 39 df 74 59 48 8d ab 68 fa ff ff 4c 89 f1 4c 8d b5 28 [ 2184.171722][T19853] RSP: 0018:ffffc90016d3fca8 EFLAGS: 00010246 [ 2184.177756][T19853] RAX: 1ffff10000000002 RBX: ffff880000000010 RCX: ffff88802593c380 [ 2184.185711][T19853] RDX: ffff88802593c380 RSI: 0000000000000000 RDI: 0000000000000000 [ 2184.193708][T19853] RBP: ffff888000100ae0 R08: ffffffff81470397 R09: fffffbfff1281209 [ 2184.201660][T19853] R10: fffffbfff1281209 R11: 0000000000000000 R12: ffff888045198800 [ 2184.209605][T19853] R13: ffff8880001003c0 R14: dffffc0000000000 R15: ffff880000000010 [ 2184.217581][T19853] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 2184.226504][T19853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2184.233062][T19853] CR2: ffff880000000010 CR3: 00000001d473c000 CR4: 00000000001406e0 [ 2184.241034][T19853] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2184.249101][T19853] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2184.257149][T19853] Call Trace: [ 2184.260422][T19853] exit_mm+0x4c5/0x550 [ 2184.264466][T19853] ? _raw_spin_unlock_irqrestore+0xb4/0xd0 [ 2184.270261][T19853] ? taskstats_exit+0x466/0xc00 [ 2184.275104][T19853] do_exit+0x584/0x1f80 [ 2184.279237][T19853] ? preempt_schedule+0xe6/0x110 [ 2184.284148][T19853] ? preempt_schedule_thunk+0x16/0x18 [ 2184.289493][T19853] ? trace_hardirqs_on+0x30/0x80 [ 2184.294418][T19853] do_group_exit+0x161/0x2d0 [ 2184.298980][T19853] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2184.305016][T19853] __do_sys_exit_group+0x13/0x20 [ 2184.309925][T19853] __se_sys_exit_group+0x10/0x10 [ 2184.314831][T19853] __x64_sys_exit_group+0x37/0x40 [ 2184.319824][T19853] do_syscall_64+0x73/0xe0 [ 2184.324231][T19853] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2184.330094][T19853] RIP: 0033:0x45cce9 [ 2184.333954][T19853] Code: Bad RIP value. [ 2184.337988][T19853] RSP: 002b:00007fff668ea658 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2184.346380][T19853] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045cce9 [ 2184.354324][T19853] RDX: 0000000000416801 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 2184.362267][T19853] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff668ea6b0 [ 2184.370209][T19853] R10: 00000000007901a0 R11: 0000000000000246 R12: 0000000000000001 [ 2184.378167][T19853] R13: 00007fff668ea6b0 R14: 0000000000000000 R15: 00007fff668ea6c0 [ 2184.386129][T19853] Modules linked in: [ 2184.389997][T19853] CR2: ffff880000000010 [ 2184.394127][T19853] ---[ end trace e3210c179bbb85d0 ]--- [ 2184.399556][T19853] RIP: 0010:mm_update_next_owner+0x316/0x6d0 [ 2184.405504][T19853] Code: 48 89 ef e8 9c 9d 6c 00 4c 8b 7d 00 49 83 c7 10 4c 89 fb 90 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 7a 9d 6c 00 <48> 8b 1b 49 39 df 74 59 48 8d ab 68 fa ff ff 4c 89 f1 4c 8d b5 28 [ 2184.425080][T19853] RSP: 0018:ffffc90016d3fca8 EFLAGS: 00010246 [ 2184.431128][T19853] RAX: 1ffff10000000002 RBX: ffff880000000010 RCX: ffff88802593c380 [ 2184.439071][T19853] RDX: ffff88802593c380 RSI: 0000000000000000 RDI: 0000000000000000 [ 2184.447012][T19853] RBP: ffff888000100ae0 R08: ffffffff81470397 R09: fffffbfff1281209 [ 2184.455058][T19853] R10: fffffbfff1281209 R11: 0000000000000000 R12: ffff888045198800 [ 2184.463017][T19853] R13: ffff8880001003c0 R14: dffffc0000000000 R15: ffff880000000010 [ 2184.470979][T19853] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 2184.479879][T19853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2184.486433][T19853] CR2: ffff880000000010 CR3: 00000001d473c000 CR4: 00000000001406e0 [ 2184.494378][T19853] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2184.502320][T19853] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2184.510260][T19853] Kernel panic - not syncing: Fatal exception [ 2185.605682][T19853] Shutting down cpus with NMI [ 2185.611542][T19853] Kernel Offset: disabled [ 2185.615908][T19853] Rebooting in 86400 seconds..