z_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xf0}, 0x14}}, 0x0) 13:33:45 executing program 4: 13:33:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:33:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000040)) 13:33:45 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000001c0)=""/80, 0x50) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/74, 0x4a) 13:33:45 executing program 4: 13:33:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xa00}, 0x14}}, 0x0) [ 1795.394894] *** Guest State *** 13:33:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xf}, 0x14}}, 0x0) 13:33:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4000, {0x0, 0x0, "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"}}}, 0x128) [ 1795.423429] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 13:33:45 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000a16000)=""/58, 0x37) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0x95ff, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) [ 1795.479908] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1795.524438] CR3 = 0x0000000000000000 [ 1795.539902] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1795.549331] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 13:33:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xe00}, 0x14}}, 0x0) 13:33:45 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c460704004686000000000000000200310007000000a00200003800000080000000ff000000018020000100c10007000700000000000e0000c00101000002000000020000000010000002000000000100000600000051e5746480040000070000000d390000d1070000ff0700001effffff06000000d2151bb9efde1ea1d0015dbe2e726451adb0b8200a1faec2acf759bbad5d9efeff19756868f167adb6d9eaccb8bc65906e1a4bf2afdae2ed19c105131b25b1d2e0fbfd18e62107b876c57b7992331181c34746d59de2df126fae14f5906bc5a2024b7d69972cd9f8ff5867ca06eceea40f47ec947d3ea58660bf1465bdbd6da375fb7adce74ad5e80ad061d956799f8bc3dc6e4e6e85c3a4a426f7cafae63e842dc08dd1561ed6e77e5d3470fdfcf5c3a1f055aa8b995a6320ac2d97c70ee6725dfa26c81fa77075ce1ff636d02828f18e51a2759f209ec59aac28cb0c633cdabe5d1367c543442200bb8543a8aada4e97e666e07f30bfffe8712cf3cd2cb70e370131da07ceee38c1c474cbc446bc3e4c089297c98e54c43743f7255f0056a89f1a54d64fcb977e89642a0103db737f1029ce07ef6834f9e11fb71098f30e257e46aada7fac38476211e1a71dfbafef76a7381482c42ad371baccd74ae357b2ba47794d204ae6833981934c2be0d3d76b492501f3f121cc180a0d764f584010c4179ffc07644df3b2f91cba0434dffc1b7f5e0250cbc9a6a80dffb9dfab04780a7449ec7ee4e1835548f86a4669b3a621e1638079f2103003f1081d670b1d17d97e362e81b835d196aab5618ba747971f890080d1be035e416618fb8d3372d390713711b4c8aad8b4027753c035f63f60896267001688a66df85aa2482664c0f4c9227594e2d2b058e295e0e33cb85047de485fbad729501b6a1bffaa49694258a2626359ae668db10fd6232159716207663a79c039229526c3fef0f3150a10615b2c3092309248cb16ceeae2b8ba45981432292d2ef3fd4ae37731cd65178205926127f3a066fbd5ce78fa49af3505637368836dce0c937a933c40a9cadfd3f1e1b18ef25b9ed7a602d6c532b4e8ae2a0f094fd7ea5167b5b70d38dfb506bff81998442358843f6c238792edf02dc8c0504ae6cf5df751326a3e88d60c0cb6f29f4afbad53eb0f896abc0e0955af2d5ec612b36d263e9691ab0f721ff84abc939965e8caa6a70e2ea23f6e742dbe36affec0a596786c4effaccd723affb923ffed5bb885d6fd0703a168579e3ee905b04973ad0fee46f35c85795ceec9af154b6da768062a4cf76f11a0eb28d33bf893fb170183f8730039dadbe2865e342fc01bcdffbc045b2351ac07a79acd63a2f6c83cac60512f7bbaf80a9b1699c6f147c9ef3af71b67b5c1beae3b7889a3638a98292bb547659d3eccf3d7fba057d51fb849b84f054d96f7a594401b1c49effcbfe8a1f6275580f75d126fb941da67f5d5e988fc1031b478965f2a338fa57d67302d1a094e2bf6fa38fbd17644a3e810399e6a31b6e031d3c5b66969a9e377ff18a13eeccf1f031996e00b664a667444fec31a17ba1af190ad6614a6fef4653cf19cb5b4944d501b2e5c1e1a79a5c9aaf8eb3e8a78fbc297f71613dbeda6db05626ed4ab950700f80cbecf62bb55c383e678f56645c0dc9d11e705033661ce9f4bee78270a888e5e880c2e1e9aa6cb6aca0dccca2dd12803b12d9c187d9d94b82382ce1545abc91bab4e50cefe8d586b193ed08f3301875d4fd8edd7cfea0ed09029a912206b821fddbd5985e2ccfc06ecfb83d91cd517ad15f015316c035e3b59310af1719a745af5958856262cab4a28ef7bd1896f2096c548f4277387727b27fe17b7ef0d7c98efc82c8f4b11aa0fc95721bb6f4900c473334480ab49065b78bd0c393d495bc40f055f33487cd458b1a6949a8aa7c506ef5c13c04ff891834d4d9a046922cfa89de546c9acbeed7fd436bf0d38d4b973a2c0490e47416619f5dfbb9b81c92e2cd580ec20e7a4997a4f5d1b2796a4906bb51ac82512e8b38a969ae61ca4dc5187ad8306fd4ef3f5680434b91ece18b7309df7815bddd156ca2a70a344377cd0d4d02c679bd1a09d8213dc07a5134cae6a8403ed8eb7043ea2dec74dbfd5275d0dd7abc6b786e4357c77f830d35e18db93c0c8e62cc1da5ff81eee7e7c4c1d0ff189f87773659bc47a0859ee0f4d94eb20619d3055bac8237486d550cc01042918a1605f8eed65cf3c6a62f6321fa5cf3b472b40b633af9b4339f40d69210d88ccb84a2ee5d88069bfa5300c1186d440005950217b7d38799441529dbbef0b9e23195e15559bb6ee666dd649aa361e9a6608c818d56f29251dadef400e392ecef26e74368db22f52a0b85f10717cb39cf3e23fea96035fa3b11b8e4aea479abd274bc081128c862db24db0b1a036966cffeec12905f2b42fe704bae84e6c1f34e68cbc11fa01a67c4fb668fa1b40f914c8eae4ff5542ada500f0e8889dac1345ba295365a9e47b88251bd42d9380b1c56ef5dcaffd185584816aef1f3a5ced7764a0efe681d38c442a05eab9ac4d7420c01f2510f411f954e7fcd66f33ba16b0976fb16b2fe313333cb3576483cd896178f08e382e79fc355f661374179ea1c5acf9a0b122822fb5883ebcce293e39ba9dbdce7c9ae836bcc3f1af227eabfa2e3696e1a647a82983a284bc24262a0fa2636b0e8588dc0e311565848e39b8b3b68a2e355864e61939ef75ceaab0583af34225b3f5e2d7b98bcb5dc4984ebad777acf942723313d8b75557af28d5920da0ad835f81d10b1d0a7bffe7b51bc2063e0ae4348bd6c3df33031dc4c821222592d7a7d5cb593c67c0712f71047ce56e26e948d704e7f9db27f55e0c101e413c7efbd5f179789198051ebf01f0d26fd23972f2fcdafef00ebd88b5240eee53141d145b214ac45229576e9aa82ff0281e49f1e487c1e294ae7b68c4047b83806881349a5d40233321b51204001739aa2b963924b745bf13ae78ac5796e7d3307a358674dfcd72fce228d377bd391b464d2b43963441e136acb1c41ddfbe6f12971b8fd4c636610fcc9d0a77d488252a542743c4ca9c73edac4b9b785cb7adde87eefeb56feb8b13825c72e48337ccbde007ac8d5498cd63417830fc6ad51f22fbd8d0fd1abef06b8c6cf8a8f56b17e03030b90b98b41c88f98377514991ec395d6c47d2fd09fa00e9fde0f25ed30150f117014bde637d888f0779d040e2802f82620929326e08469d8c4383a8f757b9ff63cabc570405ffbf4a52cf71a22668dbd127341b01ccb21ff5c2439e727a0d87fbaad16c1c4c6ace790ed795c46fe93de734d6e4dc038f3aae6c504ca12896c623aa870006249ebb47d1e6319498eb6f9a8b15d4b45e14972fe39b77d144c0a7ded6755b60a0ff410d2dbe306a8790670e4a69a62853da8b94ad9b8d137986c32f8b413ff6197443085062db5856ae8ccd18d1fdf9166f220bb1afec73564ea334e79e67916ebbc80b9b2eb2ad7505787ec47a09ef81041f0469e01ee8811a51316eb1a4626619ef2ef1b5cc1b952682949cc79120912ab90fe9fcdf82499ff0e79b7c2a61f01439d973ae9d0e2b3b44333db540c03a36145a653d698e9d58a72f5b4b9b6581e1fef2e4f3ac7d896459ace72a3d280f22093a493a848c652da7e5b55cc0f1c5ace52313870bbf95a0a05ea2809cc659b42b3fa87fdb12a9de1027300bdbcbd6dfb7300c78616ae36515c2f99c017997bca4da06d2d703036b24e28c87efd2a56cd21fe507aa652458ddbb39f8c01fb2ca57afa8d5ed2092a5d959f3d12b88bd0156f458b2171093e207f7c9e881632a3b2a560d517a15038245c5f1d017bc0cc4e7ce634796bfa3d08429a9c66cd98e51e39c825968cdf4c330bc14f8bcea252db5e422489f8dfb1935e10635e8057232b7f9a6c53ef245ea4ec6596764040e3d75558745b38d61d18dee9d0a68b5747371abbdf6e669cc0b43f0c0914d0e237baf4456cf1388b19831772c76098cd10d4ef79bda5ec35dba9513b87fdf5ab008a6808b92cb71c5c29aeeb8b366bbf1afaac616715a0d1087b8a1aa80e3194fe8bba40fe8625c412c4019506379e312736cfab3b570b823e3c9df7e51a006785706f6a97774fe6cdf3c4c17a789bc84c4629563837a2472ac53888ca6140c8a814365863d9a5d0acf8d0d2fd7ae2f18f8b0c345a4543fa75a05b27fcaeea601e682fb3d3ee61200721cd1dbc68576d1a3f4cb6ada19da7f4aaf5a9f04270cd9cf5e105ab3c3ef5d5bd17b26bb210fc5b1c2637faf5b1813be48c122452c0279b63b085b811d94a0d2b7679756607b743049270473b80adb0505748c049cd6713c7e0dda6fa45b6f458a076bc980ce124380182574b895a203ca9f29d0d970a5c03c3fac67f5f4eae04e31db49a070856a178f7d6b151510b5aa356ae21456d02b881e74b380854954baf556eb411e50634321e2787700b4e95b9c64ecc8fac5106651ee6032f91d7d8fb009bb79b029819150312e04d92b13c5f2a8d8994e696ae8761c6e430fc4120bf508296c6ec0b5c0ebe5624f443b1af7bd190aa3840ecf28bd3ba60f37a4bc1cff4f80438663a6c089ce1442e97d2555a859ca982ae3a4c3d9d2143f3d325d06e8525f24dad7307f06e648d3569536b5c44d5144de111ba51a1597c0effa1bb512a9a4a8563da40c485ad5962016e697a937af136c3f5cffac6f9a335cda602eaf3bf9de2a2854d90166423c981e9f029fff27b4a6fcc727a361c502b3afd8e4d0d512d64ba25dbae204ea5a3bde39a6a798404eafaefbc09fd430f876e79da3473fd29888ca41d645155a1d4d918c457b87a4f9649affa899f1f6012999e56187136e789a081307012b4c2390b3b2914730e8162ab8d0021de3fd9fc99cc5017da50e938bfd1430fee7767b53977db4b576eb42bc577c59d0d448be91707b33472092eeb5f77acadc72ac5e321a6d9c9a50f087bbdd6a9d69004212aec9ba716c50e2871def4539265d4d39b2ea86e5938f676bae5b1a96064480a5de262243e49cfb805dd6c1deeabe69d7674a00ce34dc984baa3cc0a04a8740e8979333b7726fbd25e41034276a868874b2a689baceb46305b8fa866533b4293199f4f01b285b21367957be2ba753bddd1671f799061602145001de651564227ffb0d95a03efef9bbc2e0f822c4138d3ad47bed12304bdba909c5484eb1b4b9b68c921c93b04507730ba81b17cd0ea98ba32c63858b58ecde1e5b4552b36920410e7002e36d91d0599b95d05f7f88f812b07f46fa6c60b96563b68632a5b268fbc4a852720ba0b70a931f9a9e3c494b48737bcc189833e98db3c55dcbb83ca4a57bb0aa1ea556caa0b03d6ebace98041c3ec18eac1a44ea31f188d7bb5595a05dfec5f57cedbcfcd52c641b067b6894c5e0f81ddf5def3f808e2cfe7e1a90cda17c2466001db41f1fae51fc496e5eca2965bce9dc103d08e70889d40efa7fc6c6a710ad720d2dd83ddce87a8d4b7c887fc6d0a9b468799fff4795fcd9403e13add831270943abbf5852f40e27c0ebfb4396e1a53ed8ed1166fb1ee0a4915f46e91535aa9c4e292a06d15e9e4ab5f3f151d52c94bb93d7faae6fd3cfbe7993115c3a7c10345b9d2e37817b1527579dc35b1f4716aa7caddf800896557034b0816efa4d238d3a3ef94230a58dcb4700cfb58d51edcdf9af9a1ca492c7348f324a75e159dc542b07ab8396c7cc5ff7055f34592e42f24e8e6cf559813f8c9ecb38ceb803c30c5229d8752e05b9d5a3cc10f4f47b79abf2d9ffb82ca9beebdac42626355c2c64ffefdef57709f7daf0c6ee00bce9c001500d3cdbfc18ee664ab07178f31f2e562cf3c526d64ec3fb6b47b978b02ef6400274998798f77f80d1cc2166a5e9148e5063fafcd60974e797aa167bf7d9005be6dcf66a95129459af00"/6264], 0x1878) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x40000000000000, 0x0, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400443, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() r7 = gettid() sendmmsg$unix(r5, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x70}], 0xfd, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{0x0, 0x3, 0x4, 0x8000, '\x00', 0xf6}, 0x1, 0x40, 0x9, r6, 0x4, 0x80000000, 'syz1\x00', &(0x7f00000001c0)=['/dev/kvm\x00', '/dev/kvm\x00', '/dev/kvm\x00', 'posix_acl_accessself{\x00'], 0x31, [], [0x8001, 0x9, 0x4, 0x1]}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000080)='.\x00', 0xfe) r10 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r11 = dup2(r10, r9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r13, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r13, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000100)={r13, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r13, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={r13, 0x1}, 0x8) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0xffffffff}) [ 1795.578805] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1795.612110] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 13:33:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x6000, {0x0, 0x0, "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"}}}, 0x128) [ 1795.634478] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1795.659268] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1795.700284] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1795.715203] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1795.727821] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:33:45 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$selinux_create(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7d3fd4cf6e5f657865635f743a7330202f7573722f6c69622f81656c6570617468792f6d697373696f6e2d636f6e74726f6c2d3520303030303030303030303030307030303030303200"], 0x5c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000140)={0x2b, @tick=0x8, 0x1, {0x1, 0x2}, 0x7, 0x1, 0x4}) read(r0, &(0x7f0000a16000)=""/71, 0x24) [ 1795.744615] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1795.754775] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1795.781244] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1795.818860] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1795.838929] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1795.846110] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1795.868163] Interruptibility = 00000000 ActivityState = 00000000 [ 1795.874956] *** Host State *** [ 1795.878388] RIP = 0xffffffff811c9793 RSP = 0xffff8880993d78c0 [ 1795.885798] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1795.907051] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 1795.916035] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1795.922408] CR0=0000000080050033 CR3=000000009bcde000 CR4=00000000001426e0 [ 1795.930019] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 1795.936865] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1795.943609] *** Control State *** [ 1795.947233] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 1795.954471] EntryControls=0000d1ff ExitControls=002fefff [ 1795.960435] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 13:33:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1795.967707] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1795.975351] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1795.983710] reason=80000021 qualification=0000000000000000 [ 1795.990979] IDTVectoring: info=00000000 errcode=00000000 [ 1795.996539] TSC Offset = 0xfffffc3c2594f171 [ 1796.001620] TPR Threshold = 0x00 [ 1796.005129] EPT pointer = 0x00000000960f801e [ 1796.009840] Virtual processor ID = 0x0002 [ 1796.100138] *** Guest State *** [ 1796.103593] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1796.112652] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1796.121913] CR3 = 0x0000000000000000 [ 1796.125634] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1796.131804] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 1796.138666] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1796.145514] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1796.153814] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1796.162252] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1796.170332] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1796.178343] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1796.186471] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1796.194792] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1796.202978] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1796.211369] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1796.219806] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1796.227940] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1796.234587] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1796.242192] Interruptibility = 00000000 ActivityState = 00000000 [ 1796.248458] *** Host State *** [ 1796.251910] RIP = 0xffffffff811c9793 RSP = 0xffff8880993d78c0 [ 1796.257939] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1796.264480] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 1796.272358] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1796.278260] CR0=0000000080050033 CR3=000000008981e000 CR4=00000000001426e0 [ 1796.285425] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 1796.292250] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1796.298330] *** Control State *** [ 1796.301918] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 1796.308611] EntryControls=0000d1ff ExitControls=002fefff [ 1796.314129] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1796.321195] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1796.327877] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1796.334550] reason=80000021 qualification=0000000000000000 [ 1796.340968] IDTVectoring: info=00000000 errcode=00000000 [ 1796.346422] TSC Offset = 0xfffffc3bbf5e7fe1 [ 1796.350820] TPR Threshold = 0x00 [ 1796.354200] EPT pointer = 0x0000000085f4e01e [ 1796.358638] Virtual processor ID = 0x0002 [ 1797.489182] Bluetooth: hci0: command 0x1003 tx timeout [ 1797.494598] Bluetooth: hci0: sending frame failed (-49) [ 1799.569178] Bluetooth: hci0: command 0x1001 tx timeout [ 1799.574730] Bluetooth: hci0: sending frame failed (-49) [ 1801.649801] Bluetooth: hci0: command 0x1009 tx timeout 13:33:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000040)) 13:33:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xec0}, 0x14}}, 0x0) 13:33:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0xc000, {0x0, 0x0, "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"}}}, 0x128) 13:33:55 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 13:33:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000000ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab501808b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getegid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000800), 0x24, 0x0) 13:33:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:33:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xf00}, 0x14}}, 0x0) [ 1805.588365] *** Guest State *** [ 1805.603642] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 13:33:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x1000000, {0x0, 0x0, "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"}}}, 0x128) 13:33:55 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3b1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000040)) [ 1805.650520] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1805.680107] CR3 = 0x0000000000000000 [ 1805.688620] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1805.705303] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 1805.723579] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1805.733803] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1805.742837] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:33:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x13aa}, 0x14}}, 0x0) [ 1805.754405] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1805.781789] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1805.795921] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1805.808599] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1805.827658] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1805.839791] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 13:33:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x2000000, {0x0, 0x0, "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"}}}, 0x128) [ 1805.854864] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1805.867815] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1805.896315] EFER = 0x0000000000000000 PAT = 0x0007040600070406 13:33:55 executing program 2: r0 = timerfd_create(0x9, 0x80800) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat(r5, &(0x7f0000000040)='./file0\x00', 0x80000, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000080)='.\x00', 0xfe) r10 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r11 = dup2(r10, r9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r13, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r13, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000100)={r13, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r13, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000000c0)={r13, 0x561}, 0x8) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) [ 1805.908642] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1805.925532] Interruptibility = 00000000 ActivityState = 00000000 [ 1805.951475] *** Host State *** [ 1805.960816] RIP = 0xffffffff811c9793 RSP = 0xffff888052a2f8c0 [ 1805.981110] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1805.998829] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 1806.008561] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1806.015610] CR0=0000000080050033 CR3=000000004acfe000 CR4=00000000001426e0 [ 1806.023747] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 1806.031717] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1806.038628] *** Control State *** [ 1806.043667] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 1806.054323] EntryControls=0000d1ff ExitControls=002fefff [ 1806.064068] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1806.074508] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1806.110244] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1806.124180] reason=80000021 qualification=0000000000000000 [ 1806.131108] IDTVectoring: info=00000000 errcode=00000000 [ 1806.140615] TSC Offset = 0xfffffc36ab7c64ef [ 1806.145106] TPR Threshold = 0x00 [ 1806.148686] EPT pointer = 0x000000004d78401e [ 1806.153430] Virtual processor ID = 0x0002 [ 1807.649121] Bluetooth: hci0: command 0x1003 tx timeout [ 1807.654745] Bluetooth: hci0: sending frame failed (-49) [ 1809.729147] Bluetooth: hci0: command 0x1001 tx timeout [ 1809.734614] Bluetooth: hci0: sending frame failed (-49) [ 1811.809148] Bluetooth: hci0: command 0x1009 tx timeout 13:34:05 executing program 2: io_setup(0x3, &(0x7f0000000000)) r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_INSTALLED(r4, 0x80024322) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 13:34:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x4000}, 0x14}}, 0x0) 13:34:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x3000000, {0x0, 0x0, "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"}}}, 0x128) 13:34:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f0000000040)) 13:34:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000040)) 13:34:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1815.825040] *** Guest State *** [ 1815.832921] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1815.844183] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1815.869237] CR3 = 0x0000000000000000 13:34:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x6000}, 0x14}}, 0x0) 13:34:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4000000, {0x0, 0x0, "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"}}}, 0x128) [ 1815.873121] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1815.885788] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 13:34:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xaa13}, 0x14}}, 0x0) [ 1815.917584] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1815.925859] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1815.940811] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1815.949640] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1815.958105] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:34:05 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x6, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="021607661b0000002abd7000fbdbdf250500dc8f330000000a004e2300000003fe80000000000000000000000000cdaacf0a00000080000002000800380005001a00284b67a3768c73f8c025c0ef3ad75692fe8800000000000000000000000000010200123402000a00060000004000000000000000010014008100000005001a00ac141406000000000000000000000000ac1414bb000000000000000000000000080010040500180007011a006d3f6ff9e438bf3be91e946c369b55d0ee513a3e6514da7f772d00"/216], 0xd8}}, 0x540) read(r0, &(0x7f0000a16000)=""/71, 0x47) [ 1815.968844] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1815.977577] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1815.992980] GDTR: limit=0x0000ffff, base=0x0000000000000000 13:34:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x5000000, {0x0, 0x0, "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"}}}, 0x128) [ 1816.023080] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 13:34:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xc00e}, 0x14}}, 0x0) [ 1816.072954] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1816.095243] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 13:34:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x6000000, {0x0, 0x0, "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"}}}, 0x128) [ 1816.125745] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1816.165358] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 13:34:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xf000}, 0x14}}, 0x0) [ 1816.176536] Interruptibility = 00000000 ActivityState = 00000000 [ 1816.203984] *** Host State *** [ 1816.216399] RIP = 0xffffffff811c9793 RSP = 0xffff88804e59f8c0 [ 1816.242262] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1816.257951] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000034000 [ 1816.268724] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 13:34:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x40000000, {0x0, 0x0, "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"}}}, 0x128) [ 1816.294911] CR0=0000000080050033 CR3=00000000a9b34000 CR4=00000000001426f0 [ 1816.315141] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 1816.338405] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1816.363434] *** Control State *** [ 1816.373712] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 1816.388212] EntryControls=0000d1ff ExitControls=002fefff [ 1816.394408] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1816.401974] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1816.409758] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1816.417374] reason=80000021 qualification=0000000000000000 [ 1816.430740] IDTVectoring: info=00000000 errcode=00000000 [ 1816.442250] TSC Offset = 0xfffffc313022270e [ 1816.451673] TPR Threshold = 0x00 [ 1816.456365] EPT pointer = 0x000000004d52301e [ 1816.467747] Virtual processor ID = 0x0002 [ 1817.889165] Bluetooth: hci1: command 0x1003 tx timeout [ 1817.894753] Bluetooth: hci1: sending frame failed (-49) [ 1817.900441] Bluetooth: hci0: command 0x1003 tx timeout [ 1817.911570] Bluetooth: hci0: sending frame failed (-49) [ 1819.969161] Bluetooth: hci0: command 0x1001 tx timeout [ 1819.975163] Bluetooth: hci0: sending frame failed (-49) [ 1819.981153] Bluetooth: hci1: command 0x1001 tx timeout [ 1819.986560] Bluetooth: hci1: sending frame failed (-49) [ 1822.049180] Bluetooth: hci0: command 0x1009 tx timeout [ 1822.049257] Bluetooth: hci1: command 0x1009 tx timeout 13:34:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000040)) 13:34:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x60000000, {0x0, 0x0, "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"}}}, 0x128) 13:34:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x34000}, 0x14}}, 0x0) 13:34:15 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)) timerfd_settime(r0, 0x2, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0xb2}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x84800, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={r4, 0x3ab, 0x4}) prctl$PR_CAPBSET_DROP(0x18, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r4, 0x7fffffff, 0xff}) read(r0, &(0x7f0000a16000)=""/71, 0x47) 13:34:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:34:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) fchmod(r2, 0x210) recvfrom$inet6(r3, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) shutdown(r3, 0x1) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) 13:34:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:34:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x400300}, 0x14}}, 0x0) [ 1826.095957] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:34:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0xc0000000, {0x0, 0x0, "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"}}}, 0x128) 13:34:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:34:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x8000a0}, 0x14}}, 0x0) 13:34:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x193b3eeb98c, {0x0, 0x0, "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"}}}, 0x128) [ 1828.139104] Bluetooth: hci0: command 0x1003 tx timeout [ 1828.144622] Bluetooth: hci0: sending frame failed (-49) [ 1830.209167] Bluetooth: hci0: command 0x1001 tx timeout [ 1830.214614] Bluetooth: hci0: sending frame failed (-49) [ 1832.289173] Bluetooth: hci0: command 0x1009 tx timeout 13:34:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000040)) 13:34:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xf0ffff}, 0x14}}, 0x0) 13:34:26 executing program 3 (fault-call:11 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:34:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x100000000000000, {0x0, 0x0, "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"}}}, 0x128) 13:34:26 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x100) write$UHID_CREATE2(r2, &(0x7f0000000140)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0xca, 0x2391, 0x100, 0x2ae, 0xfffffffa, 0x9, "5af55c84e6abec422d9c769042c4f733b21959022c49e79e2d8dc73f8be9d821d31c8a19c09293acaf288949194f2da88d7da3758d6c25de981299cc4cf2842671e5d5839fc3520c6276682642100201795727362b78b0332f22e27eebf88813c8049c6a8d6754e72acd8e73efe743b3249f1e6dd9892e641108ed7472c1dc8deb0af95cfcbb4fe121c68ee0d9aa991fb8988b1227d9dcc8a700885a707be10a906499a59f508b303fc4df54b592e79b27cad75b88df3514dd209a3d0426c4d504e272e6cb0fda9c3141"}, 0x1e2) 13:34:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockname$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000140)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f00000007c0)) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x138, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @local, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3f, @ipv4={[], [], @remote}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc34}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7663dc73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x685c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r7 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_crypto(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delrng={0x10, 0x14, 0x800, 0x70bd27, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) [ 1836.298883] FAULT_INJECTION: forcing a failure. [ 1836.298883] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.312159] CPU: 0 PID: 7552 Comm: syz-executor.3 Not tainted 4.19.82 #0 [ 1836.319037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1836.328493] Call Trace: [ 1836.331381] dump_stack+0x172/0x1f0 [ 1836.335153] should_fail.cold+0xa/0x1b [ 1836.339076] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1836.344212] ? lock_downgrade+0x880/0x880 [ 1836.348396] __should_failslab+0x121/0x190 [ 1836.352657] should_failslab+0x9/0x14 [ 1836.356474] kmem_cache_alloc+0x2ae/0x700 [ 1836.360643] ? lock_downgrade+0x880/0x880 [ 1836.364818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1836.370386] ? check_preemption_disabled+0x48/0x290 [ 1836.375543] mmu_topup_memory_caches+0x97/0x3a0 [ 1836.380245] kvm_mmu_load+0x21/0xf60 [ 1836.384383] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1836.389337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1836.394908] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1836.399430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1836.404994] vcpu_enter_guest+0x3ac5/0x5ed0 [ 1836.409354] ? SOFTIRQ_verbose+0x10/0x10 [ 1836.413435] ? perf_trace_lock+0xeb/0x510 [ 1836.417602] ? mark_held_locks+0x100/0x100 [ 1836.421930] ? kvm_vcpu_ioctl+0x181/0xf90 [ 1836.426095] ? emulator_read_emulated+0x50/0x50 [ 1836.426114] ? lock_acquire+0x16f/0x3f0 [ 1836.426131] ? kvm_arch_vcpu_ioctl_run+0x274/0x16b0 [ 1836.439790] kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 1836.439804] ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 1836.439827] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1836.439842] ? kvm_vcpu_block+0xcc0/0xcc0 [ 1836.439858] ? debug_smp_processor_id+0x1c/0x20 [ 1836.439872] ? perf_trace_lock+0xeb/0x510 [ 1836.439884] ? mark_held_locks+0x100/0x100 [ 1836.439902] ? SOFTIRQ_verbose+0x10/0x10 [ 1836.475056] ? find_held_lock+0x35/0x130 [ 1836.479144] ? __fget+0x340/0x540 [ 1836.482612] ? find_held_lock+0x35/0x130 [ 1836.486692] ? __fget+0x340/0x540 [ 1836.490170] ? kvm_vcpu_block+0xcc0/0xcc0 [ 1836.494349] do_vfs_ioctl+0xd5f/0x1380 13:34:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x1000000}, 0x14}}, 0x0) 13:34:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x200000000000000, {0x0, 0x0, "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"}}}, 0x128) [ 1836.498296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1836.503861] ? selinux_file_ioctl+0x125/0x5e0 [ 1836.508392] ? ioctl_preallocate+0x210/0x210 [ 1836.512822] ? selinux_file_mprotect+0x620/0x620 [ 1836.517610] ? iterate_fd+0x360/0x360 [ 1836.521463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1836.527022] ? fput+0x128/0x1a0 [ 1836.530337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1836.535893] ? security_file_ioctl+0x8d/0xc0 [ 1836.540336] ksys_ioctl+0xab/0xd0 [ 1836.543810] __x64_sys_ioctl+0x73/0xb0 13:34:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x2000000}, 0x14}}, 0x0) [ 1836.547717] do_syscall_64+0xfd/0x620 [ 1836.551553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1836.556755] RIP: 0033:0x45a219 [ 1836.559969] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1836.578892] RSP: 002b:00007f771a1e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1836.586624] RAX: ffffffffffffffda RBX: 00007f771a1e5c90 RCX: 000000000045a219 13:34:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x4000000}, 0x14}}, 0x0) 13:34:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x300000000000000, {0x0, 0x0, "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"}}}, 0x128) [ 1836.594962] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1836.602255] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1836.609547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f771a1e66d4 [ 1836.616832] R13: 00000000004c38b2 R14: 00000000004d7b70 R15: 0000000000000008 13:34:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x71, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x12) [ 1838.369299] Bluetooth: hci0: command 0x1003 tx timeout [ 1838.375603] Bluetooth: hci0: sending frame failed (-49) [ 1840.449229] Bluetooth: hci0: command 0x1001 tx timeout [ 1840.455477] Bluetooth: hci0: sending frame failed (-49) [ 1842.529227] Bluetooth: hci0: command 0x1009 tx timeout 13:34:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000040)) 13:34:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xa000000}, 0x14}}, 0x0) 13:34:36 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)=0x9) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b22, &(0x7f0000000000)='wlan0\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b22, &(0x7f0000000000)='wlan0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='*wlan0:\x00', r4}, 0x10) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/230) r5 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r5, 0x0, &(0x7f0000000080)={{0x0, r6+10000000}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000a16000)=""/71, 0x47) 13:34:36 executing program 3 (fault-call:11 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:34:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x400000000000000, {0x0, 0x0, "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"}}}, 0x128) 13:34:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:34:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xe000000}, 0x14}}, 0x0) [ 1846.574102] FAULT_INJECTION: forcing a failure. [ 1846.574102] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.612513] CPU: 1 PID: 7714 Comm: syz-executor.3 Not tainted 4.19.82 #0 [ 1846.619702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.629448] Call Trace: [ 1846.629475] dump_stack+0x172/0x1f0 [ 1846.629497] should_fail.cold+0xa/0x1b [ 1846.629517] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1846.629535] ? lock_downgrade+0x880/0x880 [ 1846.629559] __should_failslab+0x121/0x190 [ 1846.648874] should_failslab+0x9/0x14 [ 1846.648893] kmem_cache_alloc+0x2ae/0x700 [ 1846.648915] ? lock_downgrade+0x880/0x880 [ 1846.670073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1846.675651] ? check_preemption_disabled+0x48/0x290 [ 1846.680808] mmu_topup_memory_caches+0x97/0x3a0 [ 1846.685517] kvm_mmu_load+0x21/0xf60 [ 1846.689824] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1846.694785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1846.701071] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1846.705589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1846.711326] vcpu_enter_guest+0x3ac5/0x5ed0 [ 1846.715667] ? SOFTIRQ_verbose+0x10/0x10 [ 1846.719830] ? perf_trace_lock+0xeb/0x510 [ 1846.723990] ? mark_held_locks+0x100/0x100 [ 1846.728377] ? kvm_vcpu_ioctl+0x181/0xf90 [ 1846.728402] ? emulator_read_emulated+0x50/0x50 [ 1846.742670] ? lock_acquire+0x16f/0x3f0 [ 1846.742687] ? kvm_arch_vcpu_ioctl_run+0x274/0x16b0 [ 1846.742707] kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 1846.742720] ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 1846.742741] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1846.742756] ? kvm_vcpu_block+0xcc0/0xcc0 [ 1846.742773] ? debug_smp_processor_id+0x1c/0x20 [ 1846.742785] ? perf_trace_lock+0xeb/0x510 [ 1846.742797] ? mark_held_locks+0x100/0x100 [ 1846.742814] ? SOFTIRQ_verbose+0x10/0x10 [ 1846.742830] ? find_held_lock+0x35/0x130 [ 1846.779064] ? __fget+0x340/0x540 [ 1846.779082] ? find_held_lock+0x35/0x130 [ 1846.779097] ? __fget+0x340/0x540 [ 1846.779117] ? kvm_vcpu_block+0xcc0/0xcc0 [ 1846.779134] do_vfs_ioctl+0xd5f/0x1380 [ 1846.779149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1846.779166] ? selinux_file_ioctl+0x125/0x5e0 13:34:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x500000000000000, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) [ 1846.779187] ? ioctl_preallocate+0x210/0x210 [ 1846.792140] ? selinux_file_mprotect+0x620/0x620 [ 1846.792168] ? iterate_fd+0x360/0x360 [ 1846.792186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1846.841532] ? fput+0x128/0x1a0 [ 1846.844858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1846.850443] ? security_file_ioctl+0x8d/0xc0 [ 1846.855158] ksys_ioctl+0xab/0xd0 [ 1846.855180] __x64_sys_ioctl+0x73/0xb0 [ 1846.855199] do_syscall_64+0xfd/0x620 [ 1846.866694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1846.866709] RIP: 0033:0x45a219 [ 1846.875263] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1846.894761] RSP: 002b:00007f771a1e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1846.902663] RAX: ffffffffffffffda RBX: 00007f771a1e5c90 RCX: 000000000045a219 [ 1846.910101] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1846.917397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:34:36 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r2}, 0xc) 13:34:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c69499459586c0b926aa04d67618228f066a2f5ad6259f015e97d48b7bdb965d4e274b9d5b90991aaba6bb3646797a193ffc12246d10054d9e49405a743a6e85ab713a64bc7aadc8d391232", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:34:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xf000000}, 0x14}}, 0x0) 13:34:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x600000000000000, {0x0, 0x0, "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"}}}, 0x128) [ 1846.924828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f771a1e66d4 [ 1846.932482] R13: 00000000004c38b2 R14: 00000000004d7b70 R15: 0000000000000008 [ 1848.699110] Bluetooth: hci0: command 0x1003 tx timeout [ 1848.706004] Bluetooth: hci0: sending frame failed (-49) [ 1850.769180] Bluetooth: hci0: command 0x1001 tx timeout [ 1850.775241] Bluetooth: hci0: sending frame failed (-49) [ 1852.849150] Bluetooth: hci0: command 0x1009 tx timeout 13:34:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000040)) 13:34:46 executing program 3 (fault-call:11 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:34:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x17) 13:34:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x40000000}, 0x14}}, 0x0) 13:34:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4000000000000000, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:34:46 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0xfffffffb}]}) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 13:34:46 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)=0x9) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b22, &(0x7f0000000000)='wlan0\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b22, &(0x7f0000000000)='wlan0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='*wlan0:\x00', r4}, 0x10) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/230) r5 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r5, 0x0, &(0x7f0000000080)={{0x0, r6+10000000}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000a16000)=""/71, 0x47) 13:34:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x6000000000000000, {0x0, 0x0, "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"}}}, 0x128) 13:34:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x60000000}, 0x14}}, 0x0) [ 1856.822121] audit: type=1326 audit(1573479286.713:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7985 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 13:34:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:34:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x9effffff}, 0x14}}, 0x0) 13:34:46 executing program 2: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="636173655f73656e7369746976653d6e6f2c64697361626c655f7370617273653d6e6f2c756d61736b3d30303030303030303030303030303030303030303030302c646d61736b3d30303030303030303030303030303030303030303030302c636173655f73656e7369746976653d7965732c636173655ff36247488273656e7369746976653d6e6f2c666d61736b3d3030303030303030303030303030303030303030233f57", @ANYRESHEX=0x0, @ANYBLOB="2c6d6674166cd30ad54563585e346398ec783030303030303030"]) [ 1857.081719] *** Guest State *** [ 1857.086527] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1857.104194] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1857.113987] CR3 = 0x0000000000000000 [ 1857.118543] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1857.125866] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 1857.132862] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1857.140270] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1857.150611] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1857.159229] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1857.167471] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1857.176200] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1857.184325] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1857.193260] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1857.201430] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1857.210133] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1857.218623] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1857.226830] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1857.233564] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1857.241331] Interruptibility = 00000000 ActivityState = 00000000 [ 1857.247737] *** Host State *** [ 1857.251183] RIP = 0xffffffff811c9793 RSP = 0xffff88804d4df8c0 [ 1857.257442] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1857.264331] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 1857.272578] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1857.278709] CR0=0000000080050033 CR3=000000008f4be000 CR4=00000000001426e0 [ 1857.286142] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 1857.293368] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1857.299912] *** Control State *** [ 1857.303434] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 1857.311012] EntryControls=0000d1ff ExitControls=002fefff [ 1857.317088] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1857.324186] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1857.331164] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1857.339583] reason=80000021 qualification=0000000000000000 [ 1857.346445] IDTVectoring: info=00000000 errcode=00000000 [ 1857.352045] TSC Offset = 0xfffffc1b18cfd40a [ 1857.356783] TPR Threshold = 0x00 [ 1857.360592] EPT pointer = 0x00000000a053b01e [ 1857.365371] Virtual processor ID = 0x0002 [ 1857.547722] audit: type=1326 audit(1573479287.433:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7985 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 1858.929294] Bluetooth: hci0: command 0x1003 tx timeout [ 1858.934869] Bluetooth: hci0: sending frame failed (-49) [ 1861.009194] Bluetooth: hci0: command 0x1001 tx timeout [ 1861.014771] Bluetooth: hci0: sending frame failed (-49) [ 1863.089270] Bluetooth: hci0: command 0x1009 tx timeout 13:34:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:34:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vcs\x00', 0x400, 0x0) openat$cgroup_ro(r1, &(0x7f00000012c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000100)={0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000001200)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write$UHID_INPUT(r13, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, &(0x7f0000001240)) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x3, 0x20000) 13:34:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xa0008000}, 0x14}}, 0x0) 13:34:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x8cb9eeb393010000, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:34:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x2, 0x0) 13:34:56 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000280)={@local}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./bus\x00', 0x9aa, 0x6, &(0x7f0000000700)=[{&(0x7f00000001c0)="c6302fab109c625a3b641026949c61fe1daeaee42e226cedf8a14f8ceb80c89ca2573a9ec0977587ede2bce30447e1a4953ff18ee9da5109cc207a9ffe4315829f12ced8", 0x44, 0xf9}, {&(0x7f00000002c0)="f59edb0e344e0717e28c3ed7a5165fcee55edfb9b483389becf23eae05287fb7b123a4746f0f49a58cb2a955a2a83611d79b5d2470fb3bca653cc99de987e567e96be831815ee7367b8e554157353b7f715ad5c952f222976b51f70b09d27fbbbdf3340d6aeb66e34c7e0effe2253505b1b18dbf53593be80ae597f04f4adc7a02691b8fa3c2a37e19108534c4170a70b76b6be0f338b22bfea57b93cb24cf9d9423647e1cd2a74511d0fa55b4", 0xad, 0x7}, {&(0x7f00000003c0)="301bff57b5eb241dc4a7fc9968fd4d85a67ee491dfcef664938a059e57760a2246e76623c6e3bb9aa2cb967406d60375dc7a63120d7786a3813b35aa920f0dfb2d25f502c44153c0a8bfb4f93a296bb8e6c05ea092248d32dd8e0da6806f1d1c0da0fa537b2274dcd9aa78cfbba39f424b38d7839cddea04ace4ade98b55282c0ff8147cb32df7c580734b1b1c4fda0a6c9376e5785887ea8efc65ae502925a49b5baae33ebb80675eab0479b6601cb0df2d0f5730432c5080c26fe5437955131c43c5019450cb0eb6315ed9eb00cc7b09c4a93079682651f0e5ff44a57ee1", 0xdf, 0x1b0}, {&(0x7f0000000500)="46f311c15af04a82520dcf22c045678b6b817a5620dca082a370919992e3c06c21ce437a79ad8c4d08b6d481dccae20e415fea619bf8e359cc55a8b32eb8093030c43af7b5cedfea2086e61fc7f507fa8991e1576c94ce22e3e0d158eef6d0e0195b44479829f92599a0edb59f73653e11fefdba7ef09ce791d0fb03ec5ff2430322a9087f8dcbcaf2ce1cc0691a152c6695f9975746f67de9f86ff923cbccc08fe8f4cb2fea671d9de1eecd", 0xac, 0xffffffffffff0001}, {&(0x7f00000005c0)="edd84576985f185ff638a5aa5a4c2b385af3a2728c707d92257ebd7ae9d8951ad03317c9fc496ff23178ff7a2008e8eec42365e851b33da56db6ed43367548253c76448e0f6c420610d8d54de9af8eaf637c6c5b03e9bb5fe1f0e8c6646b9724433ca5e978211acc4e3a0a263f6e8b2e478be987bc10a791c5e5a12680f4073900e689f0c0ba19cd192ceabc61547d2b9ca6fc4a6fb839637d203ba07ca66296c1179d4c848b9a5ac12cca262505bceab0a1ca28f1a25243ab5809bc65e11b775a1424f056d8d9bd380d3aab66fb0803961acb22afcafa51f27d49a1791f12a2d3b3311594007b03bde1c2da9cd0", 0xee, 0x8}, {&(0x7f00000006c0)="e77fc64c07f6", 0x6, 0x3}], 0x400, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast2}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000) creat(&(0x7f0000000000)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2, &(0x7f00000004c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3800) io_setup(0x2346, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 13:34:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xaa130000}, 0x14}}, 0x0) 13:34:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0xc000000000000000, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:34:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4b47, 0x0) 13:34:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x100000000000001, 0x87) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) 13:34:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xc00e0000}, 0x14}}, 0x0) 13:34:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 1869.169232] Bluetooth: hci0: command 0x1003 tx timeout [ 1869.174756] Bluetooth: hci0: sending frame failed (-49) [ 1869.899109] Bluetooth: hci1: command 0x1003 tx timeout [ 1869.904681] Bluetooth: hci1: sending frame failed (-49) [ 1871.249211] Bluetooth: hci0: command 0x1001 tx timeout [ 1871.254627] Bluetooth: hci0: sending frame failed (-49) [ 1871.969175] Bluetooth: hci1: command 0x1001 tx timeout [ 1871.974595] Bluetooth: hci1: sending frame failed (-49) [ 1873.329296] Bluetooth: hci0: command 0x1009 tx timeout [ 1874.049160] Bluetooth: hci1: command 0x1009 tx timeout 13:35:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4b49, 0x0) 13:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xf0ffffff}, 0x14}}, 0x0) 13:35:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) 13:35:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x2, 0x0, "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"}}}, 0x128) 13:35:08 executing program 4: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300150100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff74, 0x400}], 0x5, 0x0) 13:35:08 executing program 2: r0 = getpid() r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x1) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0xc5b, 0x5, 0x8323}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r5) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r7, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) connect(r8, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r9 = gettid() r10 = gettid() sendmmsg$unix(r8, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0x70}], 0xfd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r13, 0xb704, &(0x7f00000000c0)=0x0) r15 = socket$inet(0x10, 0x3, 0xc) sendmsg(r15, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r16 = socket$inet(0x10, 0x3, 0xc) sendmsg(r16, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r17 = socket$inet_sctp(0x2, 0x1, 0x84) r18 = socket$inet(0x10, 0x3, 0xc) sendmsg(r18, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r19 = socket$inet(0x10, 0x3, 0xc) sendmsg(r19, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r20 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r22 = getuid() r23 = getegid() r24 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x40000, 0x0) r25 = socket$inet(0x10, 0x3, 0xc) sendmsg(r25, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r26 = socket$inet(0x10, 0x3, 0xc) sendmsg(r26, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r27 = socket$inet(0x10, 0x3, 0xc) sendmsg(r27, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r28 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x0, 0x2) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)={0x1cc, 0x1a, 0x100, 0x70bd29, 0x25dfdbfd, "", [@nested={0x1bc, 0x93, [@generic="97b9bdac6225b09bf90f8d28799c666494144fa2d7914ccd99fae082da1d03ae0d07998b3804bd75230c557afaf1f9fc272d920ffb48964f3fa15c5f7c09da434aadc763d23f0c75643e0e589a5ddc06aaf1e4f4cac713f75dc39ae4a0ee9afa5a755febee3b21dba1d6ad", @generic="5027cebdeb0614c4ae39b8f42386fb57021c1a0152ae0bd969c33d50df7172214eaa29647ca51778cf857e81f6aab5dbd56005390c96c712b3d2c315270ce5ebb94d432dabe301fd6a298e600a1f8aa4a23360af6ea6d6536fc3a8690dc3105e7051b6f604be9eeb183fefe3f0e6350953ac0b91a0f9f5fc4a81e33e70b610acac92022566226918e8d1db63ab83c6429ab539af79d70bc6639cf93b4ede865c2b1c1d247e55536e0cac2602", @generic="a5a4d076d46368dd776b375b68a3ae6f2751444095eafd9251ee770cf7f8759b1697ccc019665ccf40ef16484600d9762d0049f7792c4f56eaeb683fb1e0a28283d80f6745b2b24142b97c870fc81898790495b9b79c3446554e69156e23658ef278ca130a7eb7fd217273794558984f7fc6255ff3b907b6f270a93f28a2560c97dba2768311e9ca5f34afd1742a5f900d75926aae43f0620e", @typed={0x8, 0x72, @u32=0x60d3}]}]}, 0x1cc}, {&(0x7f00000011c0)={0x15e8, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@generic="57966f39a3b5b5ee54d06680c29c5f4c62ee580dd10fda84605ad202b92400ebfc2b72df7f903bfebc47728d3acb6a16420d584bd663974dc57d33350336c4c800286a57daf188f772209a1c3f3878826a747da13c934c5b2d49b822766836aec4692d29f7e5fec079f10182004fee3ebd539d57ca972e382fbf989702b5258e740785e577ccd95a3ee9e86d24b6e889438d1052776891a2369c27119c5242d43904ca71756ae91d5787ef9ff7a5197aff9470b115d5a5d5a229c311d327578c46c368d4e74d80", @nested={0x1100, 0x36, [@typed={0x8, 0x88, @fd=r3}, @generic="91dee430ad95eb8ba224ddbe64e91c6763c3c74eb7e2a3e22e553b3441fbe1dde49f5ea0d636a8ae881aa323883f271bedba9a606aca29316bbacf33265f16c11c22f81cc06f1aa7152f640802e96654013f89b0c5a35e7ad33da8714169b1d000b5e327a7ac36cfe92c07f562b419675a3bcad7be01c5cda5aedf326d7eb5f661dfad495c08d9dbbb47dc8a9fc6ad3b088ca368c40213a73a327927fa0521f097921875b4955adcb5bb810b79fd81b4ace7b07a7300e3ba5f41871fc500afc56cbb1b1601ca87e068a68650d526287cd7696de08433ef54b0b85d02e9baefabb9f816ae1c02a273ba", @generic="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", @typed={0x8, 0x88, @fd=r4}]}, @typed={0xc, 0x59, @u64=0x2}, @nested={0xbc, 0x3e, [@generic="86b25b12659861ce83af933d94b0ad98620abe3e2114313063c02056894a107fbf06e2b9ba0c8f11cb3604dd10fbb0bbbbe7a1bce23332a5c3711b4c69cb406a3eb8c91a7e52aacabfdce3e725afce41f3445ff118c7d9e2c7085f3fb6f44bddfbdd9c4ab28e456fde1870a48cf46bf4019490b55e71d5cf75a667130e1d207246074bb56047f4919e6c", @typed={0x14, 0x78, @ipv6=@local}, @typed={0x8, 0x64, @pid=0xffffffffffffffff}, @typed={0x8, 0x6f, @pid=r9}, @typed={0x8, 0x95, @uid=0xee00}]}, @typed={0x14, 0x14, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @nested={0x120, 0x34, [@typed={0x8, 0x7, @uid=r14}, @typed={0x8, 0x19, @fd=r15}, @generic="df27b9519e2b73fc9d3c39b5894b03e2c6123716a99512b5bff378b7c6e5561ea31254a3aa28cb965a7336f9e2c92c282bce152c9c6b163bacd91a85267e4c452c2425ecea732bb14ecee8053a556ed182f1be4c01c49370732645241a2f87b7b7b048725fceb0ef4b20ea85cc6e008792f9f763a04890ce540084f2a0d25988528e60564e131e93345bf32a461ea35b3f9269c2024bae44878d16c36a315ba462ac7b2cbc84269c20851547793fc2d1e70af53d5a4b7011d067b56354dfb333318f", @typed={0x48, 0x81, @binary="61578a4194b4f5a2b4024a4e406f7226a5de6d2e64035ac217e764ab8e256c4e8f02d1a3e59423c83ac9c4017c36e166d7958f1fccc313cdd165dadaceb93e6f93a8a05a"}]}, @typed={0x8, 0x1b, @fd=r16}, @typed={0x8, 0x4f, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x204, 0x2f, [@typed={0x60, 0x76, @binary="9fa49f0267fac113431a7f78f9d9ca7cab8756b92837bcdba0682da54039acc51ab5e436611a83da4c4db3c98310c447fc8e75dc8dabb7ae339b8730d21f2d74a7bb4790c9ef75519c82dd28393042c1188e89823b1556d4a3b7be75"}, @generic="9641b8aa14294995800b436b7ce3d117c79e72208cbf45643e3c3be9c6b021e8cfe1c2869df475a353abd003eecd3e35c91145a778a619c65157c9d595adb0c621daf091c7ccc5896811f40aa947c42b9013a3d94e", @generic="4bfe2740c1af6865e97b5d211f553b3b0ca1c2b0f5304ff82e3cd6808ea2f3ddeab0bbbe4cb7ec386ca815c4c31bdb62c519a892fa494956b408074621cb7d01cc1fbbb928e35e792fa30d05be67990c5cd21ec74881e841822b3327f2c7d5376a211db2dcc5503668913b63c6825985ba0cc3abcd0e355dcec64bd4b47ea0d9e0ff673bc763c7ef8d5d9a8b3bd691a7eb132701a16c66599d1ef6de34cf53b14310f71ecca2dc40aeb586d86ba7fd9f989d2e09b739f8cd601a1b31f99d", @generic="6dafc2deff4ecdccae6d18cf4b", @typed={0xc, 0x49, @u64=0x7}, @generic="b212e688f541c3d34598899cbe7240dc21ce3554f0d1a4e0cca92d2837b3c09155dc8888994c0d8d21a057f87707e8aa1323fcafd5dd59075f8c1014b6f5bc3a9b3be256c7f06b11dc52172f3b10fa7aa165ad48f2e422efc0f7c157b4ba5e5a9d638c13b268f988bd3df3490c1dba1973b988"]}]}, 0x15e8}, {&(0x7f00000027c0)={0x1018, 0x34, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@generic="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", @generic="8488b41257"]}, 0x1018}, {&(0x7f0000000180)={0x24, 0x3e, 0xa4381e0190d78392, 0x70bd28, 0x25dfdbfb, "", [@typed={0x10, 0x39, @str='net/packet\x00'}, @typed={0x4, 0x23}]}, 0x24}], 0x4, &(0x7f0000000680)=[@rights={{0x28, 0x1, 0x1, [r17, r18, r19, r20, r1, r21]}}, @cred={{0x1c, 0x1, 0x2, {r0, r22, r23}}}, @rights={{0x30, 0x1, 0x1, [r24, r25, r4, 0xffffffffffffffff, r26, 0xffffffffffffffff, r2, r1]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r2, r27, r2, 0xffffffffffffffff, r28]}}], 0xb0, 0x20000080}, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xffad, &(0x7f0000000c40)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x6) r29 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r30, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r31, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r31, @ANYBLOB="1000060000000000260000000000000041be729a05a1d47b154897ac25dab91d6d04ec87969acafe21c61fe9bc430cdbc30b53e7355c6a4ea39170a7db73d9a58fcf43456929ca0c6af2239d55a090a134e1715c8b016d2711f8b78565c99be2c3bac0b51ab0253c3f58600569b241b3a00bdbfefb08f433d4680e"], 0x34, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], &(0x7f0000000280)=""/148, 0x0, 0x94}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") ioctl$VT_SETMODE(r6, 0x5602, &(0x7f0000000140)={0x7ff, 0x0, 0x9, 0x8000, 0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 13:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xfffff000}, 0x14}}, 0x0) 13:35:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0x0, "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"}}}, 0x128) 13:35:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x541b, 0x0) 13:35:08 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(0x0, 0xe000000000000, 0x200040) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x1, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x1, 0xd96e}, &(0x7f0000000280)=0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000000300), 0x0, 0x4, 0x0, 0x0) 13:35:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0x36a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0xfb55f50160f0b4f0, @bt={0x2, 0x2, 0x0, 0x0, 0xe9, 0x2, 0x3800000, 0x8, 0x9, 0x8, 0x3, 0x7f, 0xffffffff, 0x3, 0x1, 0x14}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) r9 = geteuid() r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000300)="13ad8377594f85fee14c5cf6ea85f7569a1e80dae089b1b7bfc66319b6b52472b875e0678e816828535064d43d33513c69f16ccdbc82438ae6ced7aa7ee92a01593b2b6e0bf92baf41f1bc38576ff4c25fe0e3e8b5fc2cc0076c8eacf49c083f35d6fc8a3d05c9d7ecc7ed0c5248e7c1e9f25cb8879ca28d7452f6ddde8bf98e69384fc61876043b0ce699a7f665e49a7830114fa0ea3276be6f0906871aa0c05a9ee170b46110d362402c72d83b72f8f9c1b5080f053c1454", 0xb9, 0x377}, {&(0x7f00000003c0)="376480fb84ba72e53d11859cc1925cc346ead2e83f9ed57327098e5b4136a0996268a7dd91f4e47df45fb0f1e0573c6958995f06e068559d7abedb98b425367839df81c4433df4f5d45dbcc604effe48431b8de8fad2c82f47d7610cd0cb409c32b71dc35da23bfafc25cd18c5835fa4bf171d54c9a9fb54356cf04a03a7aa78bbe760421a7d2a4f1f65a303bd39ed867887f866e3ea558e0dee0bf9fba4173ff92fb61192400a2ff89fa9f9d6e6db0c431e395737b2a4e9f984740a2a24e86552d045733bd49acf62a59cdc7aceac4293d3320b5c29c0d12a300b31100dbf38f7c07a9951ba8f8d", 0xe8, 0x1}], 0x20, &(0x7f0000000640)={[{@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'iso8859-7'}}, {@uid={'uid', 0x3d, r3}}, {@part={'part', 0x3d, 0x200}}, {@nls={'nls', 0x3d, 'ascii'}}, {@umask={'umask', 0x3d, 0x800}}, {@nodecompose='nodecompose'}, {@uid={'uid', 0x3d, r5}}], [{@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/cec#\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '((\\'}}, {@euid_gt={'euid>', r9}}, {@smackfshat={'smackfshat'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r11}}]}) r12 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(r12) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4(r13, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) 13:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xffffff7f}, 0x14}}, 0x0) 13:35:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:35:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x5421, 0x0) [ 1880.609259] Bluetooth: hci0: command 0x1003 tx timeout [ 1880.614699] Bluetooth: hci0: sending frame failed (-49) [ 1882.689204] Bluetooth: hci0: command 0x1001 tx timeout [ 1882.694634] Bluetooth: hci0: sending frame failed (-49) [ 1884.769260] Bluetooth: hci0: command 0x1009 tx timeout 13:35:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d) 13:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xffffff9e}, 0x14}}, 0x0) 13:35:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x5, 0x0, "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"}}}, 0x128) 13:35:18 executing program 4: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@discard_size={'discard'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}) syz_read_part_table(0x5ce, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="5f1cc9ddee143666e67bdeadf313e72e3109f72644e2e7d6d9efb857a2c528fad926ec39", 0x24, 0x6}]) r0 = syz_open_dev$mice(&(0x7f0000000200)='/t\xe5v/ynput/MiIe\x14', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x8, &(0x7f0000001740)=[{&(0x7f0000000240)="59c684fd62bd2622f680cd65090328d5006d10fbfb9977f5c62f907351825abed97780e4800064745fa56b33e9ad9c43d7da5e863aba4d58eb2dfb2f94b2e09e584666fb6f1965eff92195d623db8909d129943262bfbbecceb14b1dd749fd2d41b407359445414e793c5cf238be1c59b871e0f83561f5a89d7bfc944602d58511b7964df7197c6a417c0e432b6ef467a389ffe3b8aa1cb9f7ee86bc6edce41bcc4f6614763e6c029711fa2d01b0821f8d562c91c791488077964a1e2d6e53a44afc552490d68364b81daa27f986a58b80a8baee489a84060a971275cb01", 0xde, 0x7}, {&(0x7f0000000340)="6c607c70ca24cdb216307e849255b7fa427beb49894df0051134e807606f0671d5917c9b8794b418de01a4f9901bae0f163349926e6afec49e9a3b3230fe78ef35c0e78cfae24f7437e53bdb8f4847198c0de25265f8fb0f577f98d13caf3223f2471e2ea594977193", 0x69, 0x2}, {&(0x7f00000003c0)="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", 0xfd, 0x2}, {&(0x7f00000004c0)="ddb4d7f467722979a9030f8e24fdbed8ee44dc7bc57f38f20282c5a7413d0d9db6ad749d517f551ec3bf1d0a369f54b3df0c42d36c6baa2d1e252778f4825f0ad2fe19a69b293e03c3e715690a89d8c6faf0c6d606681a6b4ebbc1f91920a928a4c004a33fd79566739815263a527490183bd46f74e94509a8f6ddb0291b3ee03ad849a0896a1c584b9e8edc88f357", 0x8f, 0x6}, {&(0x7f0000000600)="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", 0x1000, 0x7}, {&(0x7f0000001600)="ce6e0e0f410be55e77a0509da374d5b72bc1d840c34417686b291795a9c3692e6092b18c4a147eede25b", 0x2a, 0x1}, {&(0x7f0000001640)="e4be90fdabc836cc4ab63a8bbfdb4f3ae5d594ba92077375573843cf59625d381ca616b324d5bbfe46395d7bd29a7678991ea1f19c3b5d3a7b370adfd6666f616468b238", 0x44, 0xff}, {&(0x7f00000016c0)="08fb7a0e0f1942081c7c22366edceb1c3bf0863837e185b520cbe753db702b413082675923d2b9c21af042011a8b165416c0990e3b040f748b0105567b65c1be5b816b2db9281952e03673560d50a05c6e7e849e69a9ce5f4b384e1b304599cd124c4cabf3928d12ae25f2d12acde31545beaca5da3e26c9fd9a2fbf3882dcd1", 0x80, 0x6}], 0x2010, &(0x7f0000001800)={[{@umask={'umask', 0x3d, 0x3f}}, {@file_umask={'file_umask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'iocharset'}}]}) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:35:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x5450, 0x0) 13:35:18 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00f31d88f028cb7873ff0100"/22], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001fa0000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0) 13:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xfffffff0}, 0x14}}, 0x0) 13:35:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x5ad) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000100)={0x0, 0x9, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) splice(r0, &(0x7f0000000000)=0x7, r2, &(0x7f0000000040)=0x2, 0x200, 0xa) 13:35:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:35:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x5451, 0x0) 13:35:18 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = gettid() r6 = gettid() sendmmsg$unix(r4, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x70}], 0xfd, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r6, 0x12) sched_getaffinity(r6, 0x8, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x80000003) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000200)={{0xffff, 0x99b, 0x8}, 'syz0\x00'}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000000640), 0x10000011b) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) close(r9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000100)) bind$inet(r10, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0xffffffff}, 0x14}}, 0x0) [ 1890.849103] Bluetooth: hci0: command 0x1003 tx timeout [ 1890.854655] Bluetooth: hci0: sending frame failed (-49) [ 1892.929195] Bluetooth: hci0: command 0x1001 tx timeout [ 1892.935036] Bluetooth: hci0: sending frame failed (-49) [ 1895.009138] Bluetooth: hci0: command 0x1009 tx timeout 13:35:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf00) 13:35:28 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x60, 0x0, "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"}}}, 0x128) 13:35:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 13:35:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:35:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x5452, 0x0) 13:35:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000100)) 13:35:28 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 13:35:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}}, 0x0) 13:35:29 executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/80) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 13:35:29 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0xfffffffb}]}) msgsnd(0x0, &(0x7f0000000040)={0x2}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/135}, 0x8f, 0x0, 0x0) 13:35:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0xc0, 0x0, "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"}}}, 0x128) 13:35:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x2}}, 0x14}}, 0x0) [ 1899.264017] audit: type=1326 audit(1573479329.153:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8820 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 1900.041212] audit: type=1326 audit(1573479329.933:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8820 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 1901.089196] Bluetooth: hci0: command 0x1003 tx timeout [ 1901.095945] Bluetooth: hci0: sending frame failed (-49) [ 1903.169187] Bluetooth: hci0: command 0x1001 tx timeout [ 1903.175926] Bluetooth: hci0: sending frame failed (-49) [ 1905.249194] Bluetooth: hci0: command 0x1009 tx timeout 13:35:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d00) 13:35:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x5460, 0x0) 13:35:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x4}}, 0x14}}, 0x0) 13:35:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x300, 0x0, "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"}}}, 0x128) 13:35:39 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x9001) 13:35:39 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) munmap(&(0x7f00002c4000/0x2000)=nil, 0x2000) madvise(&(0x7f00003ec000/0x400000)=nil, 0x400000, 0x1000000000015) 13:35:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0xa}}, 0x14}}, 0x0) 13:35:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x500, 0x0, "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"}}}, 0x128) [ 1909.265923] audit: type=1804 audit(1573479339.143:391): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir697549990/syzkaller.fs6kms/326/bus" dev="sda1" ino=16742 res=1 13:35:39 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0xfffffffb}]}) mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ff3000/0x2000)=nil) 13:35:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x1e, &(0x7f0000000000)) 13:35:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x40049409, 0x0) [ 1909.386769] audit: type=1804 audit(1573479339.203:392): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir697549990/syzkaller.fs6kms/326/bus" dev="sda1" ino=16742 res=1 13:35:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0xe}}, 0x14}}, 0x0) [ 1909.509891] audit: type=1326 audit(1573479339.383:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9064 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 1910.284272] audit: type=1326 audit(1573479340.173:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9064 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 1911.409205] Bluetooth: hci0: command 0x1003 tx timeout [ 1911.414649] Bluetooth: hci0: sending frame failed (-49) [ 1913.489133] Bluetooth: hci0: command 0x1001 tx timeout [ 1913.494683] Bluetooth: hci0: sending frame failed (-49) [ 1915.569203] Bluetooth: hci0: command 0x1009 tx timeout 13:35:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3f00) 13:35:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x600, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0xf}}, 0x14}}, 0x0) 13:35:49 executing program 2: r0 = socket(0x10, 0x400000000080803, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 13:35:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 13:35:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8482) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) rmdir(0x0) capset(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x8000000, 0x8, 0xe6}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000003c0)=""/238) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f00000000c0)={{0x7, 0x0, @reserved="95b15c9021484cf4df25595a290598e075888bc204b501e168d18fcadf31e2ff"}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0xa649, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1919.471641] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:35:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x4000, 0x0, "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"}}}, 0x128) 13:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x60}}, 0x14}}, 0x0) [ 1919.539585] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1919.573000] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1919.655164] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.2'. 13:35:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 13:35:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x7d, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x12) 13:35:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x4, 0x7, "47834807aab9"}}) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000005c0), 0x4) 13:35:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x6000, 0x0, "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"}}}, 0x128) [ 1921.569235] Bluetooth: hci0: command 0x1003 tx timeout [ 1921.574763] Bluetooth: hci0: sending frame failed (-49) [ 1923.649291] Bluetooth: hci0: command 0x1001 tx timeout [ 1923.654812] Bluetooth: hci0: sending frame failed (-49) [ 1925.729119] Bluetooth: hci0: command 0x1009 tx timeout 13:35:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000) 13:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}}, 0x0) 13:35:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 13:35:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4}, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000002c0)) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24048001) clock_gettime(0x0, 0x0) utimes(&(0x7f0000000340)='./bus\x00', &(0x7f0000000400)={{}, {0x77359400}}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f00000002c0)) accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14, 0x40800) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000500)='gretap0\x00', 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socket$inet6_tcp(0xa, 0x1, 0x0) 13:35:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0xc000, 0x0, "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"}}}, 0x128) 13:35:59 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) read(r1, 0x0, 0x600) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) read(0xffffffffffffffff, 0x0, 0x600) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) read(r2, 0x0, 0x600) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x8) read(r3, 0x0, 0x600) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) read(r7, 0x0, 0x600) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x2) read(r8, 0x0, 0x600) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) read(r9, 0x0, 0x600) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x4) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r11 = socket$inet(0x10, 0x3, 0xc) sendmsg(r11, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0xfffffffffffffef8, &(0x7f0000000300)=[{&(0x7f00000000c0)="240000000007070b15fffd946fa2830020ff87200a0009210100041d85680c1baba20400ff7e", 0x26}], 0x1000000000000146}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x0) execveat(r0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') futex(0x0, 0x0, 0x1, 0x0, &(0x7f0000000240), 0x0) read(0xffffffffffffffff, 0x0, 0x600) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e23, @local}}) [ 1929.729135] protocol 88fb is buggy, dev hsr_slave_0 [ 1929.734350] protocol 88fb is buggy, dev hsr_slave_1 [ 1929.739537] protocol 88fb is buggy, dev hsr_slave_0 [ 1929.744627] protocol 88fb is buggy, dev hsr_slave_1 13:35:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x1000000, 0x0, "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"}}}, 0x128) [ 1929.780270] audit: type=1800 audit(1573479359.673:395): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16948 res=0 13:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x0) 13:35:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x40087602, 0x0) 13:35:59 executing program 2: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x32202) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x30, 0x80, 0x6}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r4, 0x10003}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x2}, 0x8) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f00000004c0)={0x4, 0x8000, 0x2, 0x2, [], [], [], 0x0, 0xc00, 0x99, 0x1, "bb0541eb41f1e12ff5a10e3208fdd4c4"}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000100000000000de4319c12e05c89a80e709af25c9b2e39e8f7dc92af6f716a37351fb82a0f4620000000000000000b48fcfaa4490f02d453db7b4a49cf9dec99708000000b78b2db80f0925a2d39397355701fa91d2e6421529c8871cb05f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e21, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r8 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000600)={0x1, 0x5c2}, 0x8) 13:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x0) 13:35:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x2000000, 0x0, "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"}}}, 0x128) [ 1930.235734] IPVS: ftp: loaded support on port[0] = 21 [ 1930.449106] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.454295] protocol 88fb is buggy, dev hsr_slave_1 [ 1931.809057] Bluetooth: hci0: command 0x1003 tx timeout [ 1931.814464] Bluetooth: hci0: sending frame failed (-49) [ 1933.889131] Bluetooth: hci0: command 0x1001 tx timeout [ 1933.894601] Bluetooth: hci0: sending frame failed (-49) [ 1935.969475] Bluetooth: hci0: command 0x1009 tx timeout 13:36:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8000a0) 13:36:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}}, 0x0) 13:36:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x3000000, 0x0, "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"}}}, 0x128) 13:36:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 13:36:09 executing program 2: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000580)=@req={0x7, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x4, 0x4, 0x4, 0x5, 0x8, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000600)={0xa0, 0x0, 0x3, {{0x5, 0x0, 0x5, 0x6, 0x0, 0x0, {0x6, 0x8, 0x200, 0x8, 0x7, 0xfffffffffffffd18, 0x8, 0x57ed, 0x5, 0x2, 0x7d01, r2, r3, 0x0, 0x8001}}, {0x0, 0xe2a2a120443cdcf6}}}, 0xa0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000240)=0x4) r4 = memfd_create(0x0, 0x0) sendfile(r4, r4, &(0x7f0000000440), 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000002c0)={{0x0, 0x0, @identifier="9a9c77a79316077b2ec9a6a3a55359fd"}}) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) r7 = syz_open_procfs(r6, 0x0) r8 = creat(0x0, 0xd8) r9 = creat(0x0, 0xd8) close(r9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000280)={0x8001, 0x2, 0x1, 0x2, 0x0, 0x9, 0x5d, 0xb, 0x0}, &(0x7f00000005c0)=0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000003c0)={r10, 0x7fff, 0x11, 0x0, 0xc, 0x3}, 0x14) r11 = open$dir(0x0, 0x0, 0x0) mkdirat(r11, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r11, &(0x7f0000000380)='./file1/file0\x00', 0x0) renameat2(r11, &(0x7f0000000000)='./file1/file0\x00', r11, &(0x7f00000001c0)='./file0\x00', 0x2) r12 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x8001, 0x0) accept$inet(r12, 0x0, 0x0) 13:36:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000000)) r4 = getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) 13:36:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xe}}, 0x14}}, 0x0) 13:36:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x4000000, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:36:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) close(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') accept4$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0xde) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r1}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01010000000000000000626c637202120000000000000000000000000000be02000000000000003ba32cc5c5ebf179ea189dd9bc8f8f22bde8b96f2c4f5ae493b67d9608ee960d"], 0x24}}, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x200001, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000440)=0x20407, 0x4) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000c40)={&(0x7f0000000700), 0xc, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000f1ff0000000000000f000000"]}}, 0x4000000) r10 = accept$alg(r0, 0x0, 0x0) dup(r10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380), 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') close(r11) ioctl$TIOCMBIS(r11, 0x5416, &(0x7f0000000900)=0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x44, 0xbb, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 13:36:10 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x67, "9dddb4e3b3f3dde92d968db7127d47897ac423f3262024317f67b1724fbb4e9fed0c5f5d4dc1f69433bee72d7edce22336868efd29dc63fc44ec6e6fd6cf65cca3d43070d653a6c71c6a31842a936a6b513047881d95627d75171756c3a9b0edb9d98821c9076a"}, &(0x7f0000000100)=0x8b) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0x80000001, 0x4) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000300)="dcc1d5de5916354ee70e28520bfecfc8c1cddc21891c913c1c304cb14999e2f0a13c33c74acf30758540333d0f29ea6a052a51c7b7348abbdc3d94a98bb9ad27c7b8b30db4e2a636facce83de3a9505add8be60ec2f6d6c44d1f6c2788a1e11d36dc843963b382e76755aa1a1f2de416fb11977c1eb4dcd9b0bf77b50c553989db849155cbde5277ca3157d4750ab35e1fa67f0d073b454de605969c714a5bb7a6650f5a54a46e419715ebe853707dd1400577e8fd4d5172a63ed53f1090b52b21c84493afdb351e443a19d71fc65ce673477a8625167511938cc1381915efc1eb2550e0f93f48d0da500d52fcdd2e", 0xef, 0x100}]) 13:36:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xf}}, 0x14}}, 0x0) [ 1942.049140] Bluetooth: hci0: command 0x1003 tx timeout [ 1942.054678] Bluetooth: hci0: sending frame failed (-49) [ 1944.129232] Bluetooth: hci0: command 0x1001 tx timeout [ 1944.134666] Bluetooth: hci0: sending frame failed (-49) [ 1946.209166] Bluetooth: hci0: command 0x1009 tx timeout 13:36:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1000000) 13:36:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x5000000, 0x0, "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"}}}, 0x128) 13:36:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) fchdir(r0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="fd96c987"}, {&(0x7f0000000280)="e4df5c81ce6a993cc3a0185d2d6a4571d96f63bf54190acb1dbe301ddc12027c6e82f455aa04709b7bc4ae8de84801e5746649289ffead177b6199f554f000bf23ad25c264cdd68fc1869ca385dd5c0f2dd496813c203e500156e2ad81d6003d352cc0d758e760d191cfbb89cbeee33d95fb38adb93433183590bf40eb3cfd5a164c4274a98f8ac5c6ed75f83dcc6fc3419e16f5b3feab63d35a6f7572489bd9f91cb7f5c87a7992eb7a86bfa82e2f5073f6ffa9f21f000000000000000000"}, {&(0x7f00000001c0)="8f8420c67e00ddc0319d9af3f54552157e7351d7e2ba2bc03436ee2a841efe0932a492229510c08d8b97da27b61cb71730e3da829bfb4369b57af1265b42b64e1c4c4fde4daaf7d5450bed160b3d990b046c9efbf229fcee7cf28e90234c95fd11fc70f911c345"}], 0x32d) 13:36:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x60}}, 0x14}}, 0x0) 13:36:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 13:36:20 executing program 4: prlimit64(0x0, 0xc, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6(0xa, 0x400000000001, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, 0x0) r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000100)={0x200, "ec6ad87a1d2bf0805b95e4ac012b727c8280b2ae8a3965a1f1fb1dd48cf6f0d9"}) lstat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = socket(0x8, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) socket(0x10, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x20000, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x800) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)=0xffffffffffffff87) lsetxattr$security_smack_transmute(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) 13:36:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xf0}}, 0x14}}, 0x0) 13:36:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x6000000, 0x0, "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"}}}, 0x128) 13:36:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfa, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 13:36:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 13:36:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa00}}, 0x14}}, 0x0) 13:36:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x40000000, 0x0, "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"}}}, 0x128) [ 1952.299130] Bluetooth: hci0: command 0x1003 tx timeout [ 1952.304588] Bluetooth: hci0: sending frame failed (-49) [ 1954.369167] Bluetooth: hci0: command 0x1001 tx timeout [ 1954.374596] Bluetooth: hci0: sending frame failed (-49) [ 1956.449147] Bluetooth: hci0: command 0x1009 tx timeout 13:36:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000805, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0xfffe, @loopback}, 0x10) open(0x0, 0x141042, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0xf4, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r7, r6) ioctl$KVM_S390_UCAS_MAP(r6, 0x4018ae50, &(0x7f0000000000)={0x100, 0x0, 0x8}) personality(0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:36:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf000000) 13:36:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xe00}}, 0x14}}, 0x0) 13:36:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 13:36:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x60000000, 0x0, "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"}}}, 0x128) 13:36:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe86e963bd80bd1de, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="2720d56f", 0x4}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) pipe(&(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x2000007fffffff, 0x42200) flistxattr(0xffffffffffffffff, 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, &(0x7f00000004c0)={0x11, 0xec, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) socket$inet6(0xa, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) socket(0x0, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$getown(r3, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000680)={{0x4, 0x7, 0xffffffc1, 0xffff, 'syz1\x00', 0x3}, 0x3, 0x4, 0x0, r7, 0x8, 0x6, 'syz1\x00', &(0x7f0000000040)=['.em0.\x00', './cgroup.cpu/syz1\x00', '/dev/media#\x00', '\x00', '/dev/media#\x00', '\x00', '\x00', 'eth0\x00'], 0x38, [], [0x8, 0xffff, 0x3, 0x1]}) 13:36:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xec0}}, 0x14}}, 0x0) 13:36:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0xc0000000, 0x0, "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"}}}, 0x128) 13:36:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 13:36:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:36:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xf00}}, 0x14}}, 0x0) 13:36:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x62, @empty, 0x4e20, 0x1, 'rr\x00', 0x0, 0xff, 0x63}, 0x2c) sendto$inet(r2, &(0x7f0000000080)="8a8fe78d5e56e7d3f08f076076cc65c22fccb54a873d7a9f5a6618c7c2e099777e87a7ad9d836f3149c809b0cb33f36c53e117dc54b3734780a5e53e5b4ee6a4decead9842af878ae18c8d6bbf1b6f769a6e628ca3edfceb533803539ea52b0e48125f2adcc85af0bf3b7599e9126dda49e4082b9f7a39b278374dfb81289609df2c2fbb5220e2435c89cd", 0xfffffffffffffc6f, 0x24040804, &(0x7f00006f7000)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x8000, 0x0) 13:36:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x80086601, 0x0) [ 1962.619129] Bluetooth: hci0: command 0x1003 tx timeout [ 1962.624615] Bluetooth: hci0: sending frame failed (-49) [ 1964.699250] Bluetooth: hci0: command 0x1001 tx timeout [ 1964.704688] Bluetooth: hci0: sending frame failed (-49) [ 1966.769213] Bluetooth: hci0: command 0x1009 tx timeout 13:36:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d000000) 13:36:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x2, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:36:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x13aa}}, 0x14}}, 0x0) 13:36:40 executing program 2: mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) socket(0x0, 0x0, 0xc) write(0xffffffffffffffff, &(0x7f00000012c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x4c, 0x0, 0x0, 0xfffffe65) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') syz_open_dev$midi(0x0, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200100, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r7, 0x400, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x91b, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc8dc}, 0x848) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', 0x0, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6e26cab450786d95}, 0x200000000, 0x80000000000003, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:36:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x80087601, 0x0) 13:36:40 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xc26) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000201e600020010001ff8", 0x16}], 0x0, 0x0) 13:36:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4000}}, 0x14}}, 0x0) 13:36:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x3, "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"}}}, 0x128) 13:36:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 13:36:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x1, &(0x7f0000000040)=0x400, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13:36:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6000}}, 0x14}}, 0x0) 13:36:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dm\x00\x00\x00\x00\x00\x00\x00\x00\x00]\x00', 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCPKT(r1, 0x80004506, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) inotify_init1(0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x0, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {0x0, r6, 0x1}}, 0x18) [ 1971.082815] audit: type=1400 audit(1573479400.973:396): avc: denied { set_context_mgr } for pid=10485 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1971.146468] audit: type=1400 audit(1573479401.033:397): avc: denied { call } for pid=10485 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1971.146753] binder_alloc: 10485: binder_alloc_buf, no vma [ 1972.849229] Bluetooth: hci0: command 0x1003 tx timeout [ 1972.854649] Bluetooth: hci0: sending frame failed (-49) [ 1974.929228] Bluetooth: hci0: command 0x1001 tx timeout [ 1974.934665] Bluetooth: hci0: sending frame failed (-49) [ 1977.019246] Bluetooth: hci0: command 0x1009 tx timeout 13:36:50 executing program 2: syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) close(r0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000005c0)=ANY=[], 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 13:36:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x4, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:36:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xaa13}}, 0x14}}, 0x0) 13:36:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3f000000) 13:36:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 13:36:50 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x171) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x920020}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, 0x0) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'teql0\x00', r6}) 13:36:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x5, "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"}}}, 0x128) 13:36:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 13:36:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xc00e}}, 0x14}}, 0x0) [ 1981.098236] IPVS: ftp: loaded support on port[0] = 21 13:36:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xf000}}, 0x14}}, 0x0) 13:36:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x6, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:36:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 13:36:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000050727bd7000000000000092e1ff", @ANYRES32, @ANYBLOB="10080000000000000800030000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="b21f3c6447050567cca581e718e6acbdc4c9167f5eae1b1a6c0b7ebfff2528252f59b0fdf5e23c9089a494c1a547b3d03ad2ee07a7f1fb55aa07527fb1b271af2c61ba361b7147f35c527143b567d4d763969555142b016449ff5eb509859eb0497fbcdf3f9e20f4069e400ec9102b12a1d87035a893589a61b1707b9b75d5c40fdb7fee8349750917"], 0x50}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000080)={{0x1, 0x0, @reserved="9023fe8e6f7a7b31508ef709e024eebecb04478c243f86407fca567210735bcd"}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}}, 0x0) 13:36:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x60, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) [ 1982.808649] device veth8 entered promiscuous mode [ 1983.009162] Bluetooth: hci0: command 0x1003 tx timeout [ 1983.014565] Bluetooth: hci0: sending frame failed (-49) [ 1985.089194] Bluetooth: hci0: command 0x1001 tx timeout [ 1985.094648] Bluetooth: hci0: sending frame failed (-49) [ 1987.169162] Bluetooth: hci0: command 0x1009 tx timeout 13:37:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x40000000) 13:37:01 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000100013070000000000000000e0000002000000000000000000000000000000000000000000000000000000010000000000000000000000000000001c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000004d332000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000000000000"], 0xf0}}, 0x0) 13:37:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 13:37:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0xf}}, 0x0) 13:37:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0xc0, "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"}}}, 0x128) 13:37:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000080)=ANY=[]) 13:37:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0xc0}}, 0x0) 13:37:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff6e) unshare(0x73bc832d515f4001) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x8, 0x4) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x80003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000340)={0x25, &(0x7f00000003c0)="153d838a0d2d21db142a67853d24e908af5e4c1b8fb0f10891531016735f62d2e51cecabb0eba7c6651c7d4dd2e7d8c46b8e47dadb5ef84a1b07d316c9aae40967dbd5939d91b4c4572d862128f06c3c0605c30de79e7068f288677e09866361a072096f9ba3c403de0207cc57baf8b20503092a973e2d820a7dbd03b81d9f2f1639e6339acafdba0ea3ae8094f5c92a07750146577a05959bf25daffa6e089a38d992e8cabd00df1295428b4176bd37744d9749c02ecd2cb7fb68438ab0d38bea7f5d59a69380f8a3b34bf9a107d27c0038e03213b188337fd665da0bb1bbef3b69397a10e2c5aa390ff8ec6e"}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0xffffffff, 0x7ff}, 0xc) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0xf}, 0x1df}, r5}}, 0x30) sendmsg(r1, &(0x7f0000000380)={0x0, 0x320, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000", 0x24}], 0x1}, 0x0) 13:37:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x300, "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"}}}, 0x128) 13:37:01 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000029093f4fd05a7c6c666650503130f98ad4fa9efb218587273336ee8cf0e6d321e042796cf81db1563b21198c70eba82c4f00ad6404"], 0x4) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) r2 = add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="b50f926d5b64ff92451f510f324bfaac83830b677149c80b3853433c6f7273179eab4c61d5f7475804f3d40fc232d880db43886fc14fbdde8d69513931110dc2a319d75545b5ea57f3443028826910dab16fc108357593d8675803a35730faac1fc38d7ac98642ba68249012d1435738630fc97f30e64dc34dd03945e4a5722e53262f4b8b2b04737055d5e813129e7b15447a2834923e54146d6baee10f0c6ad2ec6a976872ba0719559b79407068c1420612ea6c278a781836ccf6d234b76404767c57b9408ff8119d10d44b1a45bc3587124887b7", 0xd6, 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="25a4779481c17af2a5d331a53fe6cd8637b298fef93cc34eeee114bcf1cedb06cc08005b11eed3c38d294533c42337f1db85db65897cff00000000000000007317046a00000000", 0xffffffffffffff27, r2) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) getpeername$packet(r5, &(0x7f0000000300), &(0x7f0000000340)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f0000000040), 0x0}, 0x20) r6 = dup(r5) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x0, 0x1, 0x3}}, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, &(0x7f0000000040), 0x0}, 0x20) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) 13:37:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 13:37:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0xec0}}, 0x0) [ 1993.249127] Bluetooth: hci0: command 0x1003 tx timeout [ 1993.254555] Bluetooth: hci0: sending frame failed (-49) [ 1995.013382] device gretap0 left promiscuous mode [ 1995.018226] bridge0: port 3(gretap0) entered disabled state [ 1995.329216] Bluetooth: hci0: command 0x1001 tx timeout [ 1995.334645] Bluetooth: hci0: sending frame failed (-49) [ 1995.454768] device bridge_slave_1 left promiscuous mode [ 1995.460644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.510530] device bridge_slave_0 left promiscuous mode [ 1995.516162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.409096] Bluetooth: hci0: command 0x1009 tx timeout [ 1999.126195] bond3 (unregistering): Released all slaves [ 1999.372249] bond2 (unregistering): Released all slaves [ 1999.384113] bond1 (unregistering): Released all slaves [ 1999.432542] device hsr_slave_1 left promiscuous mode [ 1999.503094] device hsr_slave_0 left promiscuous mode [ 1999.554351] team0 (unregistering): Port device team_slave_1 removed [ 1999.565387] team0 (unregistering): Port device team_slave_0 removed [ 1999.577502] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1999.614376] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1999.685684] bond0 (unregistering): Released all slaves 13:37:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xa0008000) 13:37:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x500, "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"}}}, 0x128) 13:37:11 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b18bb51662022f0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x41363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x800000, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x10000026f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x0) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r6 = dup3(r5, r1, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000000c0)="6ebf3137d464a69fd1fd2b61e10c758e0c3e882dbceb54ff75ff4b01ca5663179fd0b6257e0ff317aeefaf87f542d807d0ebaea20cd926765f54a7490ebf06e49f46571e73b5ffef2a0a64a0704dd068f62476871ce5c1d71b34b0bb8c12db5dfd7d97e66642628dab43af3da06a545f8abe5997afbb65447d3cba43c645f7e34f4dfe0274e7044eac88bd46ccfd7b7c6e97aff435d50d3399cccf69f46267885052b41bc6bdd17231851563921cd59dce53435f6403b7fe93fbc83b537134868a333c0c9ef73967f866e93858a7531d3cdd25652b", 0xd5) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1}, 0x3ff}) 13:37:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 13:37:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x33fe0}}, 0x0) 13:37:11 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x880, 0x12) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e20, @loopback}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) quotactl(0x1, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000200)="36a214d5ecb7f7dfeeacb9be828cbe04318455b1862eff962085e0aa54154237d6c43a26160348906c70be344460c475ea7d1c695f81336606bcee004bacca3638201a283e764637a29e1b1937811b06f36cd9d3bc748b7973a9ab0226d1a22a022b21a89ddc7afb865a548b79a8eae10df80e051e68cff2de19363881c674a008653f800d865244b4fd2a87cc48d8ed567cef19aa55bf5feb0bb70f2a934dc8b3ec0a96a4cb00b7d9adf156c65002d2b80392a30adde85fe1dbf76e79d39800") r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000002c0), 0x4) r3 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x6, 0x400) r4 = accept(r3, &(0x7f0000000340)=@un=@abs, &(0x7f00000003c0)=0x80) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/load\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000440)) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000480)) socket$unix(0x1, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$kcm(r4, &(0x7f0000000c80)={&(0x7f0000000640)=@isdn={0x22, 0x8, 0x7, 0x1c}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="e110158426507b4a3d2f0affdc3de2f254", 0x11}, {&(0x7f0000000700)="d87bb61c7c637526561fa20b11", 0xd}, {&(0x7f0000000740)="183b548faceb9a9d09bf84e625bca5c103df7e0e4af65011479efd3a79d3", 0x1e}, {&(0x7f0000000780)="7f9c2c5ca37c38cefb9f435e246ad52682f65611ee9881bc2281eadf44baba163ae273c855305b53320f59734dd955d6b6aa6f60f1f07b1ac6e55bbf611a59f36e29f5f77e02459bf86ca1235901dfcf3ceedf18291f5aa9145b90ae771e344c2a4ca957d10e44e97c682a55ac788361500e8f8fd80a900c6c0aad34fbf85f98c61795866d923561863007ad6644f292925e223f55ad5cd4760a95a37dbff1bb88b9bbed7f66924f26ea382d926d2289a6591f76239d8092c2266c58", 0xbc}, {&(0x7f0000000840)="4eca7675671fa26dfdfa08e23be43b372dc32cf645c48a5e8a55e6ccd3616e5113f7e3850f5b7cab5fd7e617ab1a5254", 0x30}, {&(0x7f0000000880)="a6d461e8c525d6085cd37c3994daae343d6d3502082072314a022dbf1c07604a9de335506d8f944ba1151728fd783060deb6f3c98fef35f51aeb8ff1482d96da643c79f45877c79dc3e5dfb540937497e07e6a25a40c2db54054f951a322eb12686db9d0a62b9ec798fa5b6faf8a0b08204112d3f954dc43fde9c17d4ab8f6d1722b12e2262cae8d2ec25ca317fd0933ef0c002061e6c3648cb21ec4a9cd73a46785cc6b7199aa053222f3e097364762d14185d1b087651f6aeb5e878f1d573335", 0xc1}, {&(0x7f0000000980)="2ee7c1bb600e9d1ed1", 0x9}, {&(0x7f00000009c0)="437d4c7188fd81f2efe062653f18e4bac381bcd6d488c1709863f350b79207721632e364bc085b84790ea9b397889b7e5c2fb2aa57e9cdcf4064b37bbb37776542a538da7369752992ef2af84796c59ce1352f30d63f61", 0x57}, {&(0x7f0000000a40)="17b2e66d83ab87cdee342daa71869f17572500792e4ddd422b191faf92410708ffae0a838125864fd616fe17fbadc3808ba1b81f1182e2d7ce7b6d4209672e13676a0d22bf186f0ce9f19fa1cae126bc653095328162190eda94", 0x5a}, {&(0x7f0000000ac0)="c62241a47b93849b699ac85b6e35583b07007b9cb17acda87994e1fc7c3b27cb1f23eecc78b818f7689be687120669064c298b24d3afd425277bfb60e07bc4e2f5cde20a92d3b969008b07a91cf2aa50ec110c86217f2288b0e71b88dc7ef5072e26ebd8c2fd063079403013f2375ab9c91efea8e5e24af12ab16cdf3f393213f027f7ce9b6e1f41566cdc9545f97ed406fdd2d1d504629196db6643b96c3690e18211ee5a47120c3b0400d79d2ed14843bef6954fdfa99979f04c574cbf82913d5a0185a838f85cb45c39bfd778f796a9ed225a544d", 0xd6}], 0xa}, 0x20000054) r8 = syz_open_dev$vbi(&(0x7f0000000cc0)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_dccp_int(r8, 0x21, 0x5, &(0x7f0000000d00)=0x9, 0x4) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer2\x00', 0x400a1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000d80)) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000dc0)='/selinux/mls\x00', 0x0, 0x0) write$apparmor_current(r10, &(0x7f0000000e00)=@profile={'stack ', 'ppp1)eth0\x00'}, 0x10) r11 = syz_open_dev$dspn(&(0x7f0000000e40)='/dev/dsp#\x00', 0x5, 0x800) write$input_event(r11, &(0x7f0000000e80)={{}, 0x5, 0x9, 0x101}, 0x18) r12 = openat$cgroup_ro(r3, &(0x7f0000000ec0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendto$inet(r12, &(0x7f0000000f00)="c2425994e145b0828f70aa98ff0d9c858ce260ebeb11de3f1b2aadc26b373e8fc79e527edc857e5db8c65377f244e5c42dba3934149af1a34f24b9d41428d8cbb6ed297fc2e5762d732bccd0bcc0d7ac26f042e0a7b2464de1e71cb0abd3b014551b060a4c04b41c31d476b9e30fe316c146c6d60da09d168cc49588ce32c2ac05b1feb247ab3801b6410335841e48b016fe6386ae810eb9f0f519f42aead98a02f2bb8d834e63e6dcd71371a24426f819160619f9b15f3d702a50e64f7c2abbcbe1abba807781e9fc56704860c67b74e392cf0c1fda884d925abd9a6cbf4657d00886575bacb49106", 0xe9, 0x8000800, 0x0, 0x0) r13 = syz_open_dev$vcsn(&(0x7f0000001000)='/dev/vcs#\x00', 0x4d6, 0x200) connect$unix(r13, &(0x7f0000001040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x3c) 13:37:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x20000194}}, 0x0) 13:37:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x600, "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"}}}, 0x128) 13:37:11 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNADD(r6, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0xfffffffe}, 0x1c) r7 = socket(0x1e, 0x2000000000000805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r8 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r7, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) 13:37:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 13:37:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x7ffff000}}, 0x0) 13:37:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xe0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x7, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x4, 0xc, 0x0, 0x0, 0x3f, 0x5, "00021956"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x3, @userptr=0x4, 0x80000001}, 0x4}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') creat(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200080}, 0xc, 0x0}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x2d8b33e30576383d, 0x0) getegid() r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x542, 0x0) ioctl$KVM_GET_SREGS(r6, 0x8138ae83, &(0x7f00000002c0)) [ 2003.489188] Bluetooth: hci0: command 0x1003 tx timeout [ 2003.494790] Bluetooth: hci0: sending frame failed (-49) [ 2003.706728] IPVS: ftp: loaded support on port[0] = 21 [ 2003.789235] chnl_net:caif_netlink_parms(): no params data found [ 2003.824351] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.831048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.838187] device bridge_slave_0 entered promiscuous mode [ 2003.845469] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.851996] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.859183] device bridge_slave_1 entered promiscuous mode [ 2003.875708] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2003.885627] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2003.905311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2003.913129] team0: Port device team_slave_0 added [ 2003.919231] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2003.926517] team0: Port device team_slave_1 added [ 2003.932114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2003.939804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2004.001101] device hsr_slave_0 entered promiscuous mode [ 2004.079426] device hsr_slave_1 entered promiscuous mode [ 2004.129974] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2004.137161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2004.154651] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.161246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2004.168909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.175322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2004.208780] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2004.215502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2004.226497] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2004.236342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2004.254599] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.262196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.272608] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2004.282738] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2004.288888] 8021q: adding VLAN 0 to HW filter on device team0 [ 2004.300272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2004.307959] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.314375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2004.330096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2004.337756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.344270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2004.354424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2004.372472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2004.383307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2004.395387] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2004.403148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2004.410939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2004.418632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2004.426960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2004.434990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2004.448884] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2004.458353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2004.465806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2004.476613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2005.570051] Bluetooth: hci0: command 0x1001 tx timeout [ 2005.575488] Bluetooth: hci0: sending frame failed (-49) [ 2007.649185] Bluetooth: hci0: command 0x1009 tx timeout 13:37:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfeffffff) 13:37:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0xfffffdef}}, 0x0) 13:37:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x4000, "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"}}}, 0x128) 13:37:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x2) 13:37:21 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\xa4\x03z\x01', @ifru_flags=0xc}) socket$kcm(0x29, 0x5, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:37:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xe, 0x8e66, 0x81}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x9, 0xffffffff}]}}}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x7ffff000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x81, 0x802) ioctl$KDSETLED(r3, 0x4b32, 0x1) [ 2011.630698] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) 13:37:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x2}, 0x0) [ 2011.702474] Bluetooth: hci0: sending frame failed (-49) [ 2011.729722] protocol 88fb is buggy, dev hsr_slave_0 [ 2011.736144] protocol 88fb is buggy, dev hsr_slave_1 13:37:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x6000, "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"}}}, 0x128) 13:37:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x4}, 0x0) [ 2011.910083] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) 13:37:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0xc000, "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"}}}, 0x128) 13:37:22 executing program 4: 13:37:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x3) [ 2013.729196] Bluetooth: hci0: command 0x1003 tx timeout [ 2013.734620] Bluetooth: hci0: sending frame failed (-49) [ 2015.809130] Bluetooth: hci0: command 0x1001 tx timeout [ 2015.815880] Bluetooth: hci0: sending frame failed (-49) [ 2017.889129] Bluetooth: hci0: command 0x1009 tx timeout 13:37:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffff7f) 13:37:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x8}, 0x0) 13:37:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x1000000, "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"}}}, 0x128) 13:37:31 executing program 4: 13:37:31 executing program 2: 13:37:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x4) 13:37:31 executing program 4: 13:37:31 executing program 2: 13:37:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x300}, 0x0) 13:37:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x2000000, "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"}}}, 0x128) 13:37:31 executing program 2: 13:37:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0xffffff1f}, 0x0) [ 2024.049320] Bluetooth: hci0: command 0x1003 tx timeout [ 2024.054747] Bluetooth: hci0: sending frame failed (-49) [ 2026.129320] Bluetooth: hci0: command 0x1001 tx timeout [ 2026.134757] Bluetooth: hci0: sending frame failed (-49) [ 2028.209355] Bluetooth: hci0: command 0x1009 tx timeout 13:37:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfffffffe) 13:37:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x5) 13:37:41 executing program 4: 13:37:41 executing program 2: 13:37:41 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x3000000, "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"}}}, 0x128) 13:37:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x2}, 0x0) 13:37:42 executing program 2: 13:37:42 executing program 4: 13:37:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x4}, 0x0) 13:37:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x4000000, "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"}}}, 0x128) 13:37:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x6) 13:37:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfdbe) [ 2034.209205] Bluetooth: hci0: command 0x1003 tx timeout [ 2034.214609] Bluetooth: hci0: sending frame failed (-49) [ 2036.289225] Bluetooth: hci0: command 0x1001 tx timeout [ 2036.294660] Bluetooth: hci0: sending frame failed (-49) [ 2038.369179] Bluetooth: hci0: command 0x1009 tx timeout 13:37:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) 13:37:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xa}, 0x0) 13:37:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x5000000, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:37:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x7) 13:37:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x540) sendfile(r1, r2, 0x0, 0x10000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xdb7a3fe83ffecf81) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000003c0)={{0x3, 0x2}, 'port1\x00', 0xaaf0fad9ee2f8160, 0x190014, 0x200, 0xfffffffc, 0xe0c4, 0x3, 0x5, 0x0, 0x2, 0x7fffffff}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x4, 0x2000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x840, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000240)=0x3, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 13:37:52 executing program 4: r0 = memfd_create(&(0x7f0000000040)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\b;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x72c6831c) [ 2042.422971] audit: type=1804 audit(1573479472.303:398): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16870 res=1 13:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xe}, 0x0) 13:37:52 executing program 2: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpid() getpid() openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000240)={0x3f, 0x2, 'client0\x00', 0xab89df094add8f06, "3133ac6da3d38709", "8a60b2328091996043ca9c309b8332584a3741790cf34e842e788c90051876d1", 0xfde8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x98d}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x3, 0x2002) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000003c0)={{0xa, 0x0, 0x0, 0x80000000, 'syz1\x00', 0x6}, 0x2, 0x10, 0x952, r3, 0x2, 0x4, 'syz1\x00', &(0x7f0000000300)=['client0\x00', 'client0\x00'], 0x10, [], [0x7, 0x7, 0x2, 0x792]}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4d0, 0x0, 0x40000084], [0x3a]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000140)={r13, 0x1ff, 0x8}, 0x8) unshare(0x40000000) 13:37:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x6000000, "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"}}}, 0x128) [ 2042.511969] audit: type=1800 audit(1573479472.313:399): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16870 res=0 13:37:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x8) 13:37:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x5000000, "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"}}}, 0x128) [ 2042.818432] IPVS: ftp: loaded support on port[0] = 21 [ 2044.529566] Bluetooth: hci0: command 0x1003 tx timeout [ 2044.534979] Bluetooth: hci0: sending frame failed (-49) [ 2046.609307] Bluetooth: hci0: command 0x1001 tx timeout [ 2046.614746] Bluetooth: hci0: sending frame failed (-49) [ 2048.689255] Bluetooth: hci0: command 0x1009 tx timeout 13:38:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:38:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x40000000, "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"}}}, 0x128) 13:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf}, 0x0) 13:38:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xf) 13:38:02 executing program 4: syz_read_part_table(0x0, 0x289, &(0x7f0000000680)=[{&(0x7f0000000200)="0b0f933adc2598f13e9358c6fb0ffc019bedaac5e66423c68dd9f5ea42893ec879a2e6d46c9afe0e59b831f73e05c44799dd6ba6a7492103a44d358061c81262b4756a1c6a69ee3c8534dcebeb51223ad3c89e9d1420a93da4c50631824f7b682e0a5da426a721d242780610f0fd83460aaf000024c6b8e41f8ad9afc12fee9ef341c282805fb38d1e65f52733880643bf67f55d17618fab12c698", 0x0, 0x3}, {&(0x7f00000002c0)="0e6e4bf769f42fc50ee864ef21a20d7bf44eeba5a9a75e51a84572aff0243b3d13238c472d9d3ae540ac4e4dfafe45ca90a20d70381353096cd82c02d320d39265b6fac5d214e233d4a1b1eab3f94da1bcff1c0154b26957c195b40b416b11de7ffc263e95bcb7d2b3a08926ff885abc8a95f723bc61660347ff96a410e745846fa55910b370588144f7c53ea40d444bf639faf4be3f3a32abfcd30257ea4f6a55aeb6bf3efcf128dbec0ceb51763c4cfa24f912a4ade4c424132539a482b39ce81259eac34d3c", 0xfffffffffffffebb, 0x3}, {&(0x7f00000003c0)="d79b0b943efdfc6940b37d736b361a159b02596126841b1d75e99252c094b9e5e949878b42c4c54a7cf00d5c2de577d9dd4793d558333ca31bfa852e567f5e8079cbe95463a1f8a5a598ce2e04822185b5bea3920431d0fe62ec46e65b439a01cfbdeb83e44fcb13119915b648ae172d984d847d7e48e0fec895bb486ea50c736f773073", 0x0, 0x9}, {&(0x7f0000000480)="4b3b81bd62e413cd1d9141b832b6a6568bf509c4f0d824de0edd1192ef6ef0355e11d8251e1be467ffca910a8b498e1fee93951b21e9cff4bb8864207237625014d843b598a9562f1098fddb4c251de36dd882d0beaf0cd100cc416544ced4ad8ba0f1865c85d086d6499103e3403d8a2023213b3f705d61cf767db051263155619c757a2d27bd70782f3d0b562272abbc782f7eb3f207a900aa", 0x0, 0xaf43}, {&(0x7f0000000540)="5b5365f1f430004b7e59dcf8ae501f4ba27ce4a8f60270e069222b077ed2e78d8ad76f10fb85733a1eaba9be2b88c92b35b6bfc759bc16f0883b9c081549e28d42913f6be397dde97906c1483f4ef1d7958dab9cde0df4f3c460a5d7bf088e263b7ee57b6b64ffa155ed3efe3b", 0x0, 0x3}, {&(0x7f00000005c0)="c33ae917835eebc93be52e002dec486b560bafcdd4af9c84ab0cd76be8ab86756f03a45d95b6664cf167b6eeb34e85ef805a780257851205ff8c3d033966554c11ecaf45a4e7b2977819ede19c2f09f73e62fd1c16817436b29f79e1190f667efa05f36ae7883c21c4330881c4e003bbe02aee09d36b291aa04082be791ef66a6ded7c4588cd6e7fbfcf19cd1e47b65fbfe94479e8479677de6c4933b955775e0499dde50fa26d013252d2d2e78a8e3e92b94fad4a883561b9", 0x0, 0x7}]) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x7e0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) 13:38:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x14, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}}, 0x14}, 0x1, 0xfdffffff00000000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000040)={0x101, "9ec64defb0b48045a83d8533bbb13fbf8862177902a67f9d4e5c2de72ad1541b", 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000300)='vboxnet1cpuset$vmnet1cpuset\x13%\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80010200}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x14c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xd5db}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd05}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcd}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x97}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff00}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="0da514c91929ad3189675e91d66a8f05"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x10000) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) r9 = socket(0x0, 0x0, 0x0) bind$rxrpc(r9, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, [], 0x25}, 0x2}}, 0x24) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 13:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x60}, 0x0) 13:38:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x60000000, "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"}}}, 0x128) 13:38:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x10) 13:38:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0xc0000000, "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"}}}, 0x128) 13:38:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d128dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) [ 2053.039511] loop4: [ICS] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 [ 2053.078063] loop4: partition table partially beyond EOD, truncated [ 2053.099858] loop4: p1 start 4148915726 is beyond EOD, truncated [ 2053.111191] ieee80211 phy17: Failed to add default virtual iface [ 2053.118771] loop4: p2 start 4016367630 is beyond EOD, truncated 13:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf0}, 0x0) [ 2053.158924] loop4: p3 start 2783661812 is beyond EOD, truncated [ 2053.212602] loop4: p4 start 2943501736 is beyond EOD, truncated [ 2053.251985] loop4: p5 start 1200366355 is beyond EOD, truncated [ 2053.273527] loop4: p6 start 1297001536 is beyond EOD, truncated [ 2053.291015] loop4: p7 start 1879941776 is beyond EOD, truncated [ 2053.302522] loop4: p8 start 36493420 is beyond EOD, truncated [ 2053.308578] loop4: p9 start 3321542245 is beyond EOD, truncated [ 2053.320351] loop4: p10 start 3937509844 is beyond EOD, truncated [ 2053.330530] loop4: p11 start 18677692 is beyond EOD, truncated [ 2053.337751] loop4: p12 start 196384193 is beyond EOD, truncated [ 2053.344906] loop4: p13 start 1042742399 is beyond EOD, truncated [ 2053.359424] loop4: p14 start 646553779 is beyond EOD, truncated [ 2053.365528] loop4: p15 start 603428234 is beyond EOD, truncated [ 2053.373020] loop4: p16 start 2761359175 is beyond EOD, truncated [ 2053.387684] loop4: p17 start 274310511 is beyond EOD, truncated [ 2053.394268] loop4: p18 start 1053161284 is beyond EOD, truncated [ 2053.400862] loop4: p19 start 4110039542 is beyond EOD, truncated [ 2053.407788] loop4: p20 start 47447211 is beyond EOD, truncated [ 2053.415237] loop4: p21 start 3216420437 is beyond EOD, truncated [ 2053.422982] loop4: p22 start 3943492827 is beyond EOD, truncated [ 2053.432609] loop4: p23 start 318317818 is beyond EOD, truncated [ 2053.445324] loop4: p24 start 958731044 is beyond EOD, truncated [ 2053.452147] loop4: p25 start 3931706088 is beyond EOD, truncated [ 2054.689124] Bluetooth: hci0: command 0x1003 tx timeout [ 2054.694565] Bluetooth: hci0: sending frame failed (-49) [ 2055.499121] Bluetooth: hci1: command 0x1003 tx timeout [ 2055.504536] Bluetooth: hci1: sending frame failed (-49) [ 2056.769202] Bluetooth: hci0: command 0x1001 tx timeout [ 2056.775824] Bluetooth: hci0: sending frame failed (-49) [ 2057.579319] Bluetooth: hci1: command 0x1001 tx timeout [ 2057.584824] Bluetooth: hci1: sending frame failed (-49) [ 2058.849165] Bluetooth: hci0: command 0x1009 tx timeout [ 2059.649225] Bluetooth: hci1: command 0x1009 tx timeout 13:38:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x104000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:38:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x11) 13:38:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x113) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000040)=0x1000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xfeffffff00000000) 13:38:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d141dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xa00}, 0x0) 13:38:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x80000001) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x4a8bfdfe09b829ed}, 0xa000, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) select(0x40, &(0x7f00000004c0)={0x7, 0x6, 0x8000, 0x10001, 0x2, 0xfffffffffffffb6d, 0x0, 0x81}, &(0x7f0000000500)={0x7f, 0x4, 0x401, 0x0, 0x5, 0x5, 0x53f, 0x3f}, &(0x7f0000000540)={0x8, 0x6, 0xffffffffffffffff, 0xfffffffffffff801, 0x6, 0x0, 0xfffffffffffffffb, 0x9}, &(0x7f00000005c0)={r6, r7/1000+10000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x80800, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r9, 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000040)=@req={0xf4, 0x6c2a, 0x1, 0x10000}, 0x10) ioctl$void(r5, 0x15bbb1622d1e0887) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/205, 0x1ea}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000000080)=""/50, 0x32}], 0x5, 0x0, 0x0, 0x7115}, 0x100) 13:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xe00}, 0x0) 13:38:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d168dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:38:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x101) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') ioctl$KDADDIO(r4, 0x400455c8, 0x100000001) bind$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default, 0x8}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:38:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x60) 13:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xec0}, 0x0) 13:38:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:38:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) 13:38:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d1a8dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf00}, 0x0) 13:38:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:38:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x300) 13:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x13aa}, 0x0) 13:38:14 executing program 4: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x10001, 0x2802) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x1, 0xffffffff, 0x0, 0x0}) creat(0x0, 0x101) write$binfmt_script(0xffffffffffffffff, 0x0, 0x125) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x2, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setuid(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x101, 0x3, 0x4, 0x4, 0x7, 0x6}) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x100) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000240)={0x9, 0xfff, 0x9}) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r8 = socket$inet(0x10, 0x3, 0xc) sendmsg(r8, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) syncfs(r8) [ 2064.836744] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 257 (only 16 groups) 13:38:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x4000}, 0x0) 13:38:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x500) 13:38:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0xc8, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0xa0, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x90, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr="7fba4e068b6cd88292ee9c53810917ff"}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0xc8}}, 0x0) 13:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x6000}, 0x0) [ 2066.609380] Bluetooth: hci0: command 0x1003 tx timeout [ 2066.615142] Bluetooth: hci0: sending frame failed (-49) [ 2067.419124] Bluetooth: hci1: command 0x1003 tx timeout [ 2067.430303] Bluetooth: hci1: sending frame failed (-49) [ 2068.689193] Bluetooth: hci0: command 0x1001 tx timeout [ 2068.694687] Bluetooth: hci0: sending frame failed (-49) [ 2069.489125] Bluetooth: hci1: command 0x1001 tx timeout [ 2069.494731] Bluetooth: hci1: sending frame failed (-49) [ 2070.769150] Bluetooth: hci0: command 0x1009 tx timeout [ 2071.569206] Bluetooth: hci1: command 0x1009 tx timeout 13:38:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x600) 13:38:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:38:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xaa13}, 0x0) 13:38:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x33e, &(0x7f0000000180)=[{0x60, 0xfc, 0x0, 0xfff}, {0x6}]}, 0x10) 13:38:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6(0xa, 0x400000000001, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='f\x00\x00\x00\xf3\xff\xff\xff\xff\xff\xff\xff', 0x5114f7941f3d736c, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0x8001, 0x7, 0x6}) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x141042, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x800000000000937e, &(0x7f0000000400)="01000000b2c20000180100000400002a112bb4b07f521c832f7479ea8fa56f3f8740820602660abb10a7ea00f40b3a33bfc761d2e0d50a3a0cdb8f") r3 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\xfeL \x00\x00\nz\x03', 0xffb}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000300)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="01e6ee0000001c6ddcc0dded21fdd67e00", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r6}, 0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r6, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r6, 0x6, 0x1000, 0xa6e, 0x8, 0x5}, 0x14) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x411ac0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000440)={0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f0000000480)={r10, 0x0, 0x8}) setsockopt$inet6_mreq(r2, 0x29, 0xe, &(0x7f0000000140)={@remote, r8}, 0x14) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7720180000000000000b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625df08300200000040847be2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01acf61e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f"], 0x69) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 13:38:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) fsync(r2) 13:38:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xc00e}, 0x0) [ 2075.674009] device bond0 entered promiscuous mode [ 2075.679199] device bond_slave_0 entered promiscuous mode 13:38:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 2075.730490] 8021q: adding VLAN 0 to HW filter on device bond0 13:38:25 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 13:38:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x700) 13:38:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:38:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf000}, 0x0) 13:38:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c703b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:38:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x34000}, 0x0) 13:38:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 13:38:26 executing program 2: 13:38:26 executing program 2: [ 2077.729100] Bluetooth: hci0: command 0x1003 tx timeout [ 2077.734575] Bluetooth: hci0: sending frame failed (-49) [ 2079.809217] Bluetooth: hci0: command 0x1001 tx timeout [ 2079.814645] Bluetooth: hci0: sending frame failed (-49) [ 2081.889217] Bluetooth: hci0: command 0x1009 tx timeout 13:38:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) 13:38:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x400300}, 0x0) 13:38:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c704b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:38:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 13:38:35 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x3, 0x2) ftruncate(r2, 0x208200) ftruncate(r1, 0xf2) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') fchown(r4, 0x0, 0x0) r5 = accept4$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c, 0x80000) fchdir(r5) r6 = syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00\x02\x17\x87:\x1d\xe3\xa1\xac\xfc:)[\xc5\x0f`\x1eNu\xe2\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-\x04\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x76, &(0x7f0000000300)={r10, @in={{0x2, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000640)={0xb81, 0x6, 0x2, 0x7f, 0x7, 0xfffff801, 0x4, 0x6, r10}, &(0x7f0000000680)=0x20) read(r6, &(0x7f0000000200)=""/17, 0xfffffd37) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000600)={0x12, 0x10, 0xfa00, {&(0x7f0000000540), r11, r3}}, 0x18) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00\x02\x17\x87:\x1d\xe3\xa1\xac\xfc:)[\xc5\x0f`\x1eNu\xe2\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-\x04\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x9, r7, 0x0, r0}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x2, '\x00\x00\x00\x00\x03\x00\x04\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x100000000000005, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r8, 0x0, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20}, {0x2, 0x4e23, @dev}, {0x2, 0x0, @broadcast}, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x10000000008936, &(0x7f0000000000)) 13:38:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x2000000}, 0x0) 13:38:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:38:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 13:38:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x4000000}, 0x0) 13:38:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3810c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x3, &(0x7f0000000400)=[{0x401, 0xf4, 0x9}, {0x81, 0x85, 0x1f, 0x9}, {0x3f, 0x3, 0x9, 0x1}]}) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r4 = getegid() chown(0x0, 0x0, r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r7 = dup2(r6, r5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r9, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r9, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000100)={r9, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r9, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={r9, 0x7a11acb}, &(0x7f00000003c0)=0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@afid={'afid', 0x3d, 0x200}}, {@loose='loose'}, {@afid={'afid', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '9p\x00'}}]}}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000740)={0x0, 0xfb, 0x4c, 0x0, 0x0, "3535612161354c0fb81a15fda9d281b4", "a4d60b5094548af077bcabee2adf4e35466eba17e1aaac20f41178deca0e6663f5edc458c3cbe8b58dd2d47817d51c61f4bdc7d839a191"}, 0x4c, 0x2) [ 2098.209107] Bluetooth: hci0: command 0x1003 tx timeout [ 2098.215628] Bluetooth: hci0: sending frame failed (-49) [ 2098.929108] Bluetooth: hci1: command 0x1003 tx timeout [ 2098.934529] Bluetooth: hci1: sending frame failed (-49) [ 2100.289282] Bluetooth: hci0: command 0x1001 tx timeout [ 2100.294921] Bluetooth: hci0: sending frame failed (-49) [ 2101.009324] Bluetooth: hci1: command 0x1001 tx timeout [ 2101.014960] Bluetooth: hci1: sending frame failed (-49) [ 2102.369150] Bluetooth: hci0: command 0x1009 tx timeout [ 2103.089356] Bluetooth: hci1: command 0x1009 tx timeout 13:38:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef6a5be2fc2408d748cf14f6f609ef8b8b16758f8d18dc62ecde22b0beb07bef8cacd133b5f962c6", 0x61, 0x400}], 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4) 13:38:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c079b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:38:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xa000000}, 0x0) 13:38:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x6000) 13:38:56 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="000029bd"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000080)={0x19}) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:56 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) mkdir(0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) dup2(r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x2, {0x80000001, 0x1, "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", 0x9, 0x4, 0x20, 0x0, 0x4, 0x54, 0x7f, 0x1}, r10}}, 0x128) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RATTACH(r2, &(0x7f0000000240)={0x14, 0x69, 0x0, {0x5e, 0x0, 0x3}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) syz_open_procfs(0x0, 0x0) 13:38:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:38:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xe000000}, 0x0) 13:38:57 executing program 2: gettid() mlockall(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfb, 0xc5, 0x6, 0x5, "7bf469602387c18dba264f49466617f2", "b90cb92d45c888d7f561c64610c3dd8d3e5d9d797889c5610ceb929ed4c669fa45ba7da37ce456a07aea1e6e5b8bfb33c7a852cb85d0814b811ef44a0a45dc5d8dd3b1ae479f636fcae6fce0ae74b7d1260b730d4a48115b2e2118a43e7fc652162b9a3a7283ef5c04cfca82a05c98b9b8c96b8f3716fdd89c2b2ef67782049dcb95e14a5684e4059b138a6a7d303562387c39f84c674a87bfc60d021920561465872a4966d272cecfccc2cb687c9de6"}, 0xc5, 0x2) mremap(&(0x7f000016d000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x20, 0x1, 0x95, 0x0, 0x3, 0x2, 0x0, 0x3f, 0x6, 0x80, 0x81, 0x40, 0x0, 0xffff, 0x6, 0x67, 0x3f, 0x7, 0x3}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x1a048}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) [ 2107.064962] audit: type=1804 audit(1573479536.953:406): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir097127303/syzkaller.B29yn5/18/bus" dev="sda1" ino=16905 res=1 13:38:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x20000) [ 2107.138625] audit: type=1804 audit(1573479537.023:407): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir097127303/syzkaller.B29yn5/18/bus" dev="sda1" ino=16905 res=1 [ 2107.165319] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities 13:38:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf000000}, 0x0) [ 2107.249086] protocol 88fb is buggy, dev hsr_slave_0 [ 2107.254314] protocol 88fb is buggy, dev hsr_slave_1 [ 2107.264935] audit: type=1804 audit(1573479537.023:408): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir097127303/syzkaller.B29yn5/18/bus" dev="sda1" ino=16905 res=1 13:38:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x8000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) [ 2107.409084] protocol 88fb is buggy, dev hsr_slave_0 [ 2107.414244] protocol 88fb is buggy, dev hsr_slave_1 [ 2108.609170] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.614338] protocol 88fb is buggy, dev hsr_slave_1 [ 2108.619720] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.624792] protocol 88fb is buggy, dev hsr_slave_1 [ 2108.859109] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.864278] protocol 88fb is buggy, dev hsr_slave_1 [ 2109.089107] Bluetooth: hci0: command 0x1003 tx timeout [ 2109.095414] Bluetooth: hci0: sending frame failed (-49) [ 2111.169207] Bluetooth: hci0: command 0x1001 tx timeout [ 2111.174769] Bluetooth: hci0: sending frame failed (-49) [ 2112.769148] net_ratelimit: 14 callbacks suppressed [ 2112.769155] protocol 88fb is buggy, dev hsr_slave_0 [ 2112.779278] protocol 88fb is buggy, dev hsr_slave_1 [ 2112.784477] protocol 88fb is buggy, dev hsr_slave_0 [ 2112.789810] protocol 88fb is buggy, dev hsr_slave_1 [ 2113.009140] protocol 88fb is buggy, dev hsr_slave_0 [ 2113.014340] protocol 88fb is buggy, dev hsr_slave_1 [ 2113.249218] Bluetooth: hci0: command 0x1009 tx timeout [ 2113.489227] protocol 88fb is buggy, dev hsr_slave_0 [ 2113.494402] protocol 88fb is buggy, dev hsr_slave_1 [ 2113.649105] protocol 88fb is buggy, dev hsr_slave_0 [ 2113.654265] protocol 88fb is buggy, dev hsr_slave_1 13:39:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000240)={0x0, 0x4, 0x2017, 0x1}) sendto$ax25(r1, &(0x7f00000000c0)="2dac20d0404cdd5ae53ec729bc64c39d459340e3446b61e8a562fa2c7c5f142131cb71ff8184ec5835ba9acfab3f9b733dd9544d4f91b820956d0daa676d952b1967ed80fc0d5c30531072e4b0775ce656db79bb83c5d301e10cfac0221ead438d185b1d89fae514c514517d2b9ab7d1eaa4e5a85a7b89eebdb8e33388f0787f180a2f00712f37c27a0314f95ae7e408186873b587d42b615d6c6ff76861bd37a8091f8f7f3d5d8629a85498762c52403da6ba5a13dceb17b9d3fb36966943dd34a74713b22db399499ded5d757c91aa0b6b89a07c092f9aea8062a098", 0xdd, 0x90, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:39:07 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x5}, [], {@ipv6={0x86dd, {0x0, 0x6, "b41600", 0x10, 0x2e, 0x0, @remote, @empty, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "81d83c", 0x0, "fb1289"}}}}}}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x32, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1d3, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x400000a) 13:39:07 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:39:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x30000) 13:39:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x40, 0x295, 0x2, 0x3, 0x6, 0x35d, 0x40, 0x25e, 0x4, 0x644, 0x38, 0x1, 0x3, 0xf81b, 0x9}, [{0x6, 0x1, 0x1, 0xdaea, 0x3ff, 0xffffffff8dca2be2, 0x80000000, 0x10000}], "bb300b74753ab58eb721daede99c3df0efbd250dce9c6a8cc958d29221090b07f7fbfffb0e272a3f82e4aa7d6a3fc99d7fbd860a5202e2daf32d20229c89b3097487515be66bdc3c7ab219698767db718516cda09cf6ef28a687c2298441eebc16ea6e23f115f90a84ff0914a02bd4f3a1befbac8267a392d21291e2eae7dd8f1638b17dcff3942f143860a7749439ddd4f11c7b155ebf138bd7da70421ddcb24a9e4e68d3cd4d86eaeb8983fe1f81654599f987c4d5a68c5169d8888d0faade105a8e043b0dce4ca26032d556cb64a268404a087aa010d6d03ab897bab12885feb115eb95fd42fe71da09bf150e763cfc142a6f9125af", [[], [], [], [], [], []]}, 0x76f) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x105, 0x0) 13:39:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x40000000}, 0x0) 13:39:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x60000000}, 0x0) 13:39:07 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:39:07 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaed497db0f7be86dd6050a09c00081100fe8000000000000000ec4700000000bbfe8000000000000000000000000000aa0000000000009078"], 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)="dd23d15c39086d83ed127e8f2de3e7486542cd7c8a56ebce87ec9b3de7630908b8b1efa5e0a18d768ad36a161f66e8f0fe6db38e652dffd1a63a9aefa7da374b79aab5dea4902496a83f9085aeb460a8d440cedb46cf59e9daa4716e84e7216b7409a44044223d1e91b748f26a76d3ca784deeb6151e7ea331954a15447c212ac226667550e49ac5cd8e9453faa9449d83690b9e439c55fbbd2fb0ac7adfb1c583a8be6bd0afeb51d199b10ea84729ff0fec28438f34183218bf1f375d0e505600350e1e36fc6d92a5a5eb05f4a48a47033966196a417124bab4c9692d508881bbab") r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x96c1, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000240)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x3, 0x5, 0x9c, 0x68, 0x1f, 0x1, 0x33, 0x0, @multicast1, @broadcast, {[@noop]}}, @udp={0x4e23, 0x4e23, 0x84, 0x0, [@guehdr={0x2, 0x1, 0x2, 0x79, 0x100, [0x100]}, @guehdr={0x1, 0x0, 0x0, 0x7f, 0x180}, @guehdr={0x2, 0x0, 0x2, 0x2, 0x180, [0x0]}, @guehdr={0x2, 0x0, 0x2, 0x8, 0x180, [0x140]}], "40701097adfb27ece3d9a4076e8e8445cd54907c6d4ac53a9793bc89215ba41af4112c3b82bbec7bb864237f8070d4cc59a08bd47d1852187017005fa91cf2e18fb7d333525027361ca3dcfabcefdace11823a6c373ac5892be9a8661c70504f"}}}}}, &(0x7f0000000300)={0x1, 0x3, [0xd9f, 0x17c, 0x511, 0x446]}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000001c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000140)={0x20, 0x0, 0x6, {0x0, 0x4}}, 0x20) 13:39:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x9effffff}, 0x0) 13:39:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x40000) 13:39:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xa0008000}, 0x0) [ 2119.329095] Bluetooth: hci0: command 0x1003 tx timeout [ 2119.334553] Bluetooth: hci0: sending frame failed (-49) [ 2120.129076] Bluetooth: hci1: command 0x1003 tx timeout [ 2120.134512] Bluetooth: hci1: sending frame failed (-49) [ 2121.409152] Bluetooth: hci0: command 0x1001 tx timeout [ 2121.414604] Bluetooth: hci0: sending frame failed (-49) [ 2122.209158] Bluetooth: hci1: command 0x1001 tx timeout [ 2122.214584] Bluetooth: hci1: sending frame failed (-49) [ 2123.489167] Bluetooth: hci0: command 0x1009 tx timeout [ 2124.289237] Bluetooth: hci1: command 0x1009 tx timeout 13:39:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68891100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x800, 0x70bd29, 0x6, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}]}, 0x24}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xf6, 0x0, [0xc6b2, 0xec, 0xfffffffffffffffb, 0x6]}) 13:39:18 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000, r2, &(0x7f00000001c0)="9d53b57c2e1a7686e901af9b792e27efff7c647f2cce6f8dd87f988785a8d1d694c8bc71f497bd14e1fb2ed5538018c46ba5337fb315fbcd9ffa80bc6b7cddc4aa145ff6c9bb78", 0x47, 0xb0de, 0x0, 0x1, r1}]) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000000)=""/11, 0xfffffffffffffcd4}, 0x100) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 13:39:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c00010065727370616e000018000200080003000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x400200) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) 13:39:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xaa130000}, 0x0) 13:39:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x60000) 13:39:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:39:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000040)={0x7, 0x1ff, 0xc6}) fallocate(r0, 0x0, 0x0, 0x7fff) 13:39:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xc00e0000}, 0x0) 13:39:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:39:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x231860) 13:39:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 13:39:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xfffff000}, 0x0) [ 2130.849085] Bluetooth: hci0: command 0x1003 tx timeout [ 2130.854580] Bluetooth: hci0: sending frame failed (-49) [ 2132.929228] Bluetooth: hci0: command 0x1001 tx timeout [ 2132.934659] Bluetooth: hci0: sending frame failed (-49) [ 2135.009218] Bluetooth: hci0: command 0x1009 tx timeout 13:39:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$isdn(0x22, 0x3, 0x26) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x14, 0x7}, {0x8, 0x10001}]}, 0x14, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:39:28 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x3f5, 0x0) 13:39:28 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x2}}}, 0x128) 13:39:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x8000a0) 13:39:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xffffff7f}, 0x0) 13:39:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0x10000001c) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="290000005200190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1) 13:39:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xffffff9e}, 0x0) 13:39:28 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x2, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @vbi}) 13:39:28 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x3}}}, 0x128) 13:39:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 13:39:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xfffffff0}, 0x0) 13:39:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x4}}}, 0x128) [ 2141.089123] Bluetooth: hci0: command 0x1003 tx timeout [ 2141.094575] Bluetooth: hci0: sending frame failed (-49) [ 2141.809307] Bluetooth: hci1: command 0x1003 tx timeout [ 2141.814721] Bluetooth: hci1: sending frame failed (-49) [ 2143.169129] Bluetooth: hci0: command 0x1001 tx timeout [ 2143.174578] Bluetooth: hci0: sending frame failed (-49) [ 2143.889273] Bluetooth: hci1: command 0x1001 tx timeout [ 2143.894723] Bluetooth: hci1: sending frame failed (-49) [ 2145.249206] Bluetooth: hci0: command 0x1009 tx timeout [ 2145.975060] Bluetooth: hci1: command 0x1009 tx timeout 13:39:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x40030000000000}, 0x0) 13:39:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c69499459586c0b926aa04d67618228f066a2f5ad6259f015e97d48b7bdb965d4e274b9d5b90991aaba6bb3646797a193", 0xc4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:39:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 13:39:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x5}}}, 0x128) 13:39:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') lseek(r0, 0x5, 0x0) 13:39:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f00000000c0)=0x3000) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000000)={0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:39:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x8000a0ffffffff}, 0x0) 13:39:39 executing program 4: pipe(&(0x7f0000000200)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') 13:39:39 executing program 2: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x4, 0x4}], 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 13:39:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x6}}}, 0x128) 13:39:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 13:39:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) 13:39:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000001380)=""/239, 0xef}], 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x84000, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6#\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x703}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) 13:39:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x60}}}, 0x128) 13:39:40 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ppoll(&(0x7f0000000000)=[{r1, 0x8}, {r1, 0x20}, {r1, 0x124}, {r1, 0x140}, {r1}, {r1, 0x4000}, {r1}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x8) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="fa13031b36b06be279451425c8d5ea6b4946a73613bddaf45e4c530717f0bfe064e06f62017f4d592066ecf61ff460cda032b5ae2283c2b79c33c77ecd3dd4780412bf31c49bf647123a7f5dfe2a6e17d91e2ea44a2257f407b57d06c89ddd9e649cfa3c3929bd59dbb7c723a5889bdac4efbc0de090345c213eea8c7b23b8df7223b237c319c2444810c2be03e64d58d909223e674dd7856ba0642775eaf0d2df91a09b9abc98deaeb5c33c3fddda13c44c67cc70f356538103ccaccc06f36a25b7a08c150e8036a0353ba69437a9e609ef3128262fef7a6121ce3a09e9403d7bda3651019fab24646cd69ac1a47783d8b95db03fd5a4e3c3afff2c54f19296a84d1c377b4f9d2044b3f63fb902d7fb1c7f24003b3371950d7f5732017cef2faa6066bd891b77aa6f15e06618ebfe628092192927b5fa7c2b5c7df7d2983ea25b008781f1a64fad3285b803bc9c71ffed139a1bb72807152c8352f57a091fdb0da92c2be69fd4ab7ceae024539acdf07a4769e32e9fcce4d5d4f854cc50447f72e3a17453e0d419c5060705a8cbdd2999eed94d92afaa2b504198b2100ec7536e6c8cb9697a114ffa75fb444f53ceaf5d9dff34da14655fb681d006f2b1838c4fce61cf93650f2ebf674d6cf9ad6e26ae6bd1135b21b7c74f6be9be3420c087705bc9df04401c8ed7f4e457a64df442b9810c85aa52877b010051b67def9930c426fc575128976d30b519f3b8fec1990fb4eb29d7ddd688c2e67740f9796736137ce173efa1ed7cc13b92f1ebd7241f1821266cadc585af55b07e9edfa694552ff8c4d9063a995fff0d828b5ff1a8e787d4a68e519a13b6d809cc6a588a8f6b12f12fd1cc230b815b40a81aca65756821b5df40e8c09432f7cff2f815137b32d1e9a96b637bf8ec4ac2ca18482c1de4b22791c3f81597714c8d85d4437c43e13c581f9de889f6bd66d09e97dd7f26a0729c11d6dbc16e1905787cc3e22df1324c57da395e986d40167ea5758f8d8b487b0bdc4260c8c1316da9f4c990b18ce14961a2942d1d6600d81129eda581799a91929a312ddbc6872f3b1b5941961fd4d4591ca64242303531c53c909358035e7d2bf36d4ba87c1871fc62e5f9ac68e751b0410137581477bdfe8c0b78a25f712544a408a2df1c4f9d8f769bda2b15a0fa4e73270c58eaea1c2c4b4042562a6d0f8ca904aeaa1e5d0fff3ad67df1885135a30b22ddeeba586acf48856d3085aceb37f16b053db81801b273aa97ba9520c88872695b606b0348d8360be31375fbc4eb13d1205df82448c7b99db086cf79e539a9836a47c3c9f605904170b47c31f5d773d7c5f09f2341b8c519a1fc5b344a9ec7f776af6ceb04e69ccf5eaf1d6c7ab63b08d82a7c43140fd271c5d30dfd2b1d802f2235e1873774af9c946ddb26d022ae3444d749b64171c43afc6cd5e7061d4b03ab3f2bc0fd2a7f6bad0f467d71d48df7baa7a1e7b701cb2f4216e5532cdffb87d25ad73b80bf695b9368d2175223c49d23ef2064e2a7bdc02c382ad0ccef24a948bf6ef34381e61de9cf6ece2106d41d7a93d4ebea6de2c930dc87ee940be4fa2c45184e1328f2f2d43f8b980621cce3ffb4777d3ee10f41fed4679929ccabe10cf2b9795393a35f82bcd9ad42eef5202fe110c1b4c67615b17869a5f489c4190bb9bdf832ca53188f596e564d8bc8fb1e7efe9cd2c36fe9cb00208f2225a840fad171fa63ead3907e17647cea2adeb0b80ae264baf6deb1e2d9e2ef5524219e84d116c605df271b9de2b8bf25bce17845b9a62e14bc49f219d84f187ef0c096bd3a94af86e009a1b9230c478318f427c51a59313979ee61989f4293d54c0dec8f28e8b8665d765abccd5e615f08215b4f948b44e47488f90d20491b78f4b8f1ba8af0f8760b956242a5d2bb62672052840e479d2f5fdb28b409a442273dad165fabc905b127fe7521333a041987792fa2a85e894a750eeb9f3d26dd484823043b142b357ccaed87e35e458ddecdd44ec129415609ca2e7e8b975cd4fcb515017819cb2ced0007b86cdbe578319d8d73c42a17ccf76ca0d10a18aba4fa59ada6ead9d6686b1a48dc1951ad0bc61490ad7db3e973acd7946b4a14372c055c933a11240e2a3cf102c2c558d5a6da69f542fc7df55f8ebf7dd7a26d5c9df9cf404bc009839d33a4febaa7950944eff2c786865c5ed5674cf9aa9d145756e64b0f6ad731055d17d6494c11b60bbc491154e5160b6bfcc739ce3c2dc9cb897edf384391311bc3b994111d67e946193e2729fcc90340326a3b4691cf178cd9d9ae6bcc91afcf44c8aeca8837fa861517b53468bd019381077c56408c078666e3150f4b8979e3de49b3d1a154715478000ce547f45b780edd3a8b19c00e2e127c02771d0d2f1c84d8f0e7174df9667ddad0d290954d05b699d0c93794f4ca79841597b9b8dc782af5e95f751095b0b2c5c73cad5b615715497b5b47b181ead6d872f59da0372d3d065036162724c1791bfa7dc21c21e5c3f1b306b33a2efdc9309f8301fbba75272ae2d80d3111c4a928c2cb5ec9bea65561a38ecabac7242b6a9732c257f857c1bf3add78c202914280c5fcc875b996c054f6882c26f3a561e06aafd9b72dd271dcee546c1fe689f14660587efc385f2f8002862af5b601c509febde6375eb3c71273dcffb4db5f10f1cdd530e7eae009beb61063277a8d5c6124a1c390a5b9f9de7ed7130eea68e56f04715ee015bec853d2addfc29d8dcd6db8fe9fd1e454ee1a729dcdbf92c990799d55fb2c55cc4be3b3189b20f23c8ebb87e6313b5f53b6de9846eb6acff9e301fd443a621666c39f03d5feb23772f8fae8cb77c18697d3e036023fa5f60ec8a4adc0b6c6e18e370734cec1ae84f8be2e31fcf5dce74dd3c3f96b738f1fa72f66bd12472b13876c94cbb4e225dcb5be02d668b537a0271170a980a81b68d3eb3ffa45b076406b039854a6278cf92f969f14ff0dec83e4d3b156b84d85fb9a80cad6acac56ac8c61305ac6f7d97b8383c187ab19877fd593d47ebd2dbffffbf0b8d185444395341a130b1e7a140c32455c0137ac62ec48f8df0803221a3336d76db609b8cffba28032acba05ddda74e7c5a748028ffbd9785c64ef14c809b6cbf496b4c7a31116be2960036ce54c6ba23fe56ae6abfc9a95faae3c5095a7085344eff0a332cee15a3335d9d2f2f135dcf91049ceb446f5b07771a5296f07b07305df2fc0d33a95740d6c50c24dd3088acb1bcbcee6e3666727ee4c1cbb1401d38e00c19143e29ee7a38c30006759992b44fe77ca24a43d7c56f341c478d58e7b853e84c3168eb6708cccf13129063fab5d3598e5e8a47e7254cf6bcd4c4e734a911cd61b2ed146d686b80af27c83c5ca1f4dd7a866ccd4b7440867f7089d24ac458ce575d72dd53736634977f5e42a6588ea93dc3d9a57f455f183e07da64eb20a59c9ad66f9ad9cee67352916c09417411d90c1e5a26c7f6f8719d9eb66cbbb471d25443aef2b597ae38fe5cac9cec0cab27ceb2557d928320660b847445d5d70141551d18c05584b0b1263ca23046978e5b38049ebc7c0d90a48e7bd5ad6a5e16a6f29e4720f4982245067c7fdd41d2b037f01a42829afe6ab3a0f55176481282017f723b22f4a1a3f896d0ef8a2bc5b7532fcf196997c80e9779acf603d9a288938dae18b67dc7f2cf2f3fcebce886451b6464aae6296a78f0c962738cfe3591dec5fc776db85a722901952440ca17b8d12b3037ca40acff22c9a1223b22b88329402bbee396883f8eb8cd3be5b2783ae411d16ff3f46e0b70b65e0c8cf6a60cd9b0a1da99eef48fb1810d9ac3dedc60a66b5304acd5ff3a7b4ba24b0405eeeeecae66d72049dd9357ef2556eea8d42f336adc4108200d838114ee4c6ba869150f6c0805971ed34508174c57a8ab95ea7c1783e1984e4614e2d2c9701fa7220819e827cec6cfa6d930f25c131419c4d296cff25bdea6cae713918707ec9c8b3e0cb2313bae6530fea171f5bc1baa4679207c2f4bd472af9568f1f14164ce7ac4b1964cbd3f1ccb259bb698c053d36ab7257ec20d73bdf4e245561fbac5ed36793118a80df227002f8525a6a30c39bff24ecd2432ddd0273f33f4c2d53189ba23d1f5596a2644896fff294f4ab4ef72afffdb9a7f86a8f5cc4bd63616139e166077158accd70cc12d1e9356b1f742c9ff9b383ae9b1bf2beb3c9645e4df6ce0a9d25958677215317fe9a313ee97b60acc59731b3422a48a6402c8790791b2f1928690edb9a47b86321af06330e2b4271252d345bd74dc7deb830fe1a142d951327552772ebb6734c967844ec2b193c"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000240)={0x1000, 0xdff, 0xae9, {0x77359400}, 0x6, 0x9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x101000, 0x0) pwritev(r3, &(0x7f0000000140), 0x0, 0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000001080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x0, &(0x7f0000001380)=[{&(0x7f0000002580)=""/4096}, {&(0x7f0000001100)=""/234}, {&(0x7f0000001200)=""/238}, {&(0x7f0000001300)=""/111}], 0x0, &(0x7f0000003580)=""/4096}, 0x5}, {{&(0x7f00000013c0)=@hci, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001440)=""/130}, {&(0x7f00000016c0)=""/194}, {&(0x7f00000017c0)=""/196}, {&(0x7f0000001500)=""/141}, {&(0x7f00000018c0)=""/60, 0x2bd}, {&(0x7f0000001900)=""/21}, {&(0x7f0000001940)=""/8}, {&(0x7f00000019c0)=""/92}, {&(0x7f0000001a40)=""/67}], 0x0, &(0x7f0000001b80)=""/120}, 0xde4}, {{&(0x7f0000001c00)=@in, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001c80)=""/45}, {&(0x7f0000001cc0)=""/69}, {&(0x7f0000001d40)=""/132}, {&(0x7f0000001e00)=""/26}, {&(0x7f0000001e40)=""/10}, {&(0x7f0000001e80)=""/47}], 0x0, &(0x7f0000001f40)=""/138}, 0x2}], 0x1, 0x40002100, 0x0) 13:39:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x100000000000000}, 0x0) 13:39:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) [ 2150.448705] ptrace attach of "/root/syz-executor.4"[11350] was attempted by " °ÿ àÿ 0 p Ðÿ  ÿ Àÿ ðÿ ÿÿÿÿ \x07 !    \x0a    \x0c   ÿ\x0d é\x0a ”5w  \x09 @ = [ 2151.969128] Bluetooth: hci0: command 0x1003 tx timeout [ 2151.974587] Bluetooth: hci0: sending frame failed (-49) [ 2152.769253] Bluetooth: hci1: command 0x1003 tx timeout [ 2152.774691] Bluetooth: hci1: sending frame failed (-49) [ 2154.049177] Bluetooth: hci0: command 0x1001 tx timeout [ 2154.054593] Bluetooth: hci0: sending frame failed (-49) [ 2154.849181] Bluetooth: hci1: command 0x1001 tx timeout [ 2154.854780] Bluetooth: hci1: sending frame failed (-49) [ 2156.129179] Bluetooth: hci0: command 0x1009 tx timeout [ 2156.929234] Bluetooth: hci1: command 0x1009 tx timeout 13:39:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0xc0}}}, 0x128) 13:39:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x200000000000000}, 0x0) 13:39:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{0x0}], 0xf69a7b9e4aea9969, 0x0) 13:39:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180), 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000280), 0xc14266c1da2ef4, 0x0, 0x0) 13:39:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 13:39:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:39:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x400000000000000}, 0x0) 13:39:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c69499459586c0b926aa04d67618228f066a2f5ad6259f015e97d48b7bdb965d4e274b9d5b90991aaba6bb3646797a193ffc12246d10054d9e49405a743a6e85ab713a64bc7aadc8d3912327d5f61672441", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:39:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:39:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 13:39:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xa00000000000000}, 0x0) 13:39:51 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x100000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@local, @multicast1, @multicast1}, 0xc) 13:39:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x2}}}, 0x128) 13:39:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xe00000000000000}, 0x0) 13:39:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0x1, &(0x7f0000000180)="716cbcee67df506357f8adafce4e815371ffd77e55a0326d7a888ab443481f010a5b46e20e5b0d0da601f101dddb7e97602543b355ef988cb8101ee28d1d845f8b0e476d1415581d36859f6f4817e7e0340bb32aff090fe01e2c7af56ba5436ee0936304b2feae21b65bd88179d18d4dafeaeca5d2a0d671c4f92d1b1fe019cf862fc5fbb9a18d5241c12a9e9d917d20b01507ad83ee56c7dc25ce51b6dbff9776ced9c07ebaec076a9d8223f9d3fe6830c72fd3902e3e295340bd5cbfa9eaca4736047ca8dbc77b4f7f9ea764d8ffbddd5579f52c05e33aa23a41c4927c5fd5a3098faee4894069cf219b9b", &(0x7f00000002c0)=""/102400, 0x4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000100)={0x1, 0x0, 0x1004, 0x88d6, 0x741e, {0x7fff, 0x8000}, 0x1}) r6 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000019440)={0x5, 0x7, &(0x7f00000192c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9689, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000019300)='GPL\x00', 0x5, 0x7b, &(0x7f0000019340)=""/123, 0x41000, 0x1, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f00000193c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000019400)={0x4, 0x3, 0x800, 0x6}, 0x10}, 0x70) 13:39:52 executing program 2: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}], {0x10, 0x5}}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x800) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(0x0, &(0x7f00000004c0)='./bus\x00', 0xa7b8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000600)}], 0x0, 0x0) 13:39:52 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/d\x00\x02\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x2000, 0x4) 13:39:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 13:39:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf00000000000000}, 0x0) [ 2162.424520] overlayfs: conflicting lowerdir path 13:39:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x4000000000000000}, 0x0) 13:39:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x3}}}, 0x128) 13:39:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x6, 0x22c00) recvfrom$inet6(r1, &(0x7f0000000140)=""/125, 0x7d, 0x8000, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @loopback, 0x7}, 0x1c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x117}, 0xf) 13:39:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 13:39:54 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() r3 = gettid() sendmmsg$unix(r1, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70}], 0xfd, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r3, 0x12) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) connect(r6, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r7 = gettid() r8 = gettid() sendmmsg$unix(r6, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x68}], 0x1, 0x0) r9 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x8, 0xfd, 0x1, 0x2, 0x0, 0x4, 0x84440, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x790e8ed9508c132c, 0x1, 0x2, 0x2, 0xa7f, 0x3, 0x7}, r7, 0xc, 0xffffffffffffffff, 0xb) r10 = accept4(r1, &(0x7f0000000240)=@generic, &(0x7f00000002c0)=0x80, 0x0) r11 = eventfd2(0x6, 0x800) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x1, 0x0) poll(&(0x7f0000000340)=[{r9, 0x5312}, {r10, 0x100}, {r0, 0x9266}, {r4, 0x8}, {r1, 0x3000}, {r4, 0x288}, {r11, 0x1100}, {r12, 0x80}, {0xffffffffffffffff, 0x204}], 0x9, 0x7) r13 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0xc100) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x20000010}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:39:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x9f0000, 0x4, 0x8000, [], &(0x7f0000000000)={0x9e0902, 0x8, [], @value64=0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0xfe) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r9 = dup2(r8, r7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r11, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r11, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000100)={r11, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r11, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r11, 0xd24}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r12, 0x200}, 0x8) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000180)=0x80000001) 13:39:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x6000000000000000}, 0x0) 13:39:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x4}}}, 0x128) 13:39:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 13:39:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='GVL\x00\x00\x90U\x91\xaf\xd4\x01j\x12W\x11\x97e4\x0f\xc5m\xcc\x1b\xc2Y\x11\xdf\xd6\xb2n\xe1\x82\xd6\xb3\x1a\x98H\x06l\x0e\xa0\xa23\xba\nB\x87v\xaa\xe0\xec\xcb\xaf\xe7y\x87\x13\x06\xa8\xc4\xb4\x90\xa1\xef\xc5F\x80\xa0-\xcd{1uj1p\xfc\xe8\xc7uQ\xbfay\x8c\xb2\xca\xc8\xf5\x8be3\xa1,\x96\xc1k\x80\x04\x12\xb9!\xe6\x88\xc0U:\xe3\xc3\x92', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$9p(0xffffffffffffffff, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13:39:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 13:39:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x5}}}, 0x128) 13:39:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xaa13000000000000}, 0x0) 13:39:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) [ 2166.769298] Bluetooth: hci0: command 0x1003 tx timeout [ 2166.775034] Bluetooth: hci0: sending frame failed (-49) [ 2167.569369] Bluetooth: hci1: command 0x1003 tx timeout [ 2167.575063] Bluetooth: hci1: sending frame failed (-49) [ 2168.849256] Bluetooth: hci0: command 0x1001 tx timeout [ 2168.854945] Bluetooth: hci0: sending frame failed (-49) [ 2169.649233] Bluetooth: hci1: command 0x1001 tx timeout [ 2169.655035] Bluetooth: hci1: sending frame failed (-49) [ 2170.929232] Bluetooth: hci0: command 0x1009 tx timeout [ 2171.729253] Bluetooth: hci1: command 0x1009 tx timeout 13:40:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000100)=0xfffffffffffffd3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) fcntl$dupfd(r2, 0x0, r1) 13:40:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x6}}}, 0x128) 13:40:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xc00e000000000000}, 0x0) 13:40:05 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1000, 0x14}, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) splice(r0, &(0x7f0000000080)=0x100000000, r1, &(0x7f0000000100), 0x6, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', {0x2, 0x0, @empty}}) 13:40:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 13:40:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x7ff, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r8) r11 = socket$inet(0x10, 0x3, 0xc) sendmsg(r11, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_timeval(r11, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000600)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mq_notify(r10, &(0x7f0000000180)={0x0, 0x22, 0x6, @thr={&(0x7f0000000440)="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", &(0x7f0000000540)="f70c512ac64130c0f6ad6bed6637fc8eb7f77c5654b65752eaf78e7056055987e1236dfd2b03e71c9195aba6232e151b977df57f41c8d93f1f2848432895d1ac4e0624dfc6589c705db30cef9f6c2bc8a68767822988b672db17514e4b4fdbc00bc10ba5bd7be88a04b2d6ef4643f4a316183348a58977ecd86c48bdf977082611358e292d416a30c189db34bcc56de7ce1af3bfa89c930c509c0a4c4f07a2023950d64fd4"}}) r12 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_MASTER(r12, 0x641e) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r5) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000000, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@rand_addr="20b506453dac41be4a2b09ae2447c53a", 0x0, 0x0, 0x0, 0xff, 0xfffffffc}}, 0xe8) getsockopt$IP6T_SO_GET_ENTRIES(r14, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000a20000006343977fc4f0f3484484c231b35d66758e589df8755fb382a023e91f34078cdec76ddbc18309c3f393114a7255601a8d8f9f6e977f908876fb5e8f5e087616e3b93c3cb185b6a30667dd86ff990dc7c7f2b98703404e572c0c0098b468c2c41970ec7b5e7990d2566a796d43d1e121f63eca0da9a4f7eae6cbcb738fd4aaae0b6a4fd9f59c713f6f56e856ad76652455889db30e01be0d4de3060123df377d621d06e6c42efe62500a01b30c31ccae10b59b2f8a341ad6771d2ef8da26042940352d4ff93a7a4fedece91cc248a648a90af33a66e42a191bf545717c94f5033a7fe12eff1f10ce2f29084d729a40555de185f77891fb7a379a5ad5724d1ae580ae23f926d0acf24134ced96393e5768e23a3b1a6f62b7f13934a501f4896f0c604d50f88808e46ccc64d43a04bdc550594fc2b1bc5f1004d7fbf466e8035781570f6e3f493182497fc55efc14c7b5f8448efec9809e3fb56e9ee03"], &(0x7f0000000100)=0xc6) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67b, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80, 0x0}}], 0x400039d, 0x0) 13:40:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) [ 2176.139817] IPVS: ftp: loaded support on port[0] = 21 13:40:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x60}}}, 0x128) 13:40:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff}}, 0xa) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, 0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xff, 0x400000) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000080)='.\x00', 0xfe) r9 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r10 = dup2(r9, r8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet(0x10, 0x3, 0xc) sendmsg(r12, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r13 = socket$inet(0x10, 0x3, 0xc) sendmsg(r13, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r14 = socket$inet(0x10, 0x3, 0xc) sendmsg(r14, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r15 = socket$inet(0x10, 0x3, 0xc) sendmsg(r15, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r16 = socket$inet(0x10, 0x3, 0xc) sendmsg(r16, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r17 = socket$inet(0x10, 0x3, 0xc) sendmsg(r17, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r18 = socket$inet(0x10, 0x3, 0xc) sendmsg(r18, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r19 = socket$inet(0x10, 0x3, 0xc) sendmsg(r19, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r20 = socket$inet(0x10, 0x3, 0xc) sendmsg(r20, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000029c0)=ANY=[@ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000002a00)=ANY=[@ANYBLOB="3811ae8a6268af558e918a376b07a09e70084a1dc6daa3267ad63a614cb14892b7c14b796456c57eb3b972d8d3a2321e7568f005", @ANYBLOB="2e80ba489f64410a14f049198d572392d8e4f904b6716ded6132711e4802cac9f9cc10176b29630a15f174aafc74a8650eaca7ffff5f12c5e30147557b8b18c8bc5f1515188a276dfb38ed2d4cc65abecdf5d586426f444b1fbd872dfcc3c4ce6bedbc3f56c7b5596540253e3b704268768c3e5259bf92c7b39e65c8286e8f459531066ed000ac7130af182839377262fc354ecd070cc4e12195e0436cd2be901a0a3666c86601e6af5ef717ba59d86380a71d77d8a9bc036390d8c90fed5166752b5bcd7bd1", @ANYBLOB="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", @ANYBLOB="68dd54f5ad2fde3d69a3ca8e4ccfba3b0b78fcaa23b0aed96fbb1358082e32a578d89848ae001aaecca3a5783c9f22f92e95", @ANYPTR, @ANYBLOB="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"], @ANYRESOCT], @ANYRES32=0x0, @ANYRES64=r13, @ANYRES16=r13, @ANYRES16=0x0, @ANYPTR=&(0x7f0000002940)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES64=r8, @ANYRESDEC, @ANYRESOCT=r10, @ANYRES64=r16, @ANYRESHEX, @ANYRES64, @ANYRESOCT=r17], @ANYRES64=r20, @ANYPTR64=&(0x7f0000002880)=ANY=[@ANYPTR64, @ANYRES64=r8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r13, @ANYPTR, @ANYRESHEX], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC], @ANYRES32, @ANYPTR64, @ANYRESHEX=r1, @ANYRES32], @ANYRES16=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000140)={r21, 0x4}, 0x8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r6, 0x1) r22 = socket$inet(0x10, 0x3, 0xc) sendmsg(r22, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendto$inet(r22, 0x0, 0xffffffffffffffb7, 0xb0, 0x0, 0x0) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), 0x0) read(r5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xffffffffffffffff}}, 0xa) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 13:40:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 13:40:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 13:40:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0xc0}}}, 0x128) [ 2176.701673] sctp: [Deprecated]: syz-executor.4 (pid 14585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2176.701673] Use struct sctp_sack_info instead [ 2176.785814] sctp: [Deprecated]: syz-executor.4 (pid 14589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2176.785814] Use struct sctp_sack_info instead [ 2178.209138] Bluetooth: hci0: command 0x1003 tx timeout [ 2178.215034] Bluetooth: hci0: sending frame failed (-49) [ 2180.289177] Bluetooth: hci0: command 0x1001 tx timeout [ 2180.294606] Bluetooth: hci0: sending frame failed (-49) [ 2182.369224] Bluetooth: hci0: command 0x1009 tx timeout 13:40:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1c1c81, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x8, 0xbd2, 0x8000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000100)=0x7fffffff, &(0x7f0000000140)=0x4) 13:40:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8e18) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, 0x0, 0x80000) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB], 0x3}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000400)={0xc7, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}, 0xfffffffc}}}, 0x88) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x14) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x88) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) 13:40:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xffffffffa0008000}, 0x0) 13:40:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 13:40:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:40:16 executing program 4: gettid() openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x8, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) gettid() bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) clone(0x18123101, 0x0, 0x0, 0x0, 0x0) [ 2186.347584] audit: type=1400 audit(1573479616.233:409): avc: denied { sys_admin } for pid=14617 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 13:40:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 13:40:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x2}}}, 0x128) 13:40:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 13:40:16 executing program 4: sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x15c, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x68, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x93}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc5}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000415) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x0, 0xba8e}) geteuid() r6 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r7) socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b34ff8), 0x0) r8 = socket$inet(0x10, 0x3, 0xc) sendmsg(r8, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_dccp_buf(r8, 0x21, 0xf, &(0x7f0000000000)="3673c29cbd89cd3a02781662f833533297b54d3599d4e9474e10131fa53a45d5a08ba3db57763f79e34d82fb1907c96bda9bcaa16a1645f817887512396b5fcf7d15b81ebfb4f372751188ea6f6c25ddbdeb71f82b4b6a77e2afc5422e871bdd3abdc5e16869492f3f47dd2b6c5bd5afd4f381d7790570a8e3b1bf3c58ca3c59e2153369f0774e6ea29d7087b676be177e4d2bf1fae6b89d71001de6c3958109a03ad5b4f203fb47d50a52868c7cac104606d456291e3aeb87fef4db9b4db7fb7607eb3e", 0xc4) setuid(0x0) lstat(0x0, &(0x7f0000000380)) fchown(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) request_key(&(0x7f0000000840)='id_resolver\x00', &(0x7f0000000880)={'syz', 0x1}, &(0x7f00000008c0)='ns/pid\x00', 0x0) creat(0x0, 0x0) 13:40:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 13:40:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x3}}}, 0x128) [ 2188.449080] Bluetooth: hci0: command 0x1003 tx timeout [ 2188.454559] Bluetooth: hci0: sending frame failed (-49) [ 2190.529186] Bluetooth: hci0: command 0x1001 tx timeout [ 2190.535788] Bluetooth: hci0: sending frame failed (-49) [ 2192.609118] Bluetooth: hci0: command 0x1009 tx timeout 13:40:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x4b34, 0x0) 13:40:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r2, 0x203ffffd, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) io_setup(0x3f, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xd}, 0x20000357) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 13:40:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 13:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 13:40:26 executing program 2: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = getpid() getpid() sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xd8, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r5, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x3, r5, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xbe) r6 = gettid() r7 = gettid() sendmmsg$unix(r4, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="721401b6f4a492f441f80000"], 0x70}], 0xfd, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r7, 0x12) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x12400, 0x102) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r9, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r8, 0x0, 0x16, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', r10}, 0x30) setpgid(0x0, r0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)={0x21, 0x3, 0x0, {0x2}}, 0x21) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000200)) unshare(0x40000000) 13:40:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x4}}}, 0x128) 13:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xa}, 0x0) 13:40:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x5}}}, 0x128) 13:40:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x60000000) 13:40:26 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_nanosleep(0x0, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 13:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xe}, 0x0) 13:40:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x6}}}, 0x128) [ 2198.769110] Bluetooth: hci0: command 0x1003 tx timeout [ 2198.774563] Bluetooth: hci0: sending frame failed (-49) [ 2200.849146] Bluetooth: hci0: command 0x1001 tx timeout [ 2200.854610] Bluetooth: hci0: sending frame failed (-49) [ 2202.929311] Bluetooth: hci0: command 0x1009 tx timeout 13:40:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 13:40:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 13:40:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x60182300) 13:40:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x60}}}, 0x128) 13:40:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000300), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) timerfd_gettime(r4, &(0x7f0000000040)) ftruncate(r4, 0x7e) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r5, r5, &(0x7f0000000180), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 13:40:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = dup2(r2, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r5, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r5, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r5, 0x39f6, 0x0, 0x9, 0x2, 0x2}, &(0x7f00000000c0)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 2206.860009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:40:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x60}, 0x0) 13:40:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000008) 13:40:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0xc0}}}, 0x128) 13:40:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xa0008000) 13:40:36 executing program 4: mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) ioctl$FS_IOC_FIEMAP(r0, 0x40086602, &(0x7f00000001c0)={0xae3}) 13:40:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) 13:40:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f000002002808000800040004000300", 0x24}], 0x1}, 0x0) 13:40:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:40:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000200)={0x3, 0x1000, "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"}) syz_emit_ethernet(0x2b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa980008ee4400001d000000000011907800000000090000000000000009907812"], 0x0) 13:40:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 13:40:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xa00}, 0x0) [ 2209.009190] Bluetooth: hci0: command 0x1003 tx timeout [ 2209.015052] Bluetooth: hci0: sending frame failed (-49) [ 2209.729156] Bluetooth: hci1: command 0x1003 tx timeout [ 2209.734888] Bluetooth: hci1: sending frame failed (-49) [ 2211.089137] Bluetooth: hci0: command 0x1001 tx timeout [ 2211.094692] Bluetooth: hci0: sending frame failed (-49) [ 2211.809164] Bluetooth: hci1: command 0x1001 tx timeout [ 2211.814677] Bluetooth: hci1: sending frame failed (-49) [ 2213.169187] Bluetooth: hci0: command 0x1009 tx timeout [ 2213.889127] Bluetooth: hci1: command 0x1009 tx timeout 13:40:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x800080400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00\xd7\'\x17C\xdb\xbd\x84\x81\xc9\xe9\x99\xb2\xc2-B`[\xb5#f\xf7\xe6\x82\xc9F\xf9\xe4\x87\xb4\xf6H\xe0^{\xd3g\xa9\x0f\x1e\xca*X\x16 X\x1a{\xbfs\x90Q\xf8\xcb!\x88\xc9.\x1d\x96\x7f8\xff\x0f\xd6\x1e\xaeH\x8d\xb7Fn\x06', 0x26e1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x100002, 0x20040002}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000240)={0x7000000, 0x0, 0x0, 0x40000002}) 13:40:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x2}}}, 0x128) 13:40:48 executing program 4: stat(&(0x7f0000000980)='./file0/file0\x00', 0x0) getegid() lstat(0x0, &(0x7f0000000300)) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) clock_gettime(0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[], &(0x7f000095dffc)) unshare(0x60020000) 13:40:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xe00}, 0x0) 13:40:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:40:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xffffff7f) 13:40:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xec0}, 0x0) 13:40:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x3}}}, 0x128) 13:40:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 13:40:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) 13:40:48 executing program 1: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=""/28, &(0x7f00000000c0)=0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 2218.578156] IPVS: ftp: loaded support on port[0] = 21 13:40:48 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x17) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 13:40:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x13aa}, 0x0) 13:40:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x4}}}, 0x128) [ 2219.217483] IPVS: ftp: loaded support on port[0] = 21 13:40:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f00) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x0, 0xe0, 0x1d, 0x0, 0x0, 0x0, 0x23108, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x72}, 0x42, 0x0, 0xede, 0x6, 0x0, 0x4, 0xa0ac}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x20000001) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x0, 0x70, 0x0, 0x81, 0x7, 0x20, 0x0, 0x3f, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x1000, 0x8001, 0x0, 0xe1d236feead7744a, 0x0, 0x40, 0x2}) 13:40:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x4000}, 0x0) 13:40:49 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c0a96d320796f27fa37cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00000000000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x6}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f00000001c0)=0x8) r5 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) 13:40:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x5}}}, 0x128) 13:40:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x7f771a1e6700) 13:40:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x6000}, 0x0) 13:40:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000) 13:40:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x6}}}, 0x128) [ 2220.769079] Bluetooth: hci0: command 0x1003 tx timeout [ 2220.774529] Bluetooth: hci0: sending frame failed (-49) [ 2222.849152] Bluetooth: hci0: command 0x1001 tx timeout [ 2222.855498] Bluetooth: hci0: sending frame failed (-49) [ 2224.929151] Bluetooth: hci0: command 0x1009 tx timeout 13:40:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2c00) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1000000f) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 13:40:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xaa13}, 0x0) 13:40:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)=')nodevcgroupem1\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13:40:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x60}}}, 0x128) 13:40:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x3000000000000) 13:40:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000140)=[0x96a, 0x4]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000000040)="423d4e29e4a37b85436425b8aed5d70686da0b4b97ed9a9c14339dd2cf96324014315c03b94c53a3d9e437c58eb525269452b610499e0bd3e7a615c336d5fe3448715014e58f1ccbeed2e55ef0fd05778f5155dbe2f24e34d30c6172e5695753b282d462b82875293a1572a721a14fc6a63ad6f45183165c0e91b25ad15f52d0bec7e25549799b171b4e0d8b9ecddbbcc9288f5832e994a473f738c642e0d44ba44c49093e7201c292a4a65c0a2c267c2247327bf01e96eb5e7dabeed76975ac796e6c2b1233793e95e2795a18b024c1f5c1dec4e35df8ca545e246f3ea29e00441f29fd79e9fbd7b911af06ed") tkill(r1, 0x1002000000016) 13:40:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xc00e}, 0x0) 13:40:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0xc0}}}, 0x128) 13:40:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000) 13:40:59 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200055, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f00060000000700004cbc9f030002000000e9a6d34996d6908cb536e5f5a03fe99f6eed6a0e07920197a176c3b8002d0a8988a3e6b124943397b038f2d809a4ad03"], 0xff) 13:40:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pt\xa2x\x00', 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:40:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 13:40:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf000}, 0x0) 13:40:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x306, @random="094735d29b5e"}, 0x0, {0x2, 0x4e21, @multicast1}, 'nr0\x00'}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0xb9, 0x8001, 0x9, 0x4, 0x0, 0x4, 0x1, 0xfd, 0x0, 0x8, 0x8, 0x1ff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f00000002c0)=0xa9) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x400, 0x0) getsockopt$inet_opts(r5, 0x0, 0x5990110f26abbc6a, &(0x7f00000001c0)=""/146, &(0x7f0000000280)=0x92) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 2229.592080] SELinux: policydb table sizes (6,1275068423) do not match mine (6,7) [ 2229.632330] SELinux: failed to load policy 13:40:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000) [ 2229.662257] SELinux: policydb table sizes (6,1275068423) do not match mine (6,7) 13:40:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup3(r2, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x1}, 0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x100000, 0x0) 13:40:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x34000}, 0x0) [ 2229.728375] SELinux: failed to load policy 13:40:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000100)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x3c10}, 0xb) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r6, @ANYBLOB="02"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000240)={0x10200000, 0x80000001, 0xfffffffe, 0xfffffff8, 0x2, "d279f24e25dc42027c1d3f23a62fd30903c306", 0x9, 0x9f}) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:40:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x400300}, 0x0) [ 2229.941961] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2229.955281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2229.978835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2229.997013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2230.010052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2230.022843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2230.036364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2230.049557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2230.063071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2230.075797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 [ 2230.088497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16144 comm=syz-executor.4 13:41:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:41:00 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0xec) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x41c1, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x16}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x3a}], "0200000000000000"}}}}}}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2441, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x1d}, 0x2}], 0x1c) setresuid(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0xf1, 0x7, 0x0, {0x8, 0x3ff}, {0x8, 0xfff}, @rumble={0x8, 0x9}}) 13:41:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x8000a0}, 0x0) 13:41:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x671e1a777f0000) 13:41:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf0ffff}, 0x0) 13:41:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x128) [ 2231.809228] Bluetooth: hci0: command 0x1003 tx timeout [ 2231.814685] Bluetooth: hci0: sending frame failed (-49) [ 2232.539115] Bluetooth: hci1: command 0x1003 tx timeout [ 2232.544825] Bluetooth: hci1: sending frame failed (-49) [ 2233.899212] Bluetooth: hci0: command 0x1001 tx timeout [ 2233.904655] Bluetooth: hci0: sending frame failed (-49) [ 2234.609198] Bluetooth: hci1: command 0x1001 tx timeout [ 2234.614852] Bluetooth: hci1: sending frame failed (-49) [ 2235.969167] Bluetooth: hci0: command 0x1009 tx timeout [ 2236.689161] Bluetooth: hci1: command 0x1009 tx timeout 13:41:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2001001, 0x0) setgid(0x0) socket$alg(0x26, 0x5, 0x0) getgroups(0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)=0xffffffffffffffea) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000240)={0x0, 0x0, 0x7ff}) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'hsr0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x40, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f00000001c0)={0xf0f045, 0x0, [], @ptr}}) write$P9_RRENAME(r3, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x0, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x404}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/autofs\x00', 0x600000, 0x0) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000001280)={0x0, "d5575ae374ef82ccec7b561dfecc4718b1b1ffe1d2837c3b18fe6fd171f51774", 0x10, 0x200, 0x7fff, 0x10, 0x2}) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0xfe) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r9 = dup2(r8, r7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r11, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r11, 0x5}, 0x0) r12 = inotify_init() inotify_add_watch(r12, &(0x7f0000000080)='.\x00', 0xfe) r13 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r14 = dup2(r13, r12) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r16, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r16, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r15, 0x84, 0x1, &(0x7f0000000100)={r16, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r14, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r16, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000100)={r16, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r11, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000002c0)={r11, 0x5}, 0x8) r17 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r17, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="0fae050f015c27d0ad00000f20e06635040000000f22e03e660f3a0953f9056467f2af0f01ca66b8c10000000f23c00f21f86635030005000f23f80f20e06635002000000f22e0baa100b80000ef", 0x4e}], 0x0, 0xcffa808b513f9dfd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r17, 0xae80, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) 13:41:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:41:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 13:41:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x8000a0ffffffff) 13:41:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x128) 13:41:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffe000/0x1000)=nil, 0x8, 0x7, 0x10, &(0x7f0000ffd000/0x3000)=nil, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x58b9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x4824441a65a9b42e, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000001c0)=0x7) r14 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x8, @loopback, 0x41c8}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e20, 0x9, @rand_addr="5b6244b3cce18c2e2ef096bc661a062a", 0x3}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x1f}, 0x4}], 0x90) ioctl$KDADDIO(r14, 0x400455c8, 0x6fff) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:41:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:41:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 13:41:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x128) 13:41:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:41:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 13:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) 13:41:11 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:41:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000758, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)='8', 0xfffffffffffffd84, 0xfffffffffffffffd, 0x0, 0xfffffffffffffd62) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fedec6fe648b8a36fad8330b30000ae0fe51f4f8bdd3eb2561b29ed657b1a93b48f7ba3c0b78202d3de70af1f4758c21db349bd6d7be5a8d4e2c118a3ba6f5f8f0b43571ac3904416a8a0c14e1704be16c426ab682d659a219afff2915220cccce5a", @ANYRES16=r3, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x20, 0x2000) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000240)={0x101, "bb0c24e075382b64b82d8376dd5673348e4166e82fb2f5c35ba0449b4004a177", 0xe00, 0xea5, 0xfa, 0x8, 0x1}) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0xd}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xffff}, [{}]}, 0x78) 13:41:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 13:41:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) 13:41:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x44204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x80000000000000, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xc5, &(0x7f0000000380)={@remote, @remote, [], {@generic={0x6558, "6b17cd644850d7dcbdc701debf360ab00efd20eb68463bcdefab618b36150233c8c31b239c0c7338b575b8a66465971e789974c63c97c4acb09b57856b905f41dfc597efda66581a3d1f3bae789325044de07ddc52cdd58af62ea1147b506cfa26a236f1122d4a840548289c59e0520ca2d6db61e9a129eec8c44323721088ba6409e3716e3375b9e43c447cfbfcadbd3e79dcc48a3ed32c6b46fb990feafd457970617be2a670e4afd9e88a5d53e6270c91c75449c212"}}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x40, 0x400000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x10, &(0x7f0000000200)={&(0x7f0000000480)=""/254, 0xfe}}, 0x10) connect$can_bcm(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003340)={0x0, 0x0, 0x0, 0xc473}, 0x10}, 0x70) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4da72aca94d883e2ff29e1f446b573d4d53cf93079a48da1a1c5567b7ada164cdaee35e2625a386cddb707f54ffefc19be68b6331da2aeb208e521a3dde5939ab25a932fae347233a6d5b7e4c2965ef5590b75b2a4e57b36ef708f7d12a835823727054b250cb14bf6575a", 0xb2, 0x10000}], 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) mlock(&(0x7f0000bfe000/0x400000)=nil, 0x400000) chroot(&(0x7f0000000140)='./file0\x00') lstat(0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x40000) 13:41:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x128) 13:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xa000000}, 0x0) 13:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xe000000}, 0x0) 13:41:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x128) 13:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 13:41:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x128) 13:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x40000000}, 0x0) 13:41:11 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, [], 0x6}, {}, {0x1}, {0x0, 0x40, 0x0, [], 0x2}, {0x0, 0x0, 0x3}, {0x3}, {0x80000001, 0x7}, {}, {0x0, 0x0, 0x0, [], 0x8}, {}, {0x0, 0x0, 0x0, [], 0x5}, {}, {0x0, 0x0, 0x4}, {}, {0x7}, {}, {}, {0x0, 0x85}, {}, {0x0, 0x0, 0x0, [], 0xff}]}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x6) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x1f, 0x0, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="10000000070000002000000000000000"], 0x34, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) clock_getres(0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x2000) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x4, [], 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/4}, &(0x7f0000000440)=0x78) socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 13:41:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0xc0}}}, 0x128) 13:41:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) [ 2243.489162] Bluetooth: hci0: command 0x1003 tx timeout [ 2243.494721] Bluetooth: hci0: sending frame failed (-49) [ 2243.920101] device bridge_slave_1 left promiscuous mode [ 2243.925631] bridge0: port 2(bridge_slave_1) entered disabled state [ 2243.970288] device bridge_slave_0 left promiscuous mode [ 2243.975921] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.209129] Bluetooth: hci1: command 0x1003 tx timeout [ 2244.214672] Bluetooth: hci1: sending frame failed (-49) [ 2245.569217] Bluetooth: hci0: command 0x1001 tx timeout [ 2245.574649] Bluetooth: hci0: sending frame failed (-49) [ 2246.299088] Bluetooth: hci1: command 0x1001 tx timeout [ 2246.304510] Bluetooth: hci1: sending frame failed (-49) [ 2247.659078] Bluetooth: hci0: command 0x1009 tx timeout [ 2247.761276] device hsr_slave_1 left promiscuous mode [ 2247.802663] device hsr_slave_0 left promiscuous mode [ 2247.843815] team0 (unregistering): Port device team_slave_1 removed [ 2247.856330] team0 (unregistering): Port device team_slave_0 removed [ 2247.867337] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2247.933517] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2248.015935] bond0 (unregistering): Released all slaves [ 2248.369224] Bluetooth: hci1: command 0x1009 tx timeout 13:41:22 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000380)={0x8, 0x0, 0x2, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f00000003c0)={r9, 0x5}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000400)=0x1f) r11 = dup2(r10, r2) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x0, r14}, {}, {}, {}], {0x10, 0xa}, {0x20, 0xb32323e1dc560ea8}}, 0x4c, 0x1) r15 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xce2, 0x80) ioctl$PPPIOCATTCHAN(r15, 0x40047438, &(0x7f0000000340)=0x4) write$FUSE_CREATE_OPEN(r11, &(0x7f00000001c0)={0x28, 0x0, 0x4, {{0x1, 0x2, 0x8, 0x9, 0x2, 0x8000, {0x2, 0x1ff, 0x0, 0x5, 0x200, 0x3, 0x9, 0xe9, 0x5, 0x4, 0x2, r12, r14, 0x80000000}}}}, 0xa0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000040)={{'gd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r13}}) 13:41:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x60000000}, 0x0) 13:41:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000340)='trusted.overlay.origin\x00', 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000440)='trusted\x00', 0x0, &(0x7f0000000740)='/dev/zero\x00', 0xfffffffffffffff9) keyctl$unlink(0x9, r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000380)=0xffffffffffffffb7) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x4, r6, 0x1, 0xfb, 0x6, @dev={[], 0x2a}}, 0x14) r7 = request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/dev/urandom\x00', r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r7, 0x1000, 0x4b}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000000800)="af194d5bbe431f3f93e57f30e03d426767636328a6ef16640d8d762a1262050600c3f9ff40a6802fee15bd33e6e5dfeed3d6838ab5774b44c53e7f792dd8aaf9fa35306e1fa2c4da8ad5f713ffced43c6f45d1c76dc4f3ad26274b1bdd3ed2fcfce95f274bbd3fed6556ec5a1b8a98bb6a6d9d45f00630fcf746fe41e7516467b6915406f2722f7585bc68a629b6844bd9ff6f4473ff79d7a9cec6435550336c351ccd7579a344760a0befffc835caea285f70cccd7a50b4044b0fa3a5588a17eef0fa6c82f43c1f300624e22abe140c0ed8f8635e3b43f966d9bb8675b247764ca87dadf59b7db02bfe9ad28f604f7006bdc446df1389c7799f4227fc8d47d96ee3c106018f97b5b5633dd8a844e8b03443d122973d46cb8f906f5958a7905d04ab38e614f21130f0c31281530745373d4aa45ae9987dc6d9915b1ee305b4ee3fec719e8b36a0bf53d1c9f6e207e6e78378ba51c273fdbf4c40e71fdeb57b23ea741ed5e5635dffa4fd66c24c8073af19a3eb83ac0da0b615204db85950d646ce2e5e22a9febcd0c35da6be2224855ec25a305e7b470a4c3bb1c0c8dc212de17fb0a493eb70a9b5990a9f85a3e29c2b661435ca83280712abc20e22b249e46e837b5afee1ad90af6ed9dd971544d884d298da9c8036e9ca36145923b26827546c82885f201dcbeeca18f6a6bef3e04f54a942294baeb1720356ae28ecf83a973d47821da18550f03a01e60d78bbb5dfc0fcee22466237141e8ceeee9c1e01a8eb2e0b56d6b2c535cc3eaf89cebb109cf180bcf69ee3ed149b21ea1b4fe08ba7bd195e9e893a85a7b913823865fe1b34c439618d8c9b8dac5cbf49c7505e2f9500d0d47994e2b290a4cb71c85d201de3864e9cc4c4fcc86a8d1b2878255287747213a22c292c3d8fccd253349d393fa91d52b9149af542810f42d7d396cd1d8094f3c950003f21952233c5bf96b05e9d2750781258de1dcfdce4257cc476df9814c63c8188c3156c69971c2aac4a054fdb20c14a0411a987f56c1bc5e87aab8e16269fcc0eafac6f879eba83d937b30054dbc7fc5f99f575bd905b4cf6f15f156b221ebccd9025bc7ef356775db7e263f7ae134f98f13a543b49a58b6602d2a4cfba6870168282671a426e18adb02a0f80e3916a911aac2b0e87c5243b15325d456f2eb2921b94191335f3797b9f50916482603eb11302fe46fb3b7fc6add78917863f631c2351420f9a97f20b390e64d9d2f36bb6dbad42211325c96fed7d228fbf34b1b7d62cb82da09c7b7f6b89c4bf166e8cc4a7f2162027f1373a52277e968ff0444a3ab49653d839b9db7cb5a1f84e448cc3fdff6dd60953a37512d3491145255d76b6dec1cd42a672fd3725f83c0049e88e29792a8db74f767b8391d37e3a436a48c0e26de59c2a3ee96ed96ee947841a1319fce721476697a5071933b1f86fb26c084f8e7f5d16ff2e931dc62aa1eda2e4d4a3d07e8d1508c1422566de51acf5fd28a0a82e19e0bbcf3e87a53daa56e9a6004db87c74662181d50596920943b2885c087643052e83181b64860688997a60448e986fc15de072b5368dd8e6a001c301033c002c09b33b7c8c978505a885c653376fcefe8934100ce1fa92e529c91e7b107a80d09cf38480896fa24bb5d295a5ebc8da18bbec5c0b1247de1db5f8c7494eac29a36057365586ecb8f71c7ce0d7e610559d9f8a170a12b671ccc7d86e768ea33947d1b0c392f55a97ae09ea593e206cddf5bbccc485ac980cde2c7315ccb846fde1ecedafba2cae26374edd5f8b42f1b0bd70c10c07ee6d61b397855935ae1e1be707fd4803a44084290bc7908ad82b73a5d9da750d2c318c66227565f9410d679bb7c153c6920087a09cb106a6b096154adec9357bcd9dccdc7665995370d45737f7405935d559725906a34c7dd2c6079f5125747831d0a92544660a86000c8bc639bb9854192d3cec3639f2fe563f86a5b86fb60d205c52ee76bf0848bb52b23d1636e53b1c62de234fbae3caa71e0245f5d808b7deceded1fe48ee29befefece92368bac9c76ca3e5c670bc94895a7642226040ddf9d72f75b399f3119f6abed8fabc4266eeb8965387eb41cb8afb75e10419d41b48519cb5fc1c186f74e0c79713b384e496baf7a6bf11a08e3d96eee19263fd739c33d167c9917132295cae9764b3dc1a8e7bca5405b8259a384286e8a7d0f1c4db586aa87817e6e4ba56e1a18d7129b066831d54eb19edf24cfc5b7113244e49a103bca0ae571e91495334088c7370fe9b7e450f68a7e953a911cbdcf9d4773688652e10c72ab9b0c51231e9f7fb9913e5b7196c7283bae567e99a0cefafebebbf87fe9e1346293a78558676088ad3db35e06a8d71dbf550038c7185f980cebd2ae6c21d6d717ec41ea2330c90df46d3de456774b5e8c7cc22ebf5cae04ecc13a755d6a3f20690e0648c2b0185da291a565a21a7c218cd7a1e8f43522a0b7a62000d1b22e56f9c4973980545195c227b057d1cf9ef466ac4ed166c766cd464a9528896472323b69b40d7cce454f7cc5c3f2bb5a925c70fe2478336a748e554f771ab3837eaed110fcdccbf91e4e0f0576e5639095e1c09eda299b2ae6dc5cbe3313475e48637d572521b0b1a4c1ed7192c04789a86a70b4dbc452a30195cf267d4b6a7cd550bf2db4567924ba17a1ebb4edb05ea99cfc83c77ff7fdf8158de5c3cac1940b2d227cbbbe19516221c090be42981c9ae8da122abdcf363096047bda7f3a7d0e71703029576fbf59b8cde145440872c42255e9b2498a75563d85253ee70a9ade56e58c894df4f917475905ef766194a4321ec04d8cee7b20ce6bc3eef75318d98469482a54250b6c08dcd408fe24206c1221a0e3997f752c5a4ca0f58f28cf178c1d25aa4d9ff9fef17ae3c15f66e5cb7dfc83fe5b729ff44a5c5b6236e91693328e8af4d065c31538b5c43b007fec0132cb8ac0b43adb3bbc8fc48a90b1c2515667b8ede7a30c651e2aa629e28db24f636c61309310cad8e3992735d0d6c322c07e924aa5aec9ee3f56770d39f0aad758a963b1dcc403a1ca33eea03a9737e0270b4829369a0fd50bb0934ef5a01045aa0c464b80762b83a6065ba0f90da3010cd2efa85dfd58fe68a6ee32bfd031088d06abc246153e5ca02b3668982614e570bd623bd66729f40fcfc480b07dd1c319043b0b23eec3f3150514fd6f5f43c806c6c645a6f34e03ce0b1f21f5a02b3599da6a80f16d84a378f3ae827520faf884fe628b07ca488320c78a844c07742ea309e0536aa94efdeab3b4581fcaa605358c02ccc00c8afd97db02c005506637200a3072e9058863ccded5c50cb2ae42fbf762c440088c71fde3401b5c5f4fb7b802b68954ae09daab69c0cfb34700e48acc206ead62561954a85c19f02a691f93bea30a7d102258448fcd91c1bd6f59a969a63f7dd6e352b0d0aad404ca2c18a0c6e671c46080ec31c9e4a69553e974c3023268fc321aed7018981be783b50d72c0adb3fb01ffedcd8e23399d3ba582c8babb013b6ad056fd8bdf2319f6cfb1e2f485e132d4603e81f5928f424489fee596c0fa257450e5b4a5c456968bfa2ca319f18315dd24e50849e69e5b72ae9ca6ca04c2f0b0c63d715938f38be7e51d4d6db1ab167c2086094505718fe7e6ca1330932d4863c19556f0a22bbab36ed924f5da8fba3c2c59685ac9f9141e2aeba168358498f471903fa0e7d4e92d1fc1639bdafb44b535e6bd9dd9d0442b76dcd5ddac03294dacfa548e2b203698137ee00eca7ce04c57a076b00b930207bd9cae1db3737040255b0d09cace11adbfa12534295b7a59119fe1755b3a85c71c838059b3cd15d0c59f17d8f3c73447a24ce02532c679c60afe86974d69f2aaa6768b050a5362c4f03e43459c5c294813fe2c2b6c97c53e0b9b89ec2c1aba50d7f6bd2a1dbb7c42a96bef1543872f538a340b2ce1417051f8f7eb0f46bd64398c06fe92c14e806ddb8c8bf67ca56e8d7a3ca3518c4ad72e0c6669a7c2d119a0cd55daafa888123f713056cdc6b5ee60abffcf4e3bb71b0b57d69a6bee118bfe7c749fea3a80830940fa64877cbf993f54c4c50be826f21c98e984ee235cf4e425a3c0c527e2c68c3955ae482226d7b85919e6b53016ac784b97ad09e74aeadc9e480ae3da8b886b49ee7c787011e4693fdea6de909d79f9a4f23ae3ced780c0f0ba9987f8696307ca0e832291b799d47ed48536e2077c1eab7109d7a7a60e352c2c190093e028cfe05fa7e2b03d935bca39352f108863851d35cd11d75d1999a2bc67d26be96ea991bc6b34c030e4e76978bda39ce11bfc2edb35d4bcd8da19c74e363d94de738b3e680f842b2d411a46ffc6ac46bc507f5ba91bae2f19e0140f42f65e52c7b5a8840af249cbdbc7e852af4a5f91db5c727ef325e85c09fa785f90969049612c6bf10c7c5ec2849d852a208e906d505da7ee48444a26d83148dcfa8ec9cdd8d7b8590a43bde1af44da01721072713d5fe713429bb4b9b10dbe836c4a79e2787a6d0da1885034a1fe58b6c23de57295c8b5c4b249467285300e54e046db632892eb8ae49321b7b704a081545673833c1f99ee88ac5df2d5e210b153b1323a0c552818ff0034f7dd3f21b30d3ae47d742c7f70560fb376b34451f77857e8a380c989e02a3e98dfe80bd83ac7f0912de5427f497232c66e45f7016ae9d17071b1b2e19c45b3289bf1207d65a77368030ea47e8ac4005cee1dd7e790d204d100a88140bd9feeb70a5962f3133b6e62f61806c1430ef61e63862c9fdf0fd9671b0d1d06de6e0969708b5c84ac6bbd77d2bab22462dc1bc21c26bd298b29b34fdfedbd39337a3ec0f09465ac847f4b1a14a507e41fc2b2068efa50112fdc22b9fa847dd017690f6269a812b9bd53bb8630fe84d144a80c7661c09f7acd56ac7866f59e08af283ac5050cc484d319ec2f0255452bd50ed2b77eac9c2943411a7d5649c958ee9cd0ce83ca8e3c2a9708e249e784a0c0c609e77ee2badd6abef0156f05df766eedcf80c45a1c842f9e57e8861c7a6d7b1b0e0c6f60a8fc92d34ee8fb91ed0c8ecd95c37e081a76d5f020b378edcf5d53a61c5acfaa264daa7ea807482cde84dd31a7b19a8178a220c501145a642d9e768bb1c61524f204b07b0ed94b64c1977dae42b74f486d95179cb37649370a4be11342c5424ba424d3e2a852554645f08d726146f05e40042952d5f90c306d19e34e296edad1a975ef7bde9ee2c94d8cee110b7de156e3a2c07a3cb39457f7fbc33d526c6c6420724953e304e75c6a75ddc107cefbff45ca9b5ce719c8c49d8d50f373609e3755a17f61e3b907d90d9f3518cbb466c3869d9c54b38bbab530dd9b8a508980918812a87410eb5bc355924148163e897c3b709fa8a363aa37bba328b7334205f4697064767aba11180704510f3cc6c474002a50e847d2251a2bdb943a2a88996018cbc987225ac0cd16e85d54da14380ecbda5ae562257b75ab4edbede41d64dfd3701b78aea49523ed0ec9b42391ae21fc2dcba00c3cbf8de30b0aaf75b1fc4749d87fe80d2527fb18a791943cddb762c90acc464bac60fac4cfb58dcf4f63c845d0d62d24d6a28d702bb8d10634c83cc5bcb05dded4b6e88a909be5306f040ef5c3b29ae157c1b25dd569cca7c3f7c9e9ccdd07cbb6bf9a81cd52f98424f5b928d1f34eabc70786fdd1088fb464f503e4da20cb7cf75f0fbe2c62e81e5aaeb7d4b679be0dad0f37854846aaedba31924a466564fa41e9df949a3b4ebf78fe29f7", &(0x7f0000000240)=""/75) r8 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r8, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:41:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:41:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 13:41:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000000c0)={0x1, 0xfffffffe, 0x7, 0x84000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)=@xdp={0x2c, 0x2, r7, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x100000000000003}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x5, 0x1, 0x25, 0x2}}, @mark={{0x0, 0x1, 0x24, 0xfffffff7}}], 0xfffffffffffffde8}, 0x4000000) r8 = socket$inet6(0xa, 0x1, 0x6) getsockopt$inet6_buf(r8, 0x29, 0xd3, &(0x7f0000000240)=""/232, &(0x7f0000000340)=0xe8) fdatasync(0xffffffffffffffff) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @local}, 0x10) 13:41:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 13:41:22 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8b, 0x0, &(0x7f0000000000)) 13:41:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x128) 13:41:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xa0008000}, 0x0) 13:41:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 13:41:22 executing program 2: 13:41:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 13:41:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xaa130000}, 0x0) [ 2254.446910] IPVS: ftp: loaded support on port[0] = 21 [ 2254.520030] chnl_net:caif_netlink_parms(): no params data found [ 2254.554889] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.561518] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.568818] device bridge_slave_0 entered promiscuous mode [ 2254.576026] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.582676] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.590342] device bridge_slave_1 entered promiscuous mode [ 2254.610613] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2254.623694] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2254.643428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2254.651131] team0: Port device team_slave_0 added [ 2254.656856] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2254.664593] team0: Port device team_slave_1 added [ 2254.670148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2254.677496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2254.732503] device hsr_slave_0 entered promiscuous mode [ 2254.770008] Bluetooth: hci0: command 0x1003 tx timeout [ 2254.770892] device hsr_slave_1 entered promiscuous mode [ 2254.775417] Bluetooth: hci0: sending frame failed (-49) [ 2254.819782] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2254.826894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2254.843846] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.850525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2254.857294] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.863778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2254.899931] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2254.906034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2254.918048] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2254.928809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2254.938796] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.946069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.953837] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2254.965644] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2254.974013] 8021q: adding VLAN 0 to HW filter on device team0 [ 2254.984930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2254.992768] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.999224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2255.011190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2255.018815] bridge0: port 2(bridge_slave_1) entered blocking state [ 2255.025237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2255.044173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2255.052104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2255.065308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2255.076561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2255.090107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2255.101396] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2255.108242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2255.116164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2255.131855] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2255.140110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2255.146859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2255.160003] 8021q: adding VLAN 0 to HW filter on device batadv0 13:41:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x128) 13:41:25 executing program 2: 13:41:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 13:41:25 executing program 4: 13:41:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xc00e0000}, 0x0) 13:41:25 executing program 2: 13:41:25 executing program 4: 13:41:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 13:41:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x128) 13:41:25 executing program 2: [ 2255.569137] Bluetooth: hci1: command 0x1003 tx timeout [ 2255.574795] Bluetooth: hci1: sending frame failed (-49) [ 2256.849232] Bluetooth: hci0: command 0x1001 tx timeout [ 2256.854683] Bluetooth: hci0: sending frame failed (-49) [ 2257.649195] Bluetooth: hci1: command 0x1001 tx timeout [ 2257.654633] Bluetooth: hci1: sending frame failed (-49) [ 2258.929299] Bluetooth: hci0: command 0x1009 tx timeout [ 2259.729150] Bluetooth: hci1: command 0x1009 tx timeout 13:41:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) 13:41:33 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0xfffffff8}]}) r0 = epoll_create(0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 13:41:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 13:41:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700100002400ffffff7f00"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x170}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:41:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0) 13:41:33 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x128) 13:41:33 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x128) 13:41:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 13:41:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027327243426c7d2d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deffffff18934af3a46aa18d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) [ 2263.887687] audit: type=1326 audit(1573479693.773:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16768 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 13:41:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) [ 2263.978967] ebt_among: dst integrity fail: 161 13:41:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) 13:41:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x128) [ 2264.578798] audit: type=1326 audit(1573479694.463:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16768 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 2265.889331] Bluetooth: hci0: command 0x1003 tx timeout [ 2265.894770] Bluetooth: hci0: sending frame failed (-49) [ 2267.969227] Bluetooth: hci0: command 0x1001 tx timeout [ 2267.974868] Bluetooth: hci0: sending frame failed (-49) [ 2270.049387] Bluetooth: hci0: command 0x1009 tx timeout 13:41:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 13:41:43 executing program 2: r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1000006) read(r1, &(0x7f00003fefff)=""/1, 0x1) readv(r1, &(0x7f0000000180)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fchownat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1000) ioctl$TIOCSTI(r4, 0x5412, 0xfffffffffffff001) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) 13:41:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 13:41:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}}, 0x128) 13:41:43 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfc00000000000000}}]}}}]}, 0x4c}}, 0x0) 13:41:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@mcast1}, &(0x7f00000000c0)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4) 13:41:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) 13:41:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:41:44 executing program 4: socket$kcm(0x2, 0x20000000002, 0x73) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0xbcd8781b067b5e83) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f6698c3, 0x0, 0xffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$kcm(0x29, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="51c880468d1dfd85"], 0x8) socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0) write$cgroup_type(r6, &(0x7f00000003c0)='threaded\x00', 0x9) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) write$cgroup_pid(r3, &(0x7f0000000280), 0x12) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfc28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'yam0\x00', 0x1400}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x1000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00#\x7f\x80P=r\xc4\x17I~\x85\xadq\xd6\xde@\xb3\xd5\x9f2R\xa3Z\xd3\x9b\xbd\xa1\xa3/\xc0\x91J\x01!8#\x04\x0f\xc3\xb7\x95\xdc\xaa\x91\xfb\xa1]PVH\xaa\x19\x04\x80\x94\'\xc7\fL\xac\xcf:\x92N\x94\xde\x87\xc4\x9b\x87\xd2\xcc{X\xedVr\xecP\xf9&^I\x9f}3U?\x1a\r\x9d', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r7, 0x0, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', r7}, 0x10) write$cgroup_pid(r3, &(0x7f0000000000), 0xfffffea6) 13:41:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 13:41:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r5, &(0x7f0000000380), 0x2, &(0x7f0000000480)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0xff, 0x5, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfab9fb5a6b3e3c48, @perf_config_ext={0x1, 0x100000000}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0xa) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f00000006c0)) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x0, 0x7ff, 0x68649290, 0x0, 0x0, [{0x9}, {}, {0x0, 0x73}, {0x0, 0x5c}, {}, {}, {0x2, 0x1000}], 0x49, 0xff}}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) prctl$PR_SET_TIMERSLACK(0x1d, 0x3) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BLKPBSZGET(r10, 0x127b, &(0x7f0000000100)) r11 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f00000000c0)={0x543}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000080)=0xd4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)="5bcb6ef8796e1eb0d972e3bfb56a6a063188d5f567c8b8ac5bdf15742a12377890ff48dc050000006b4bbbbd3a7252ae0abdd906b769f61606b630a82fbb97000000000000000000"}, {0x0}, {&(0x7f0000000400)="450d6099de3ff1cb7b92bef6a62d1c46208099ab4a3c62694dcee4db30c0c7f46be47ffb05b4428cf8b3c6e7fa9b1519cba394e91c478533af0bf563b64379983cd1f353b3ae3dae76", 0x1d}], 0xfffff83, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 13:41:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x8000a0ffffffff}, 0x0) 13:41:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x128) 13:41:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCFLSH(r7, 0x540b, 0xffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x1e1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002500e50d000000000005000000000000", @ANYRES32=r8, @ANYBLOB="00010000ffffffff"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:41:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 13:41:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 2274.479771] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2274.507407] selinux_nlmsg_perm: 5 callbacks suppressed [ 2274.507631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 13:41:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x128) [ 2274.574692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.599965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.640598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.673862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.693340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.714276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.728504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.741337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2274.755691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17165 comm=syz-executor.2 [ 2276.129125] Bluetooth: hci0: command 0x1003 tx timeout [ 2276.134687] Bluetooth: hci0: sending frame failed (-49) [ 2278.209207] Bluetooth: hci0: command 0x1001 tx timeout [ 2278.215799] Bluetooth: hci0: sending frame failed (-49) [ 2280.289195] Bluetooth: hci0: command 0x1009 tx timeout 13:41:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x203, r1) getpeername$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x6, 0x0, 0x4, 0x4, 0x9, [{0x5, 0x10001, 0x5d1d, 0x0, 0x0, 0x2908}, {0xc8000, 0x20000000, 0x10001, 0x0, 0x0, 0x500}, {0xfffffffffffffffb, 0x3, 0x5, 0x0, 0x0, 0x180}, {0x9, 0x5, 0x8, 0x0, 0x0, 0x609}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x90b}, {0xc76, 0x9, 0x4, 0x0, 0x0, 0xa2a6a879032e1fe8}, {0x10000, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0x200}, {0x200, 0x4, 0x2, 0x0, 0x0, 0x200}, {0x1, 0x7, 0x0, 0x0, 0x0, 0x1080}]}) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000000)={0x5, 0x0, [0x3, 0x1, 0x5, 0x80, 0x81], 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000300)=""/126) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:41:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400200, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000000)={0x400, 'syz1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40096102, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x448e0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 13:41:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 13:41:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 13:41:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x128) 13:41:54 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x18, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, 0x0, 0xb, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x7, 0x13, &(0x7f0000000180)=""/115) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @rand_addr, 0x1}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "944eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "f1ffffff0800"}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x4100, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x2) creat(0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) socket$pptp(0x18, 0x1, 0x2) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) listen(r5, 0x8) 13:41:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 13:41:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x128) 13:41:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'lo\x00', 0x5}) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000100)={'sit0\x00', 0x4}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) sendmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001640)="b1bba872d3e3e033e6cf0502caa001b49d65ac284f92e6565d548a4dac92ce3a0b72711f0d3b906c56b3fd5e531ba1d4ab5935dc98232223d5e13ea4d5b1d71f106853cd5c10141d", 0x48}, {&(0x7f00000016c0)="410656b801d1716e25ad1e7ef626b892d0581c6c2059a5f6457feb9ca19b93974117aa5c4a1d2c62d62e9c0624e8db2fbb3a4b59f2fecc5a8bd27bdfc298a3516e5294cc78f543c9993f0619efcbe3dbce61d2ac36222f1e28f1cec73cc87d3bdcce71a1928a325e53cfdc4f35edc704c0969f26bceffbdd71b98b1bb4ffefad862f0f825e3b24f406f70df970bf29e5610958a9b02787e2084e437dd8262f17980ae50da4625f23473ae11e02040c4a", 0xb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001d00)="bda33070841aa844c63f738a41a6ceef4c277992420e48ff4eafc50047d0c9f653386a94ca5455fee768388678d58cc86823d34d6e40ad26b2496fd5bf19efaf73aa8eb9ade892412d7234c6e1f83d4953414a5b05d496afb1a3d95a6c3b6189424ba92b7ff334ae918d39788545b5c467e430d58b1f2154", 0x78}], 0x1, &(0x7f0000004100)=ANY=[@ANYBLOB="10000000000000000000c100000000007d00000000000080000000000000000000000000000000bd"], 0x28}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000140)={0x39, 0xed61, 0x8000, "ddf8ad94e03380d400c1dd12db96187a3a1c105d089440e0e8e28994a19327beb7ca276ddc70ac0ab49459f71875ae3b64f67600d1b9659e6e"}) r8 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x800, 0x0) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000002000/0x2000)=nil, 0x2000}, 0x35e765d42df08015}) 13:41:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 13:41:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 13:41:54 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x212900, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000002) write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14, 0x11, 0x0, {0x20, 0x3, 0x3}}, 0x14) fdatasync(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$nfc_llcp(r4, 0x118, 0x3, &(0x7f0000000180)=""/81, 0x51) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="674466980000000000000000000000006517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3072f99f16d06589e03469637a7267592938766010a35efd21affe2009e107e7ce4fc59489d665e4178e696fdc31a381587a5960ac2022d45136803a9e841e84f03d05ebc7e87c10dfc8b2cf1"], 0x74) sendfile(r6, r6, &(0x7f0000000200), 0xa198) [ 2286.369160] Bluetooth: hci0: command 0x1003 tx timeout [ 2286.375576] Bluetooth: hci0: sending frame failed (-49) [ 2287.179197] Bluetooth: hci1: command 0x1003 tx timeout [ 2287.184642] Bluetooth: hci1: sending frame failed (-49) [ 2288.449223] Bluetooth: hci0: command 0x1001 tx timeout [ 2288.454831] Bluetooth: hci0: sending frame failed (-49) [ 2289.249271] Bluetooth: hci1: command 0x1001 tx timeout [ 2289.254712] Bluetooth: hci1: sending frame failed (-49) [ 2290.529185] Bluetooth: hci0: command 0x1009 tx timeout [ 2291.329227] Bluetooth: hci1: command 0x1009 tx timeout 13:42:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xa00000000000000}, 0x0) 13:42:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x128) 13:42:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 13:42:05 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x9, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$CAPI_GET_FLAGS(r4, 0x80044323, &(0x7f00000001c0)) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='>/cgroup/syz1\x0089#QD\xf4pSD=K\xa0\xe4\'\f~2\x93\x9b\x85&\x9ef\xe6\xc5\r\x83\xf4\x95\xdd\xc2*\xb0\x80R\xe6!g(\xc5\xf0;h\x89gf\xb5\xa9d\xff\xf5\xdc\xe8I7&\xe1\tC\xbb\x92\xc4\xf6\xd5\x0e#1g)\xf2dA\x98$3\xd9j\xe3(', 0x200002, 0x0) 13:42:05 executing program 2: write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf) pipe2$9p(&(0x7f0000000140), 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0xbb8, 0x7, 0x3, 0x6, 0x5, [{0xde, 0x6, 0x4, 0x0, 0x0, 0x4}, {0x0, 0xfff, 0x9, 0x0, 0x0, 0x481}, {0x6, 0x87d1, 0x28f, 0x0, 0x0, 0x200}, {0x8, 0x9, 0x4000000, 0x0, 0x0, 0x40e}, {0x5, 0x1000, 0x401, 0x0, 0x0, 0x1}]}) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() r4 = gettid() sendmmsg$unix(r1, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00af000000140000000000000001000000010000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}], 0xfd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(0x0, 0x80, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000002c0)={0x80, 0x9, 0x1}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KDADDIO(r9, 0x4b34, 0x1) fcntl$dupfd(r6, 0x0, r6) write(r6, &(0x7f00000000c0)="a5dd0d34446b5887c3955f6e25689f0acf0681c6da82c53957919be6ffe59a77e0ec84c5269c72eea8fe8a8cc4450ab03f2ee9a7a9d50841bfeb4e865e3fc1897544d77243935c8e2aee1d40a71cee7abf3e9e97edf14ad0979721b6e9f292dbf99c32f88c4d359049bf859f2f22a9fdc22ff1", 0x73) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000040)={0x40d, 0x4625}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) unshare(0x40000000) 13:42:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x8000) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4) [ 2295.822632] IPVS: ftp: loaded support on port[0] = 21 13:42:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xe00000000000000}, 0x0) 13:42:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x128) 13:42:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) r1 = socket(0x10, 0x0, 0x0) close(r1) socket$inet(0x2, 0x80001, 0x84) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x500000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x8000000, 0x4004400}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x4) 13:42:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 13:42:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x58f09c33a1a99f06, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) 13:42:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 13:42:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(0x0, r2, 0x5, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x161bb09e86804789}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x140}, 0x1000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) io_setup(0x0, 0x0) r6 = socket(0x40000000000010, 0x802, 0x0) write(r6, &(0x7f00000003c0)="fc0000001d00071bab092500090007000aab06000300000000004c93210001c0000000000000000c0000740000039815fa2c1ec28656aaa79bb96b46fe1394b3000000bc00020000036c6c256f1a272fdfff7f918a55f5e3ffcde88e3e34d07302ade01720efc516373a9564ca6c40bf5be36f09d3d5bbe633439bc7735f7d981c4f260c71423e2e80772c05de18425ef92e475eb8b29d3ef3d92c83170e5bba42463ae4f5566f91cf190fbe6a7d38740201dee515ff0dcdd3f295ed94e0ad91bdd5e354e0a644caee08a50734babc7c3f2eeb57d43dd16b17e583df150c0258a503f9c780ac811fe4af3d0041f0d4d75cd3f4ff2d4d375040b1a944", 0xfc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000004c0)) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000280)=0x4) 13:42:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}}, 0x128) 13:42:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x4000000000000000}, 0x0) 13:42:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000) 13:42:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:42:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x128) 13:42:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x6000000000000000}, 0x0) 13:42:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) r1 = socket(0x10, 0x0, 0x0) close(r1) socket$inet(0x2, 0x80001, 0x84) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x500000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x8000000, 0x4004400}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x4) 13:42:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x6018230000000000) 13:42:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x128) [ 2298.369296] Bluetooth: hci0: command 0x1003 tx timeout [ 2298.374748] Bluetooth: hci0: sending frame failed (-49) [ 2300.449300] Bluetooth: hci0: command 0x1001 tx timeout [ 2300.454828] Bluetooth: hci0: sending frame failed (-49) [ 2302.529232] Bluetooth: hci0: command 0x1009 tx timeout 13:42:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x128) 13:42:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 13:42:16 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x128) 13:42:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) 13:42:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) r1 = socket(0x10, 0x0, 0x0) close(r1) socket$inet(0x2, 0x80001, 0x84) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x500000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x8000000, 0x4004400}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x4) 13:42:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6#\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x703}) prctl$PR_SET_TSC(0x1a, 0x6) r2 = open(0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 13:42:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xaa13000000000000}, 0x0) 13:42:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x128) 13:42:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xffffff7f00000000) 13:42:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 13:42:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@isdn={0x22, 0x3, 0xf8, 0x1f, 0x40}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) accept4(r0, &(0x7f0000001640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000016c0)=0x80, 0x400) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000017c0)={@rand_addr, @initdev, 0x0}, &(0x7f0000001800)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001900)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000001a00)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r9, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000500)={0x0, @empty, @multicast1}, &(0x7f0000000540)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001a40)={0x344, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @lb_stats_refresh_interval={{0x0, 0x1, 'lb_stats_refresh_interval\x00'}, {0xfffffffffffffd3b}, {0x0, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x5c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0xfd4e, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x33c, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffc}}}]}}, {{0x8, 0x1, r8}, {0x17c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x0, 0x1, 'mode\x00'}, {}, {0x0, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x75, 0x4, [{0x9, 0x0, 0x5, 0xfff}, {0x5f41, 0x7f, 0x3, 0x8}, {0x1, 0x0, 0x20, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x0, 0x1, 'lb_tx_hash_to_port_mapping\x00'}}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0xffffffffffffffb9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x344}, 0x1, 0x0, 0x0, 0x40008c4}, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r11 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb9, 0x10c000) r12 = inotify_init() r13 = inotify_add_watch(r12, &(0x7f0000000080)='.\x00', 0xfe) r14 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r15 = dup2(r14, r12) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$inet(0x10, 0x3, 0xc) sendmsg(r17, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r18 = socket$inet(0x10, 0x3, 0xc) sendmsg(r18, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r19 = socket$inet(0x10, 0x3, 0xc) sendmsg(r19, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r20 = socket$inet(0x10, 0x3, 0xc) sendmsg(r20, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r21 = socket$inet(0x10, 0x3, 0xc) sendmsg(r21, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000001e40)=ANY=[@ANYRES64=0x0, @ANYRES32=r13, @ANYRES64, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=r17, @ANYPTR64, @ANYPTR, @ANYRESDEC=r0], @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES32=r18, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES64, @ANYBLOB="857b57bf4c8917f9cbe191e7fe9425cf293bcf6811c2a0cbdb415e69e8c05bf033c6199082f7e5b779285d4cd41db305941cbd6908ea87880515fd3f0f32c7e272c9634392c5aac4c60f230b776c7b1872e42c8f130c3cedbc0c96c8596672296d2266e7b71b0e3e8d5390cbd2be6a6fd747e0f51bd94c39d0f6146f374a7d0607959de8597eed5fb03a3551f7490a27cb3efa", @ANYRESDEC], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r19, @ANYRES16=r20, @ANYRESOCT=r21], @ANYBLOB="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"], @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r22, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r22, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r16, 0x84, 0x1, &(0x7f0000000100)={r22, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r15, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r22, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000000c0)={r22, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0x4}, 0x90) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:42:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x128) 13:42:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 13:42:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x205903, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:42:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x128) 13:42:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 13:42:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) r1 = socket(0x10, 0x0, 0x0) close(r1) socket$inet(0x2, 0x80001, 0x84) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x500000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x8000000, 0x4004400}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x4) 13:42:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 13:42:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, @icmp=@timestamp_reply={0x7, 0x3}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x1, 0x800000e]}) 13:42:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xffffffffa0008000}, 0x0) 13:42:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8180, 0x0) bind$isdn(r1, &(0x7f0000000100)={0x22, 0x7f, 0x7, 0x45, 0x7}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000140)) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') 13:42:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x128) 13:42:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 13:42:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@initdev, @initdev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924924f0, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x80c, r4) 13:42:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffa0008000) 13:42:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x128) 13:42:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}}, 0x0) 13:42:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 13:42:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}}, 0x128) 13:42:18 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffd5a) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000010000000d000400ce7e00000400000004000000080000000000000007000000320f000003000000010000000000000000000000070000000600000002000000090000000800000000000000000000c00000000001000000020000000000000000009f3601000040060000000400000000000000308800000000000004000000010000001f00000046840000050000000000000000000000ff0700000500000000fcffffa2ffffff0000000008000080000000000000"]) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000380)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x39, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @remote, 0x20cf}, r8}}, 0x30) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) syz_open_dev$media(0x0, 0x960c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/50) syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [{[], {0x8100, 0x1, 0x0, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xfffffffffffffe44, 0x33, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8, 0x0, 0xffff}}}}}}}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x321400, 0x0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x986e, 0x4}}, 0x30) 13:42:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:18 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c29fb7504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000180)='./file1\x00', 0x1, 0x6, &(0x7f0000000780)=[{&(0x7f00000001c0)="ce7265e002e59d0d46baa8c3448c1261ca6df24518537766c581d7dc49f1b32ae1c11dedd4d5ef501a9401233723b703901498bc5ea6e73544b9728a901cbf7ce38863644494e1feabc2793c620a5d422e3b2db18613bc351a386b1b24cfc17beabedb25861a8ed238bcaec6a2", 0x6d, 0x5}, {&(0x7f0000000400)="d032276fa2a4e79599869b0e0d9518041ede6de783e0c9c91cb50cb01ab7513c9e26403017531a3211b38abf8371604ea774284a660c299a85e7b5f7ad3969bd19165a1b95363771a60123ce30830752a86d310418d183be9824275e799b3d9288875dde9b55d2c5a2fd94c0e7c35f3c841f508aeb734048bbd31f07f732a6bcef2d7b462788f7c876137222642b53b36a9899ffad9f75ce901b47a7887b4300066d0f20b095b8b1a6f595ee80194b18ccb3f8a2c66883f41056eb0545ba8ed264d45ec9356c526912c84929b49cf4db30fa7c67244010c1a49cec200f9fb223255d6a68e8bc16710f49ca57baa7be6ddd67ff2e3b44559e5f", 0xf9, 0x8}, {&(0x7f0000000500)="8d1a471f6cf6c11c7ee8dac93d0e37e86f454e994f3031d9a23c7732ed2e622a1637521b8c534de69cf0d4e8d2d4322bee018f1f0a4122893a670c1b102cc4153c1ae1e6a117660216684fa7def78ebfc2519b25e941f58f22d4e4f37ab648408ccbbe76f98925c7fbe4c40c85851a6f25230c837d013c98d226f12a9eaaee0f08d70671f114383084235d866d5aa5f0bee50963905eaed8d1ba", 0x9a, 0x20}, {&(0x7f0000000340), 0x0, 0x7d1e}, {&(0x7f00000005c0)="26dcbc93c87c6796b63ceef20c0dae791927c17b5df80edbe2180c9b6d5d55e97943c95b9bfe83fa0ce76311e869fe5fcb5fef5b744756a2d4ea49c909bb937580b408c26ab02291805bfe22ab95c4adecd6c055cec5af13209e901205a9f509900a707c6b61b36d1af84036ec6bded6ca958e567b9352c2bbc1f562b95aba5092a6bff735fedd058fb0f0fa3303230086b83eaa37a958765d4759fbe3f7d9eb524a2fcaed1aa350dd098f9eb61ac230", 0xb0, 0x80000001}, {&(0x7f0000000680)="8f15bde2f18893ba661ffab34256c252427d0895dfc4d6c1b896665323d798344d4b5ce6749cfef8958431216c7e1bafbe17391a0ac0d618bf0719009f99c8d055daf588ff87eeaea9d008a0199475d079321a226e4dc943ae641a7263d23a5c583983b3f3d10db69e461105496b4e249dec2ca26590fca5697044a1c2867ac283fbd5344d95521335f8895b21e6cc70640590719136d775862118e31b45db42265193112bae0fc5b989b8f7952d320730f47b184b6383dcf4dfce45a1cd06d62cc18a5fa007d2b1fa900abe9fd363845f5ee282c9f96c", 0xd7, 0x101}], 0xd29161f9c69477bd, &(0x7f0000000900)={[{@resuid={'resuid', 0x3d, r3}}, {@two_active_logs='active_logs=2'}, {@lfs_mode='mode=lfs'}, {@usrquota={'usrquota', 0x3d, 'trans=fd,'}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, '--uservboxnet0%selinuxsystem#'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, ',n\xf6selinuxeth1'}}, {@obj_role={'obj_role', 0x3d, 'posix_acl_access@selinux\''}}, {@dont_measure='dont_measure'}, {@audit='audit'}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>', r5}}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'trusted.overlay.upper\x00'}}]}}) [ 2308.355712] *** Guest State *** [ 2308.359556] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2308.369836] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2308.384999] CR3 = 0x0000000000000000 [ 2308.392408] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2308.401504] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2308.428638] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2308.452682] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2308.464130] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2308.475818] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2308.484927] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2308.493194] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2308.501476] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2308.510364] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2308.518556] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2308.518570] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2308.537953] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2308.546549] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2308.546561] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2308.546571] Interruptibility = 00000000 ActivityState = 00000000 [ 2308.546576] *** Host State *** [ 2308.546586] RIP = 0xffffffff811c9793 RSP = 0xffff88804c4978c0 [ 2308.546606] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2308.546617] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 2308.546628] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 2308.546641] CR0=0000000080050033 CR3=000000009fc6e000 CR4=00000000001426e0 [ 2308.546655] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 2308.546667] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2308.546671] *** Control State *** [ 2308.546680] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2308.546688] EntryControls=0000d1ff ExitControls=002fefff [ 2308.546701] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2308.546711] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2308.546718] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2308.546726] reason=80000021 qualification=0000000000000000 [ 2308.546734] IDTVectoring: info=00000000 errcode=00000000 [ 2308.546739] TSC Offset = 0xfffffb296eb098b6 [ 2308.546744] TPR Threshold = 0x00 [ 2308.546751] EPT pointer = 0x000000005515d01e [ 2308.546761] Virtual processor ID = 0x0002 [ 2309.809373] Bluetooth: hci0: command 0x1003 tx timeout [ 2309.814896] Bluetooth: hci0: sending frame failed (-49) [ 2310.689194] Bluetooth: hci1: command 0x1003 tx timeout [ 2310.694735] Bluetooth: hci1: sending frame failed (-49) [ 2311.889139] Bluetooth: hci0: command 0x1001 tx timeout [ 2311.894904] Bluetooth: hci0: sending frame failed (-49) [ 2312.769235] Bluetooth: hci1: command 0x1001 tx timeout [ 2312.774668] Bluetooth: hci1: sending frame failed (-49) [ 2313.969196] Bluetooth: hci0: command 0x1009 tx timeout [ 2314.849301] Bluetooth: hci1: command 0x1009 tx timeout 13:42:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_DESTROY(r2, &(0x7f0000000000), 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) 13:42:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13:42:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r3, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r4, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r5, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_newneigh={0x7c, 0x1c, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r2, 0x12, 0x8, 0xa}, [@NDA_IFINDEX={0x8, 0x8, r4}, @NDA_VNI={0x8, 0x7, 0x8000}, @NDA_MASTER={0x0, 0x9, 0x6}, @NDA_VNI={0x8, 0x7, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NDA_DST_IPV6={0xff1b, 0x1, @loopback}, @NDA_PORT={0x8, 0x6, 0x4e23}, @NDA_SRC_VNI={0xffffffffffffff56, 0xb, 0x81}, @NDA_MASTER={0x8, 0x9, 0x1000}]}, 0x7c}}, 0x0) 13:42:28 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:42:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x540a, &(0x7f00000000c0)={0x1, 0x0, 0x20, 0x88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100}) 13:42:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) syz_read_part_table(0x1911f21c, 0x5, &(0x7f0000000580)=[{&(0x7f0000000300)="ca8293265a922037e1a4560fcf6b2b9aba2ed739b5708d71ff6a1d3d464ea59567c4161de62dd0bad903c44957d2dbcc51b29c5f959ff8b02a2d388f9c934d2f7a038c4b05799d1a24e738ee6611be41155308c67120f51a317cd231c286c666917a56f288606e4854169566a84329db78d0065df16d23fe250d37abe5989aaf5b474ebe1e41c9a76e227dbf38f0fbadcf3e2cf0d6d89262e6442383b5f75f15a8d3305504c490f9d8500027c38d622ad956f604844ecd967aca2c62d703814e525a6c22085b0919e765533bce3a5e243171a5fcf3c1d6e7863506c93174d950ca1183e8", 0xe4, 0x8001}, {&(0x7f0000000140)="58cf862681d03abd9dbe4039bdb00654703221bd3026a9cb0a7c98446f09768cc1e81e9a144325ba492c1efa415a29", 0x2f, 0x7ff}, {&(0x7f0000000400)="5557e6f776a9baab40717f5fe5aa9e8cde608311f7d2e71d71ef538a067a5e4b296db42e6f38429ba3dd69a9164d16e6222e1c1abd1f46277f00db81d74fa6a51cc2e4771c991fb91ce32c7f24719d3bbd924acf9f7c8394ebf9ab1024fe2db30fe8470cd4f164201c12ec063208d0fa075282ec4b25caf744f186ae8a73ac83c94cfcbc47017f0a879503221b969022907858389717c374c62a8207ccece546b839796f424f932d133346514922e2c95c242c46f220eb439bd6193a58af9d26c28f469797ec46a9717e866ddd55afc82b9e6edaae86dae57d00476c4f20253d69b99e1825293f1eeb2005b524e1bb5cbc29eb081c", 0xf5, 0xa1}, {&(0x7f0000000180)="e2bb", 0x2, 0x215c}, {&(0x7f0000000500)="232863c18bf6eb87ff0770fbabd881b361dc3f4c16cf6b167d62e9ae1ca109f198b142ee1ef5a256de8049e60e3688a7ec3d3da7a807590fc170cdeeb15219bb0959110417338ec24e945adf6d5eb14bf1954158cb0b776b4e94e9d3566f", 0x5e, 0x1}]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:28 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40200, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000180)="25fdb80c73569a4f43ba70cbcebb9092348304148914f38b1e1c848f73c08cf64ccd90d684af76a87577afb44e7a32f413093cc64f9523779261d94341ea0754ae1afa0173433fac6b7dfc1cb32ae4b1bff6c2d934d98719c449259fb7fd1111ee1729305d3fb8bf6a530e7efd3f54873975b1abb6d6ac3faea3fb5129523baf0f26562a649b1778fe92dcbe60d292823b1b6ccabc68205e1c76db37dea3d81204f9a03b3632f78384e012d66ec7fcd50a120fd854c3ce349ad9200b312121af30eb95fc32ceb3a4af64b4d5234574a1ffab", 0xd2) r3 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x2, 0x2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000002c0)=0x7) connect$netrom(r3, &(0x7f0000000300)={{0x3, @bcast, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/53, 0x35}], 0x1, &(0x7f0000000480)=""/218, 0xda}, 0x40000082) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000005c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$sock_bt_hci(r2, 0x200448c7, &(0x7f0000000640)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r5, 0x101, 0x7, &(0x7f0000000680)=0x92b, 0x4) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000006c0)) r6 = openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x40, 0x40) ioctl$TIOCSCTTY(r6, 0x540e, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000880)={@l2={0x1f, 0x2, {0x0, 0x0, 0x40, 0x1, 0x1, 0x5}, 0x8, 0x4}, {&(0x7f0000000740)=""/202, 0xca}, &(0x7f0000000840), 0x28}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000b00)=0xe8) mount$9p_rdma(&(0x7f0000000940)='127.0.0.1\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='9p\x00', 0x20030, &(0x7f0000000b40)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0xfffffffffffffff7}}, {@sq={'sq', 0x3d, 0x4}}], [{@uid_lt={'uid<', r8}}, {@smackfsfloor={'smackfsfloor'}}, {@appraise_type='appraise_type=imasig'}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000c00)=0x7fffffff) prctl$PR_SVE_GET_VL(0x33, 0x28c0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/dlm_plock\x00', 0x0, 0x0) connect$can_bcm(r9, &(0x7f0000000c80)={0x1d, r7}, 0x10) socketpair(0x3, 0x4, 0x6, &(0x7f0000000cc0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) bind$bt_hci(r10, &(0x7f0000000d40)={0x1f, r11}, 0xc) syz_mount_image$ntfs(&(0x7f0000000d80)='ntfs\x00', &(0x7f0000000dc0)='./file0\x00', 0x3800, 0x5, &(0x7f0000001240)=[{&(0x7f0000000e00)="155a620302e387950a13311231b4b00d2656eef6c73a4a967a5620e7ebb8b9c0c9b160c9a498c18d61e8e22d82df8b13d41e0a12d5af79d43a3226061c76b51e08a3fd9d7c66be7349d9b8b1433619ee753cb0040cd46bee0a4088fe1b8626e0c5c5ca7b746c7e212d5737cc20ad9289e7a6516587c52c80fecb2c0db063cafdbdf25ee270ad103bc7a0e3fa221150eb2f135c0ba6af053eedca701f739261e06e01d99f4336878c3ec6df6b508dbc7af48c6f4060bc5ec9816dd4beca90096b14c830d0838445eb934355efa1bd00dc745e59b4978ecf5d6265c96966", 0xdd, 0x200}, {&(0x7f0000000f00)="cd4d7f1bba1c34eae808d372db6a0e02f09604a4eeb0aedadd137817175a15b2d2caf27938ea0a3639040c7b73419520312e1b7db32846f74a32d93be41e2f81a20b76cf6b1575595e32601282cb4423da4dd9f998a16bfd347b8c9ba19fc62281bf7e85fd36e4f136626610a46ee1d2c466285feeb9376cabb0e7a92ab6751b35fdc6cd8d89b9cb3ee829643905fc490efcaf4c5a1918dffa761e48d04a08afbfb0040896787094bb", 0xa9, 0x1}, {&(0x7f0000000fc0)="619c25b9417e04517fc856740f755c29500faf19a37b4522b1483b10eb6de159e2f7101e36dda058b94a3be0a912868f1c6f130667a59ecbde613cab110ba8366ad99044fa184b148dbed6cef8151f97d79b51c72b10efdc44ebc174189d44ed4bbc8d9ece3e5c9b59d15d5ee5eba05de0a1a041a54bc1769ac2a06a30fc5f8dd2ea40edfcf3cef465389999947ed7cf195c611eee354d72e9285588d77d3096eb73a80f7ec354fbf9cdeb2ab96e18c54f9c41fdaf23ab7e7d109eeb841094cb968aaa0b87aecf4bbdc914a6516867ce795a71206de87ad206d69ff1f0bfb1b054e7b57841728c07998a", 0xea, 0xfffffffffffffffe}, {&(0x7f00000010c0)="79dcf9a4f2cf95295ba6f98283fae22a0eb2ef26b3c302d2a1c1c6c340c6c41a4e68ef5a6d798d30cc63487b646769d90ecaa0ca5b0ae77cc3b07c6a8f0eb01ac330ccc86688fe0bb0c2a6d593845b487cc46a31a25cbe3d43ad59224770d64dd3b3554a037b28e9ca7d7efd530c6248bbc45a8cf05dde1d8a05ab9f2983b42b27de2c8ab85027c812be1b43b422cbb5606a", 0x92, 0x1}, {&(0x7f0000001180)="24ef75e8f2d028d9e1abfdd04352bfed312764db3a35e3c6c7b2e92b52df7a1d9731a5caafb2a58fddfa67cb276ed438fa2daa041d693d4df0d78c372496956ab39d57da8744cf74b542c0b3dbc6310baac68397834c2c83b817b81b530eebf4cf7393cb287fc0fd2bd2a0a5ec191c557201780bb0697d33e5da2e1f7f6a36c922c97b41027fe060f3a3258819d4a6408293", 0x92, 0x2}], 0x8a0c44, &(0x7f00000012c0)={[{@errors_remount='errors=remount-ro'}, {@dmask={'dmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x5}}], [{@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}]}) 13:42:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 2318.900886] *** Guest State *** [ 2318.904237] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 13:42:28 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x2}}, 0x128) [ 2318.979304] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2319.017249] CR3 = 0x0000000000000000 13:42:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$rose(r2, &(0x7f00000002c0)=@short={0xb, @remote, @rose, 0x1, @bcast}, &(0x7f0000000300)=0x1c, 0x80000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8000001, 0x32, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$EVIOCSFF(r11, 0x40304580, &(0x7f0000000380)={0x53, 0x20, 0x0, {0x7f, 0x80}, {0x7ff, 0xe2}, @period={0x5d, 0x57cd, 0x4, 0x65a, 0x4, {0xffae, 0x6a1a, 0x68ce, 0x6}, 0x2, &(0x7f0000000080)=[0x7, 0x7]}}) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000340)=0x3ff) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x101000, 0x0) ioctl$VIDIOC_S_TUNER(r12, 0x4054561e, &(0x7f0000000240)={0x5, "09ab4600957ea9987d417bf0684f3f5840747b445ef6ba20f70d83ec444f4057", 0x1, 0x1, 0x7, 0x7cd39aaf, 0x1, 0x3, 0x6, 0x4}) r13 = fcntl$dupfd(r5, 0x0, r5) r14 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400000) getsockopt$bt_BT_SNDMTU(r14, 0x112, 0xc, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[], 0x32600) read(r4, &(0x7f0000000000)=""/81, 0xffffffd5) [ 2319.047201] RSP = 0x0000000000000000 RIP = 0x0000000000000000 13:42:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xe}, 0x0) 13:42:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='\xc9\x00\x00\x00\v\x00!E\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r2 = dup(r1) r3 = inotify_init() r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000200)={0x5e, &(0x7f0000000280)=""/94}) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r6 = dup2(r5, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r8, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r8, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={r8, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r8, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e24, 0xb0c6d8de, @mcast2, 0xffff0001}}, 0xffff, 0x7fff}, 0x90) [ 2319.112078] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2319.141702] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2319.180757] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2319.184503] audit: type=1804 audit(1573479749.073:412): pid=18312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="memory.events" dev="sda1" ino=16827 res=1 [ 2319.205647] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:42:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x1, 0xc7, "0f707a96377b77a43097ac52cb616cd3faf6125d01298ee54646fbb3d686aaf2d8a2c56f3ea0ee35347692166c3f445d1b570224f9cb331de6ce07e5be0a7ff23b9902d1e636ff9aaffde5ad7185bc71a810b5181360caa0289e53b1e0ad4b71ed652b047c6373cc4ca329b69b28d07bee269c9eba05470fe01a3e5a4cab7ae20886ac9d8f08224d325d46d88c2aece7a2727045e3e94d92ebfb59a3c397d2416f4f6d112ac3aad701302ecd11ea6fa43a22e64d0f9c00207ed1fb4cd0d4e82d810296d5ae2c76"}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb87d09af751d7f47) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f00000000c0), &(0x7f0000000580)=0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r7, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r7, 0x3ff, 0x0, 0x0, 0x0, @ib={0x1b, 0xe067, 0x400, {"852bfa2211c479c1403458ebd25c0c94"}, 0xdf1, 0x62cb, 0x6}, @in={0x2, 0x4e23, @multicast1}}}, 0x118) r8 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000005c0)={0x2, 0x9}) ioctl$BINDER_WRITE_READ(r8, 0x40046208, 0x0) [ 2319.271123] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.301725] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:42:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:42:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 13:42:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="23acee4db5c5e0ef96e972e570b3ffcc2d6a0af471ed05008c0441a7c23344f286867d9f0076af600c8e", 0x2a}, {&(0x7f0000000140)="cc761e0bc1ef6acd", 0x8}, {&(0x7f00000001c0)="7eede0e7d96eff11e60c4b81cae408f7fc2018afbbe86a40cff924ab32b5270c23a0bced1d2d5f42fa98126cc42d158e10b48c6d53dfe8d30cc1c7a0a0f80a3eacb35ea0035549bd572d043fa5e40354d4676cd9bb790f909c741cc60d19ab5cf2697155954bbf9bb875e688d9b6767b4065e14177d65625a38cddd6d38c9d17de7eee0debd14c2d9636ae0e08d686312021e37051b1be5a682f79297a248deda137fe7f626171d3765f71ccde307709d8d370809547ffd5e2ce00ddda4e6aadeab384344f9f300b4e", 0xc9}, {&(0x7f0000000380)}, {&(0x7f0000000440)="60e892bf16ca05a90f9d06a662f8287555ad02694ddba27b485da034a130783e492b26824cf35370ffd222b7f010", 0x2e}], 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000001ff3e971c440000c411d470578439959c20213bc95df7da77959fe9d3522c759643226e114f1bf90552f3f8ce5db964a4cf0cd63dd33b76982356780b4369d58f147f03392a212f75519c42e063048096ef0871d8882984719c04d3703e452d85f8df0fdaf1cd458a55902401e86306bb94e6f8f408b459457710cabebf93314adb8a649502f5e02aa811c72e5158"], 0x18}, 0x10000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0xd6) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) [ 2319.314072] audit: type=1800 audit(1573479749.113:413): pid=18312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16827 res=0 [ 2319.352186] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.375885] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.398849] GDTR: limit=0x0000ffff, base=0x0000000000000000 13:42:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x3}}, 0x128) [ 2319.424704] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2319.453685] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2319.477305] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2319.487364] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2319.500325] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2319.523819] Interruptibility = 00000000 ActivityState = 00000000 [ 2319.531200] *** Host State *** [ 2319.534684] RIP = 0xffffffff811c9793 RSP = 0xffff888036ad78c0 [ 2319.541505] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2319.551741] FSBase=00007f771a1c4700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 2319.560632] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2319.566776] CR0=0000000080050033 CR3=000000004c704000 CR4=00000000001426e0 [ 2319.576129] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2319.579121] net_ratelimit: 16 callbacks suppressed [ 2319.579130] protocol 88fb is buggy, dev hsr_slave_0 [ 2319.593275] protocol 88fb is buggy, dev hsr_slave_1 [ 2319.599254] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2319.605364] *** Control State *** [ 2319.608834] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2319.617882] EntryControls=0000d1ff ExitControls=002fefff [ 2319.624298] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2319.633628] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2319.642442] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2319.652161] reason=80000021 qualification=0000000000000000 [ 2319.658609] IDTVectoring: info=00000000 errcode=00000000 [ 2319.664929] TSC Offset = 0xfffffb23cee5f99e [ 2319.669660] TPR Threshold = 0x00 [ 2319.679255] EPT pointer = 0x00000000806dc01e [ 2319.683710] Virtual processor ID = 0x0002 [ 2319.710528] *** Guest State *** [ 2319.713884] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2319.725818] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2319.737150] CR3 = 0x0000000000000000 [ 2319.741906] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2319.748255] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2319.755912] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2319.763802] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2319.772130] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.780221] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.788245] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.796573] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.804775] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2319.813079] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2319.821373] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2319.830572] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2319.838729] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2319.847095] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2319.853586] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2319.861160] Interruptibility = 00000000 ActivityState = 00000000 [ 2319.867394] *** Host State *** [ 2319.870682] RIP = 0xffffffff811c9793 RSP = 0xffff88808d3f78c0 [ 2319.876758] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2319.883248] FSBase=00007f771a181700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 2319.891345] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2319.897239] CR0=0000000080050033 CR3=000000004c704000 CR4=00000000001426f0 [ 2319.904510] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2319.911447] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2319.917660] *** Control State *** [ 2319.921303] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2319.928073] EntryControls=0000d1ff ExitControls=002fefff [ 2319.933743] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2319.940758] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2319.947432] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2319.954083] reason=80000021 qualification=0000000000000000 [ 2319.961582] IDTVectoring: info=00000000 errcode=00000000 [ 2319.967400] TSC Offset = 0xfffffb2360dd03ea [ 2319.971809] TPR Threshold = 0x00 [ 2319.975183] EPT pointer = 0x0000000087cc201e 13:42:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) 13:42:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fb64100000001901000000000000000002000000ffd38d9b0c0001000800100004000f00"], 0x24}}, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:42:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x4}}, 0x128) 13:42:29 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x55e, 0x4}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) [ 2319.979671] Virtual processor ID = 0x0003 13:42:30 executing program 4: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socket(0xa, 0x3, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) 13:42:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 13:42:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x80000], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) r6 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'irlan0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x8, 0xf3, 0x56}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = semget$private(0x0, 0x20000000102, 0x0) semop(r7, 0x0, 0x0) semop(r7, &(0x7f00000000c0)=[{0x0, 0x6}], 0x1) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000540)=""/4096) semctl$GETNCNT(r7, 0x0, 0xe, &(0x7f0000000300)=""/90) 13:42:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$setpipe(r0, 0x407, 0x44a) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r7 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x400000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7, 0x4, [0x1, 0x81, 0xda, 0x6]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000540)={0xe5, 0x100, 0x8000, 0xe1, r11}, &(0x7f0000000580)=0x10) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2320.273339] *** Guest State *** [ 2320.277081] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2320.286884] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2320.296201] CR3 = 0x0000000000000000 [ 2320.300265] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2320.306611] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2320.321865] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2320.328945] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2320.337327] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2320.345655] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2320.355218] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2320.363320] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2320.371426] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2320.379743] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2320.388061] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2320.396226] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2320.404433] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2320.413133] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2320.419617] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2320.427081] Interruptibility = 00000000 ActivityState = 00000000 [ 2320.433477] *** Host State *** [ 2320.436704] RIP = 0xffffffff811c9793 RSP = 0xffff88808065f8c0 [ 2320.442759] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2320.449287] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 2320.457101] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2320.463104] CR0=0000000080050033 CR3=000000004e426000 CR4=00000000001426f0 [ 2320.470218] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2320.477003] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2320.484040] *** Control State *** [ 2320.487539] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2320.494398] EntryControls=0000d1ff ExitControls=002fefff [ 2320.499940] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2320.506898] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2320.514027] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2320.520785] reason=80000021 qualification=0000000000000000 [ 2320.527827] IDTVectoring: info=00000000 errcode=00000000 [ 2320.533403] TSC Offset = 0xfffffb230c43625d [ 2320.537753] TPR Threshold = 0x00 [ 2320.541204] EPT pointer = 0x000000009f8d701e [ 2320.545629] Virtual processor ID = 0x0002 [ 2321.499112] Bluetooth: hci0: command 0x1003 tx timeout [ 2321.504574] Bluetooth: hci0: sending frame failed (-49) [ 2322.289229] Bluetooth: hci1: command 0x1003 tx timeout [ 2322.294725] Bluetooth: hci1: sending frame failed (-49) [ 2323.569431] Bluetooth: hci0: command 0x1001 tx timeout [ 2323.574886] Bluetooth: hci0: sending frame failed (-49) [ 2324.369209] Bluetooth: hci1: command 0x1001 tx timeout [ 2324.374657] Bluetooth: hci1: sending frame failed (-49) [ 2325.649341] Bluetooth: hci0: command 0x1009 tx timeout [ 2326.449164] Bluetooth: hci1: command 0x1009 tx timeout 13:42:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x5}}, 0x128) 13:42:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 13:42:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000000)={0x0, "d50a86ed126304c5f7c46efdd135ec29e81a3de40ba9c19c2d2902fc5a7781f7", 0x5, 0x200, 0xfff, 0xc236, 0x1, 0x4, 0x35f2, 0xef03}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd4133b52d835171c, 0x0, 0x0, 0xfffffffffffffe15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$unix(r5, &(0x7f0000000080)=""/70, 0x46, 0x2011, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x78, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x0, 0x0, 0x80}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)='gre0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$llc(r4, &(0x7f0000000140)=""/47, 0x2f, 0x40, &(0x7f0000000180)={0x1a, 0x312, 0x1f, 0x80, 0x1, 0x20, @local}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13:42:40 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x8003, 0x8020001) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x7, {0x7, 0x1f, 0xd85, 0x124054, 0x9, 0xf917, 0x6, 0x1}}, 0x50) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140)="73844ae89d", 0x5, 0x600}]) 13:42:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xf894e7587844a064) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f00000000c0)=""/100) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) [ 2330.379694] *** Guest State *** [ 2330.383444] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2330.401328] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2330.418393] CR3 = 0x0000000000000000 13:42:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 13:42:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x6}}, 0x128) [ 2330.424435] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2330.431465] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2330.439892] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2330.455510] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2330.485650] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2330.509796] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2330.518247] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2330.534152] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2330.591159] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2330.619250] GDTR: limit=0x0000ffff, base=0x0000000000000000 13:42:40 executing program 4: r0 = socket$inet(0x10, 0x2000000003, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = getuid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001680)=0x58, &(0x7f00000016c0)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000001540)=0xe8) syz_mount_image$hfs(&(0x7f00000012c0)='hfs\x00', &(0x7f0000001300)='./file0\x00', 0xfff0000000000000, 0x1, &(0x7f0000001400)=[{&(0x7f0000001340)="427809708c96b79ba22a18854c19b235608a6b0b386e2954a4686beaeca87c18cb49c4d1839439b54e5c5e592d6870727f7340513f2ae9acc7aeaa96eb6d052a6a9660e7a7782b56c1dfd54f093d158761d2aaf4e6f83d3bf4c5e02ba95bd0e4c47d9b37e867cc78e287444e2dd9bab99eae4ec88375a36fa987d0a007320ba46f0d43253245c28c911cc1037ba583c1140e98404ac248d526975ef77a486c4421688cbcbcca7129a4ce3590d3fd39da8b", 0xb1, 0x6}], 0xa1012, &(0x7f0000001580)={[{@uid={'uid', 0x3d, r1}}, {@session={'session', 0x3d, 0x331f}}, {@file_umask={'file_umask', 0x3d, 0x10000}}, {@type={'type', 0x3d, "2818e3f1"}}, {@part={'part'}}, {@part={'part', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "06adb3a0"}}, {@umask={'umask', 0x3d, 0x6}}], [{@uid_eq={'uid', 0x3d, r3}}, {@fowner_lt={'fowner<', r7}}]}) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000001700)={{0x2, @name="ebb2f956f160e97199951d58683e72c78dd9a9966fd8595e6c7f60aa532e75c0"}, "67c15825e49cd124492a6d76e6fc0e4de92a1011d4f3f481ab390dc01b2b4780", 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003d80), 0x0, 0x0, 0x0) r9 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="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", 0xfde, 0xfffffffffffffffc) bind$inet(r0, &(0x7f0000001280)={0x2, 0x4e24, @broadcast}, 0x10) keyctl$link(0x8, 0x0, r9) creat(&(0x7f0000000040)='./file1\x00', 0x0) 13:42:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xec0}, 0x0) [ 2330.634507] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2330.660605] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2330.680566] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 13:42:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}, 0xffffffffffffffff, 0x60}}, 0x128) [ 2330.702902] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2330.720379] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2330.744614] encrypted_key: master key parameter 'ÉÔ òÊèÀöx1hÒÿtŸØÌhXG‡Û•ì9„sÅ [ 2330.744614] Ô' is invalid [ 2330.752459] Interruptibility = 00000000 ActivityState = 00000000 13:42:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 13:42:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x0, r6}, {}, {}, {}], {0x10, 0xa}, {0x20, 0xb32323e1dc560ea8}}, 0x4c, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setgid(r8) r9 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040001000000000008000000", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b00a090e8920c329838b23cd0b713a639", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000a00000000002000a80e00000000"], 0x4c, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [{0x2, 0x3, r5}], {0x4, 0x5}, [{0x8, 0x0, r6}, {0x8, 0x2, r8}, {0x8, 0x1, r9}, {0x8, 0x0, r10}, {0x8, 0x4, r11}], {0x10, 0x4}, {0x20, 0x2}}, 0x54, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$TIOCLINUX4(r15, 0x541c, &(0x7f00000000c0)) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup2(r16, r12) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$PIO_FONT(r17, 0x4b61, &(0x7f0000000080)="3cae2fcca90c5518cae301a9b731b911a0776e7520e682e2946207df4c4ba5b6a72b754675353dfb9d94") r18 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r18, 0x4008ae89, &(0x7f0000000100)={0x7, 0x0, [0x4b564d01, 0xfff]}) ioctl$KVM_RUN(r18, 0xae80, 0x0) [ 2330.805100] *** Host State *** [ 2330.805944] encrypted_key: master key parameter 'ÉÔ òÊèÀöx1hÒÿtŸØÌhXG‡Û•ì9„sÅ [ 2330.805944] Ô' is invalid [ 2330.822624] RIP = 0xffffffff811c9793 RSP = 0xffff8880613a78c0 [ 2330.844371] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 13:42:40 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000001c0), 0x3ad, 0x0, 0x2bc}, 0x20000004) [ 2330.866142] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000034000 [ 2330.885650] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 2330.895798] CR0=0000000080050033 CR3=00000000938eb000 CR4=00000000001426f0 13:42:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0xc0}}, 0x128) [ 2330.915720] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2330.964885] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2331.007587] *** Control State *** [ 2331.017097] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2331.024727] EntryControls=0000d1ff ExitControls=002fefff [ 2331.031612] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2331.038657] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2331.053630] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2331.060582] reason=80000021 qualification=0000000000000000 [ 2331.067151] IDTVectoring: info=00000000 errcode=00000000 [ 2331.073123] TSC Offset = 0xfffffb1da2c8a6b3 [ 2331.077709] TPR Threshold = 0x00 [ 2331.081861] EPT pointer = 0x00000000541ad01e [ 2331.086519] Virtual processor ID = 0x0002 13:42:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x184) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dhcpd_unit_file_t:s0\x00', 0x27, 0x3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=@sha1={0x1, "f76d1b58e31fe06f731b8d7f3ca4642af5cb2312"}, 0x15, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x13aa}, 0x0) [ 2331.253029] audit: type=1400 audit(1573479761.143:414): avc: denied { relabelfrom } for pid=18839 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=219604 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2331.282143] audit: type=1400 audit(1573479761.143:415): avc: denied { relabelto } for pid=18839 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=219604 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dhcpd_unit_file_t:s0 tclass=netlink_netfilter_socket permissive=1 [ 2331.800489] device bridge_slave_1 left promiscuous mode [ 2331.806196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2331.890395] device bridge_slave_0 left promiscuous mode [ 2331.896151] bridge0: port 1(bridge_slave_0) entered disabled state [ 2332.041096] device hsr_slave_1 left promiscuous mode [ 2332.082843] device hsr_slave_0 left promiscuous mode [ 2332.134828] team0 (unregistering): Port device team_slave_1 removed [ 2332.146197] team0 (unregistering): Port device team_slave_0 removed [ 2332.158416] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2332.195372] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2332.267586] bond0 (unregistering): Released all slaves [ 2332.529152] Bluetooth: hci0: command 0x1003 tx timeout [ 2332.534817] Bluetooth: hci0: sending frame failed (-49) [ 2334.609145] Bluetooth: hci0: command 0x1001 tx timeout [ 2334.614574] Bluetooth: hci0: sending frame failed (-49) [ 2336.689491] Bluetooth: hci0: command 0x1009 tx timeout 13:42:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff9, 0x400000) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x300}}, 0x128) 13:42:50 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) connect$x25(r0, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000008) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000280)='./file0\x00') r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x3) renameat2(r4, &(0x7f0000000100)='./file0/file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x0) 13:42:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x1001, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000440)) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x3112db6baec8f394) fallocate(r1, 0x0, 0x0, 0x8e18) fallocate(0xffffffffffffffff, 0x3, 0x8001, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, 0x0, 0x80000) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="514c1cc2c4dad10000000000000000000000000000175af28d792da5c4cf2d62ce061a469f8febf7b654f4bf7566eee070e19e2d1285d7bfa5ce029a9da862bf662faa0ec7b27ab8a66df93fc470b21904a10fe9cec13cfd1097c9b23e0be80f85cbada4b79fdb79fb2e40706149830d71a98a6abdd6f3edd0fd18e13ba183d0ebe8d39f", @ANYRES16=r3, @ANYBLOB], 0x3}}, 0x4000) r4 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x14) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000000)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200000, 0x0) write$FUSE_LSEEK(r7, 0x0, 0x0) r8 = creat(&(0x7f0000000400)='./file0/file0\x00', 0x1) write$binfmt_script(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) close(r8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf25020000002400070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00040004000000000000000c0002000100010000000000240007000800", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000000000000005ede65c9bddb00", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c0002000080000000000000"], 0x21}}, 0x20000000) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x88) write$binfmt_script(r9, &(0x7f0000000600)=ANY=[@ANYBLOB="2300002e2f66696c6530206daf1513f97deffb7f233cef0b23690d5723f7469a22c7a76739c3c95e1253ab55ff4b596d3ca48c48d11f28c2670400bbe5cc38071a9bfd437260056119b4db93ce6c4b273fa50b9fc6bd7a7d822c1ab4801be6777e53ab4de36282a6311a98fd0abe743f78d444357e7b7ad06a19e8bf33000000000e5d0fad4a"], 0xb) close(r9) ioctl$LOOP_SET_FD(r9, 0x4c00, r1) 13:42:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 2340.627940] *** Guest State *** 13:42:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0xfe) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r6 = dup2(r5, r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r8, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r8, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={r8, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r8, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x7, 0xd0e1d95debbfef2, 0x9, 0x6af, r8}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r9, @in6={{0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x9}}, 0x6, 0x57}, &(0x7f0000000240)=0x90) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r10 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x400) ioctl$TCGETS2(r10, 0x802c542a, &(0x7f00000000c0)) [ 2340.659230] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 13:42:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 2340.713111] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 13:42:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x500}}, 0x128) [ 2340.758398] CR3 = 0x0000000000000000 [ 2340.774826] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2340.800200] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2340.839281] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 13:42:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x44800) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB], 0x2) fallocate(r3, 0x0, 0x0, 0x8000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x0, r2}) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20, 0x0, 0x4, {0x0, 0x15}}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 13:42:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xaa13}, 0x0) [ 2340.859446] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2340.879622] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2340.904322] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2340.917648] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2340.929981] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:42:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x600}}, 0x128) [ 2340.971998] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:42:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) [ 2341.039145] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2341.095645] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2341.127293] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2341.143493] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2341.168403] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2341.184969] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2341.195282] Interruptibility = 00000000 ActivityState = 00000000 [ 2341.207056] *** Host State *** [ 2341.211797] RIP = 0xffffffff811c9793 RSP = 0xffff88804f2e78c0 [ 2341.218015] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2341.231033] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 2341.255811] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2341.284597] CR0=0000000080050033 CR3=00000000a7c44000 CR4=00000000001426f0 [ 2341.305919] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2341.322932] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2341.331615] *** Control State *** [ 2341.335229] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2341.345819] EntryControls=0000d1ff ExitControls=002fefff [ 2341.354753] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2341.365327] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2341.377183] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2341.404219] reason=80000021 qualification=0000000000000000 [ 2341.426872] IDTVectoring: info=00000000 errcode=00000000 [ 2341.434877] TSC Offset = 0xfffffb18258bf07f [ 2341.443435] TPR Threshold = 0x00 [ 2341.446928] EPT pointer = 0x000000009189b01e [ 2341.453584] Virtual processor ID = 0x0002 13:42:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @pic={0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfd}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x2, r8}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1000000000], 0x0, 0xffffffffffffffff}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x6, 0x2c93770b52aadc4f) ioctl$USBDEVFS_BULK(r10, 0xc0185502, &(0x7f0000000180)={{0x6, 0x1}, 0x2, 0x6, 0xd8, 0x7f, &(0x7f0000000300)="fa466814e641b15e4ff0a41b3cc08273c50f254a183528f0e8bc3bef955fdd4e17cc96b6aa1bdda1ce9b922425155515ecac2b37d567e83f9e726f84988366e0ee68031e70a73f2cf54381efed7a2d39c6ba2bb9f9579a8b7485f894d37452693501363abf855e9f44e43690cc117abc44ec9812e34e6a82cdb39416167e1dd896548e31a9649afa526758f4c8212427d487919790cce242d25234cbf8107adb9d2e2c53d25e7ba6f98ad41d012a01160ed337ec392d598ab1adcbfcc9d71ac334a917fd2a1dc21ab831b3d48d9d82d390f88b0e8ea147e1"}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = dup2(r11, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x4000}}, 0x128) [ 2342.769166] Bluetooth: hci0: command 0x1003 tx timeout [ 2342.774648] Bluetooth: hci0: sending frame failed (-49) [ 2342.942119] IPVS: ftp: loaded support on port[0] = 21 [ 2343.027315] chnl_net:caif_netlink_parms(): no params data found [ 2343.064073] bridge0: port 1(bridge_slave_0) entered blocking state [ 2343.071022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2343.078377] device bridge_slave_0 entered promiscuous mode [ 2343.085658] bridge0: port 2(bridge_slave_1) entered blocking state [ 2343.092176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2343.099714] device bridge_slave_1 entered promiscuous mode [ 2343.116590] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2343.126000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2343.144424] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2343.152802] team0: Port device team_slave_0 added [ 2343.158517] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2343.166020] team0: Port device team_slave_1 added [ 2343.171622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2343.179084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2343.261132] device hsr_slave_0 entered promiscuous mode [ 2343.329655] device hsr_slave_1 entered promiscuous mode [ 2343.369818] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2343.376917] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2343.392020] bridge0: port 2(bridge_slave_1) entered blocking state [ 2343.398528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2343.405207] bridge0: port 1(bridge_slave_0) entered blocking state [ 2343.411772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2343.448026] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2343.454962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2343.464059] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2343.475085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2343.493570] bridge0: port 1(bridge_slave_0) entered disabled state [ 2343.501235] bridge0: port 2(bridge_slave_1) entered disabled state [ 2343.514205] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2343.524252] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2343.531092] 8021q: adding VLAN 0 to HW filter on device team0 [ 2343.541293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2343.548900] bridge0: port 1(bridge_slave_0) entered blocking state [ 2343.555354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2343.570562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2343.578363] bridge0: port 2(bridge_slave_1) entered blocking state [ 2343.584856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2343.595542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2343.604570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2343.619982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2343.627752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2343.636203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2343.645796] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2343.652952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2343.667444] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2343.675811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2343.682921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2343.697366] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:53 executing program 2: syz_open_dev$mice(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/79, 0xffa0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/79, 0xffa0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x200000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r2, 0x46fb}, 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = gettid() r6 = gettid() sendmmsg$unix(r4, &(0x7f0000003f40)=[{&(0x7f0000000040)=@file={0x7ffbceeb43915673, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x70}], 0x1, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r6, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x50, 0x0, 0x0, 0x1, 0x9, 0x0, 0x41c1, 0xb02c63bbaa3d7f79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x6) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x430000, 0x0) timerfd_gettime(r8, &(0x7f0000000480)) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x280a001, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3ff}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/uinput\x00'}}, {@hash='hash'}, {@subj_type={'subj_type', 0x3d, '/selinux/avc/hash_stats\x00'}}]}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x101400) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r9 = userfaultfd(0x0) kcmp(r7, 0x0, 0x5, 0xffffffffffffffff, r9) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00WD%l\x8c\x8e3\xf1vS\xdeK8\xd6R\xbd\xd3\x199\'\x95J[>u\xd4l\x8c\xd3\xa6\xcf\xc99\xe0\xed^OM\x9a\xd8\xa2\xef\xee]\x11\xadD\xbe\xf7P:\xc5\xf4\xc2q', 0x0, 0x0) r10 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r10, &(0x7f00000000c0)=""/79, 0xffa0) ioctl$BLKGETSIZE(r10, 0x1260, &(0x7f0000000400)) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 13:42:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 13:42:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}, 0xffffffffffffffff, 0x6000}}, 0x128) [ 2344.849347] Bluetooth: hci0: command 0x1001 tx timeout [ 2344.855524] Bluetooth: hci0: sending frame failed (-49) [ 2346.929489] Bluetooth: hci0: command 0x1009 tx timeout 13:43:00 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc4, 0x100) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x10000, 0x0) fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000240)=0x400) setgid(r4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0xffffffffffffffd6) sendto$inet6(r5, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, 0x0) preadv(r6, &(0x7f00000017c0), 0x199, 0x0) r7 = fcntl$dupfd(r5, 0xe09, r6) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r8, 0xc008551c, 0x0) preadv(r8, &(0x7f00000017c0), 0x199, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) rmdir(&(0x7f0000000340)='./file0//ile0\x00') write$FUSE_INIT(r0, 0x0, 0x0) bind(r7, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fchownat(r9, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x100) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000001c0)={0x283, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffa}}, 0xfffffffffffffd2a) dup(0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 13:43:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13:43:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 13:43:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0xc000}}, 0x128) 13:43:00 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 13:43:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000000)={0x9, 0x7fffffff, 0x162, 0x6}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) 13:43:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 13:43:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x1000000}}, 0x128) 13:43:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="78f487eb016fa0fe8bcb7d00", 0xc}], 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x2e, r2}) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:43:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000140)={0x1, 0x100, 0x2, {0x6, 0x3b5, 0xc00000, 0x1}}) 13:43:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x8000a0}, 0x0) 13:43:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}, 0xffffffffffffffff, 0x2000000}}, 0x128) [ 2351.249369] *** Guest State *** [ 2351.268484] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2351.288213] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 13:43:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 13:43:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5e6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x8008, 0x6, 0x1ff, r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$selinux_validatetrans(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563815f723a6465706d6f645f657865635f743a73302073797374656d5f753a6f626a6563745f723a747a646174615f657865635f743a7330203030303030303030303030303030303030303033202f7362696e2f6468636c69656e74001a8c57f5d69f7ba46b6bea42b7991240532a4a39da94ff2515bb2cb871d93ef38343f44abc117fe745ee1ee4a2e05f85aef22689bd729102af9965ec95c85dde116f8a5a103952acf7264a638bd15d42493b2bb0bd21"], 0x6a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x8, 0x3}, {}, 0x3, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0x3505, 0x4, 0x0, 0x2, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x601}}], 0x400000000000107, 0x0) [ 2351.311040] CR3 = 0x0000000000000000 [ 2351.315391] RSP = 0x0000000000000000 RIP = 0x0000000000000000 13:43:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffff07) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010c0000000000000000005b2b00", @ANYRES32=r6, @ANYBLOB="0300000000000000"], 0x20}}, 0x0) [ 2351.358246] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2351.366066] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2351.376073] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2351.385883] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2351.399172] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2351.426229] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2351.466303] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:43:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x3000000}}, 0x128) 13:43:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 2351.473702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2351.485868] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2351.516399] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2351.538929] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2351.567163] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2351.577958] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2351.589619] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2351.602882] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2351.613518] Interruptibility = 00000000 ActivityState = 00000000 [ 2351.626470] *** Host State *** [ 2351.629934] RIP = 0xffffffff811c9793 RSP = 0xffff888085c778c0 [ 2351.647824] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2351.686691] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000034000 [ 2351.719355] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 2351.734431] CR0=0000000080050033 CR3=000000004f7de000 CR4=00000000001426f0 [ 2351.746779] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 2351.776179] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2351.806219] *** Control State *** [ 2351.811872] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2351.818697] EntryControls=0000d1ff ExitControls=002fefff [ 2351.831470] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2351.842704] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2351.850782] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2351.857879] reason=80000021 qualification=0000000000000000 [ 2351.864421] IDTVectoring: info=00000000 errcode=00000000 [ 2351.870141] TSC Offset = 0xfffffb1276469e5e [ 2351.874672] TPR Threshold = 0x00 [ 2351.878137] EPT pointer = 0x000000005731a01e [ 2351.882666] Virtual processor ID = 0x0002 [ 2351.910117] *** Guest State *** [ 2351.913606] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2351.924653] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2351.933778] CR3 = 0x0000000000000000 [ 2351.937498] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2351.944549] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2351.954672] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2351.961530] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2351.969879] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2351.977877] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2351.986632] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2351.994720] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2352.002976] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2352.011059] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2352.019205] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2352.027187] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2352.035227] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2352.043270] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2352.049757] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2352.057224] Interruptibility = 00000000 ActivityState = 00000000 [ 2352.063609] *** Host State *** [ 2352.067357] RIP = 0xffffffff811c9793 RSP = 0xffff888090b778c0 [ 2352.073416] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2352.079902] FSBase=00007f771a1a3700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 2352.088153] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2352.094114] CR0=0000000080050033 CR3=000000004f7de000 CR4=00000000001426f0 [ 2352.101294] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2352.107952] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2352.114791] *** Control State *** [ 2352.118250] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2352.124976] EntryControls=0000d1ff ExitControls=002fefff [ 2352.130571] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2352.137512] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2352.144271] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2352.150900] reason=80000021 qualification=0000000000000000 [ 2352.157225] IDTVectoring: info=00000000 errcode=00000000 [ 2352.162745] TSC Offset = 0xfffffb121b565555 [ 2352.167073] TPR Threshold = 0x00 [ 2352.170502] EPT pointer = 0x00000000516d101e [ 2352.174914] Virtual processor ID = 0x0002 [ 2352.929424] Bluetooth: hci0: command 0x1003 tx timeout [ 2352.934892] Bluetooth: hci0: sending frame failed (-49) [ 2355.009151] Bluetooth: hci0: command 0x1001 tx timeout [ 2355.014727] Bluetooth: hci0: sending frame failed (-49) [ 2357.089129] Bluetooth: hci0: command 0x1009 tx timeout 13:43:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000000)={0x410, 0x4, [0x5, 0x9, 0xffff, 0x5, 0x101]}) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:43:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x4000000}}, 0x128) 13:43:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 13:43:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000600)={0x2, 0x1, 0xffffffff, 0xe5, &(0x7f0000000440)=""/229, 0xb0, &(0x7f0000000540)=""/176, 0x7c, &(0x7f00000002c0)=""/124}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x80, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x9100, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8771e7099fb36f8b}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b6925b630f59f25584413ea593ef6917167c390800a81f6d015b449c", @ANYRES16=r11, @ANYBLOB="000026bd700009000000010000000c00050002000000000000000c000300f10d0000000000000c000400090000000000000008000100000000000c0006000200000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x9880}, 0x4000080) getsockname$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000100)=0x1c) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0x5, {0x5, 0x6, 0x5, 0x401}}) socket$inet6(0xa, 0xd4e343ee1daac472, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000060007000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 13:43:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000340)={{0x1f, 0x4}, 'port1\x00', 0x2, 0x8, 0x1, 0x3, 0x2, 0x7, 0x0, 0x0, 0x7, 0x8}) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r8 = socket$inet(0x10, 0x3, 0xc) sendmsg(r8, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) sendmsg(r9, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=r2, @ANYBLOB="e820901b8cf0ebed146c7460f73433cd1de77f500f103e5d7530cba2cb534eab7d9735ef6594f5bcc038ff9f9d4fd9d319e75d7d7e27fdd88431f2ff214e4c2567438b1efcdd5fd2b2d9cebe164af2ec12263094a2848210a92c7fb8f1d621c81782615572e3f87d45dc4a7dcc05b1cf971b4c6b6618b869fd5128919ad3903ecaa583cf152aa6dc8a0f0901aefbaa39fa8c7abb8143f08074816004c723db32fc0bc2b0d48de431dcd207ffbd04df9ed4d4758ea04dc9359445b7872ab5e07c0870ce34490c23571fec1e0eea31610322e5006977ebe4386e2c04ef595ced13b6f9cc750f1cd10fcfe894cdb132fbf09fa2bcd0", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC=r7, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=r8, @ANYPTR, @ANYRES16=r9, @ANYRESOCT=0x0, @ANYRES16, @ANYRESOCT=r5, @ANYPTR, @ANYPTR64]], @ANYRES16=r5, @ANYRES64=r6], &(0x7f0000a8a000)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r10, r11, 0x0, 0x320f) connect$inet(0xffffffffffffffff, 0x0, 0x0) 13:43:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000080)='.\x00', 0xfe) r10 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r11 = dup2(r10, r9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r13, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r13, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000100)={r13, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r13, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000140)={r13, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x1}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r14, 0x8}, &(0x7f0000000380)=0x8) 13:43:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x5000000}}, 0x128) [ 2361.136748] veth1_to_bridge: FDB only supports static addresses [ 2361.141110] *** Guest State *** [ 2361.149968] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2361.165948] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 13:43:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2361.197508] CR3 = 0x0000000000000000 [ 2361.208253] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2361.224984] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2361.232875] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2361.241026] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2361.244524] veth1_to_bridge: FDB only supports static addresses [ 2361.249914] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2361.267739] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2361.277846] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2361.287123] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:43:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac8b703909a830800450000700000000000019078ac2314bbac141411ae69125005c212d24500000000000000000000002a000000bb0300004440000000000000000000000000000000000000ac1e00010000000000000000ac141400000000000000000000000000126ee7cabe74ffffffff00000000ffff"], 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)) 13:43:11 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x2, @rand_addr="4750e55bc152f4edd8302485b00a63de", 0x7fff}, 0x1c, &(0x7f00000000c0)}}], 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1b8, 0x200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 13:43:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 2361.306663] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2361.317764] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2361.344598] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 13:43:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x6000000}}, 0x128) [ 2361.368496] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2361.390031] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2361.408170] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2361.436869] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2361.463846] Interruptibility = 00000000 ActivityState = 00000000 [ 2361.475988] *** Host State *** [ 2361.484520] RIP = 0xffffffff811c9793 RSP = 0xffff888044f4f8c0 [ 2361.494790] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2361.505229] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 2361.514652] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2361.522485] CR0=0000000080050033 CR3=00000000a56ea000 CR4=00000000001426f0 [ 2361.536154] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 2361.563514] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2361.575257] *** Control State *** [ 2361.578860] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2361.592302] EntryControls=0000d1ff ExitControls=002fefff [ 2361.597910] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2361.608131] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2361.625455] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2361.634268] reason=80000021 qualification=0000000000000000 [ 2361.643686] IDTVectoring: info=00000000 errcode=00000000 [ 2361.650194] TSC Offset = 0xfffffb0d2a86588a [ 2361.654788] TPR Threshold = 0x00 [ 2361.658249] EPT pointer = 0x000000004972501e [ 2361.663055] Virtual processor ID = 0x0002 [ 2363.169106] Bluetooth: hci0: command 0x1003 tx timeout [ 2363.174581] Bluetooth: hci0: sending frame failed (-49) [ 2363.889276] Bluetooth: hci1: command 0x1003 tx timeout [ 2363.894793] Bluetooth: hci1: sending frame failed (-49) [ 2365.249221] Bluetooth: hci0: command 0x1001 tx timeout [ 2365.254648] Bluetooth: hci0: sending frame failed (-49) [ 2365.969728] Bluetooth: hci1: command 0x1001 tx timeout [ 2365.976367] Bluetooth: hci1: sending frame failed (-49) [ 2367.329132] Bluetooth: hci0: command 0x1009 tx timeout [ 2368.049261] Bluetooth: hci1: command 0x1009 tx timeout 13:43:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x200000000000001, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000140)={0x8, @pix={0xd44, 0x3ff, 0x4f565559, 0x6, 0x3, 0x9, 0x2, 0x7fff, 0x1, 0x3, 0x0, 0x5}}) dup2(r1, r0) inotify_init1(0x100000) 13:43:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 13:43:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r5 = dup2(r4, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x0, 0x78e1a012}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x0, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1f, {r7, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x400, 0x8, 0x4, 0x93a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e20, 0x401, @loopback, 0x6}}, 0x4, 0xf7, 0x6, 0xfffffffa, 0x56}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0xfff8, 0x200, 0x80, 0x5, r8}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r9 = accept4$netrom(r2, &(0x7f0000000040)={{0x3, @rose}, [@bcast, @rose, @netrom, @rose, @netrom, @remote, @default, @bcast]}, &(0x7f00000000c0)=0x48, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000100)='bpq0\x00', 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 13:43:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}, 0xffffffffffffffff, 0x40000000}}, 0x128) 13:43:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r6) r8 = socket$inet(0x10, 0x3, 0xc) sendmsg(r8, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) sendmsg(r9, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket$inet(0x10, 0x3, 0xc) sendmsg(r11, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r12 = socket$inet(0x10, 0x3, 0xc) sendmsg(r12, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) bind$unix(r13, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r13, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) connect(r14, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r15 = gettid() r16 = gettid() sendmmsg$unix(r14, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r14]}}, @cred={{0x1c, 0x1, 0x2, {r15}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r16}}}], 0x70}], 0xfd, 0x0) r17 = socket$inet(0x10, 0x3, 0xc) sendmsg(r17, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0}, &(0x7f0000001940)=0xc) r19 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setgid(r20) sendmmsg$unix(r6, &(0x7f0000001a00)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)="ab1257fcfb4d43a4e08e99d5ec8507f26ed5e929e7b0529ab19873492371c0e2a8f567cce7cf0f68ba37853ec5454cb651de478e27faac86884bccfaf8713b9793e2a55da0b2c9dd46289c8b93163b4f0d13d7744348cbe6f6ec66f90d494fefbbfb34bc0115bd754be186fbb71cb9ec532ea207783bd57cd8bd31719e1129724f928c82c2fe18b41f2f3993b492b606c11e56becbbf1a289756d8c0f139c14e31edfc69a77ba073f01bb67ecf4b788da7cff9decb8e6900a5aa369b3abfda882e32f75161a76704e0ab70654264", 0xce}, {&(0x7f0000000400)="c1e64fc9654a882cf340fce9b06cbc54ea8a83005e1b7848603047a30d0d8194b6a1b19a0168baea00d42b3a222f23c8fa6025b4be9dc2115537027e2b0cfc52c7c228f7ddbea0e982d3b54275dec5ab4a8b814d41b3373957fc53db0c74eb12c6f1f527db0ced926571f135aa0395978755c2332215e5dcc117d56960c4cfb861e69c5f4f0f9cdad8188b1d95784305c380dbe588a68102b1ff2243d12d932c7a0647e2272f0f66b05940ddc53743d172aa62fc3c4e2138d999af71613269031d319e7a65c8e47213003475382c8e5a40f210fc37338d", 0xd7}, {&(0x7f0000000500)="a6de65f0a64197c94d506069a3867cc1aed882e205eb61be2c966ec13f9f835bc780552c61b4493970297b34a62daf93aecc8165df28da5c04d7d5a91f23500de1618467d0502a61ce2171756b29fc58c9939e9252d9d7c9133a89022979b3c664e8bcf6b89cfb91a393d749e318c50b9d56e58fda358ea6239fbbb4cce035695f2cf7f0db5b7eae004e964b10dc144d91734ff8d961f7205a0e8eec374e9ef691e0a5ffd461983e5425ec8db861f4723d690e2e6fe10f5ee1eaa3f4ef2a73ae04102487e619efec688b3722581a76fb239304b4d5899446ee17f290e947ecee1f852a7c88211801d15da9c2d76c04d39221acf8c64c", 0xf6}], 0x3, 0x0, 0x0, 0x24000004}, {&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000680)="926e35348e6936686ceb9afdd0f4fad9aac87bf440cbfb6e422f53d666434840828826fe7e9928c4f2fd4076fb11fe1b22d299be4d930849c2e46687df7b27140c2b3922d2b594a2a389a8d4af4f0023c34524ea934cf24afbdb298e892b4d010502669c1cde7089ea44e0bf2131530f98b344c6e501ae5e6a0f94710d5bf09e80d18c9003a8ba5b7748d73822c930b40fc8c7cec2bef213c2af9f0d98f6f069760a8137a43756bfa843dd72fd29f17aefe93230a47039a93f6f5baf17c9d63008efc69b7a896eca23df", 0xca}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="cedffe96c82fd1a525a4ac4ac3f5b67a75ffe24d2ed7711088bbc2737b68ac04edca8cdfb7af553f0856114073b070e30963c859f27dfa6c2b7dc7e0c85c73bd28ce7a6344dcb0533ad7392ef5a9ee3b88b295229e4ed53dbee937cd4f0226c731711b3f797da08d04a70620c8cd20b9ed253d9d49ce386f3d42ad07ec754882dd60cfe6adf7fdb6d3143fe1ef57ede7c439c93de8a93f7f6f63d13b8fd5f8e333557230710c095e5b4266d761a19b407675a582cae16054c8702997b7338f59b4115a4664b03f53e7e9080f9c57d8aec264b95ec5536f71c87222afa6a0", 0xde}, {&(0x7f0000001880)="491adaae750562eb74f86ede", 0xc}], 0x4, &(0x7f0000001980)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32, @ANYRES32=r12, @ANYBLOB="14000000000000bc22280d0001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r18, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40000}], 0x2, 0x14) 13:43:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 13:43:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0x60000000}}, 0x128) [ 2372.013678] *** Guest State *** [ 2372.024226] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 13:43:22 executing program 2: [ 2372.071130] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 13:43:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r2, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001840)=0x14) r7 = socket$inet(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000004b80)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000004c80)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r9) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockname$packet(r11, &(0x7f0000004cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004d00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000005040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005080)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r14, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000077c0)={'vxcan1\x00', r14}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r16, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@xdp={0x2c, 0x8, r17, 0x39}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6c06}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2db}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000007a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000007a40)={&(0x7f0000007800)={0x240, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r12}, {0x4}}, {{0x8, 0x1, r13}, {0xf8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x40040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xa) 13:43:22 executing program 4: [ 2372.189349] CR3 = 0x0000000000000000 [ 2372.198819] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2372.228032] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 13:43:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, 0xffffffffffffffff, 0xc0000000}}, 0x128) 13:43:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 13:43:22 executing program 2: [ 2372.245506] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2372.293205] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2372.327988] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:43:22 executing program 2: [ 2372.339474] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.350936] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.364207] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.376945] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:43:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x20000428) [ 2372.388442] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2372.403969] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2372.423843] IDTR: limit=0x0000ffff, base=0x0000000000000000 13:43:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 2372.446908] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2372.491737] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2372.526758] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2372.535263] Interruptibility = 00000000 ActivityState = 00000000 [ 2372.543489] *** Host State *** [ 2372.546848] RIP = 0xffffffff811c9793 RSP = 0xffff888033dbf8c0 [ 2372.553025] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2372.560055] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 2372.568119] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2372.574155] CR0=0000000080050033 CR3=0000000088d3d000 CR4=00000000001426e0 [ 2372.581373] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2372.588048] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2372.594884] *** Control State *** [ 2372.598342] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2372.605172] EntryControls=0000d1ff ExitControls=002fefff [ 2372.611750] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2372.618686] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2372.625431] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2372.632164] reason=80000021 qualification=0000000000000000 [ 2372.638498] IDTVectoring: info=00000000 errcode=00000000 13:43:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) creat(&(0x7f0000000140)='./file0\x00', 0x1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:22 executing program 4: 13:43:22 executing program 2: 13:43:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 2372.644019] TSC Offset = 0xfffffb0757d1ded4 [ 2372.648349] TPR Threshold = 0x00 [ 2372.651763] EPT pointer = 0x000000008264d01e [ 2372.656195] Virtual processor ID = 0x0002 [ 2372.806323] *** Guest State *** [ 2372.814916] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2372.824357] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2372.833759] CR3 = 0x0000000000000000 [ 2372.837544] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2372.843899] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2372.850681] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2372.857386] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2372.865459] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.873616] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.881741] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.890856] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.898888] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2372.906951] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2372.914970] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2372.923229] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2372.931362] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2372.939431] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2372.945877] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2372.953427] Interruptibility = 00000000 ActivityState = 00000000 [ 2372.959726] *** Host State *** [ 2372.962938] RIP = 0xffffffff811c9793 RSP = 0xffff888036ad78c0 [ 2372.968934] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2372.975406] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 2372.983260] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2372.989244] CR0=0000000080050033 CR3=000000008da65000 CR4=00000000001426e0 [ 2372.996279] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2373.003044] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2373.010101] *** Control State *** [ 2373.013594] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2373.020376] EntryControls=0000d1ff ExitControls=002fefff [ 2373.025844] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2373.032853] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2373.039592] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2373.046204] reason=80000021 qualification=0000000000000000 [ 2373.052593] IDTVectoring: info=00000000 errcode=00000000 [ 2373.058150] TSC Offset = 0xfffffb06ea74c9bd [ 2373.062551] TPR Threshold = 0x00 [ 2373.065927] EPT pointer = 0x000000004bb6501e [ 2373.070398] Virtual processor ID = 0x0002 [ 2374.209170] Bluetooth: hci0: command 0x1003 tx timeout [ 2374.214670] Bluetooth: hci0: sending frame failed (-49) [ 2376.299158] Bluetooth: hci0: command 0x1001 tx timeout [ 2376.304584] Bluetooth: hci0: sending frame failed (-49) [ 2378.369165] Bluetooth: hci0: command 0x1009 tx timeout 13:43:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xa0008000}, 0x0) 13:43:32 executing program 2: 13:43:32 executing program 4: 13:43:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="b819008ed066b9800000c00f326635000100000f300f236f6766c7442400fcdb00006766c74424025bde47806766c744240600000000670f0114240f01d10f6f58ddba210066ed660f38828f008866b98c04000066b8edc7000066ba000000000f30b814000f00d0", 0x68}], 0x1, 0x4, &(0x7f0000000300), 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r6, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x8, 0x0, 0x0, 0x0, @ib={0x1b, 0x6280, 0x6, {"308370909b278ce48a34e97dcf4b1b7f"}, 0x100000000, 0x3, 0x9}, @in6={0xa, 0x4e24, 0xfffffffc, @rand_addr="dcc3a286d7037c3be76db7d029e42d88", 0x2}}}, 0x118) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) read$eventfd(r0, &(0x7f0000000000), 0x8) 13:43:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0x9, 0x1, 0x4}) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0xf50adabd77b75fa0}, 0x0) r2 = accept(r1, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000200)=0x80) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$rxrpc(0x21, 0x2, 0xa) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x20, 0x9, 0x8937}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x3}, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:43:32 executing program 2: 13:43:32 executing program 4: 13:43:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xaa130000}, 0x0) [ 2382.916141] *** Guest State *** 13:43:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x8000, 0x7, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}}, 0x128) [ 2382.943394] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2382.967632] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 13:43:32 executing program 2: 13:43:32 executing program 4: [ 2383.008654] CR3 = 0x0000000000000000 [ 2383.016245] RSP = 0x0000000000000000 RIP = 0x0000000000000000 13:43:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) [ 2383.053629] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2383.080071] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 13:43:33 executing program 4: [ 2383.108726] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2383.131897] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:43:33 executing program 2: [ 2383.162253] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2383.193084] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2383.225723] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2383.254697] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2383.269651] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2383.287747] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2383.296018] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2383.304121] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2383.312330] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2383.318860] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2383.326753] Interruptibility = 00000000 ActivityState = 00000000 [ 2383.333270] *** Host State *** [ 2383.336591] RIP = 0xffffffff811c9793 RSP = 0xffff888053b178c0 [ 2383.342853] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2383.350354] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 2383.358345] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2383.364363] CR0=0000000080050033 CR3=000000004f99a000 CR4=00000000001426f0 [ 2383.371596] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2383.379054] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2383.385420] *** Control State *** [ 2383.388910] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2383.395660] EntryControls=0000d1ff ExitControls=002fefff [ 2383.401221] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2383.408159] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2383.414905] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2383.421908] reason=80000021 qualification=0000000000000000 [ 2383.428231] IDTVectoring: info=00000000 errcode=00000000 [ 2383.433799] TSC Offset = 0xfffffb0184dd8e19 [ 2383.438135] TPR Threshold = 0x00 [ 2383.441564] EPT pointer = 0x000000009056001e [ 2383.445998] Virtual processor ID = 0x0002 13:43:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 13:43:33 executing program 4: [ 2385.009203] Bluetooth: hci0: command 0x1003 tx timeout [ 2385.014628] Bluetooth: hci0: sending frame failed (-49) [ 2385.739111] Bluetooth: hci1: command 0x1003 tx timeout [ 2385.744519] Bluetooth: hci1: sending frame failed (-49) [ 2387.089157] Bluetooth: hci0: command 0x1001 tx timeout [ 2387.094808] Bluetooth: hci0: sending frame failed (-49) [ 2387.809152] Bluetooth: hci1: command 0x1001 tx timeout [ 2387.814586] Bluetooth: hci1: sending frame failed (-49) [ 2389.169208] Bluetooth: hci0: command 0x1009 tx timeout [ 2389.889142] Bluetooth: hci1: command 0x1009 tx timeout 13:43:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x5ca, 0x200020, 0x100000001}) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:43:44 executing program 2: 13:43:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x60040, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000180)) r7 = socket$inet(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) signalfd4(r7, &(0x7f0000000000)={0x20}, 0x8, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 13:43:44 executing program 4: 13:43:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:43:44 executing program 4: 13:43:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 2394.418675] *** Guest State *** 13:43:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x7, &(0x7f0000000180)=""/80) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000000)={0x0, 0x10000, 0xc0, 0x10, 0x1f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) read$rfkill(r8, &(0x7f0000000200), 0x8) 13:43:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() r4 = gettid() sendmmsg$unix(r2, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x70}], 0xfd, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001740)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001540)="52e3f53bdac4b85c873810b33b6c4afb6ddff14e37e56ef586e70975065ecf3ba7", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2394.449789] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2394.461545] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2394.507257] CR3 = 0x0000000000000000 [ 2394.520830] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2394.530457] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2394.541513] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2394.548678] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 13:43:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000001c0)=[{0x2}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_wait(r4, &(0x7f0000000000)=[{}, {}], 0x2, 0x5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 2394.565459] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2394.575862] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:43:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 2394.632806] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2394.659552] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2394.689686] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2394.739067] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2394.748532] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2394.758709] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2394.768942] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2394.778099] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2394.785423] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2394.794641] Interruptibility = 00000000 ActivityState = 00000000 [ 2394.807677] *** Host State *** [ 2394.825519] RIP = 0xffffffff811c9793 RSP = 0xffff888090b778c0 [ 2394.832747] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2394.840950] FSBase=00007f771a1e6700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 2394.849466] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 2394.855801] CR0=0000000080050033 CR3=0000000092979000 CR4=00000000001426f0 [ 2394.864783] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 2394.872067] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2394.878534] *** Control State *** [ 2394.882407] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000e3 [ 2394.890537] EntryControls=0000d1ff ExitControls=002fefff [ 2394.896102] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2394.903159] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 2394.910404] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2394.917825] reason=80000021 qualification=0000000000000000 [ 2394.928502] IDTVectoring: info=00000000 errcode=00000000 [ 2394.934150] TSC Offset = 0xfffffafb5b13f35f [ 2394.938645] TPR Threshold = 0x00 [ 2394.942228] EPT pointer = 0x0000000044bcd01e [ 2394.946646] Virtual processor ID = 0x0002 [ 2396.449147] Bluetooth: hci0: command 0x1003 tx timeout [ 2396.454557] Bluetooth: hci0: sending frame failed (-49) [ 2397.259197] Bluetooth: hci1: command 0x1003 tx timeout [ 2397.264617] Bluetooth: hci1: sending frame failed (-49) [ 2398.529169] Bluetooth: hci0: command 0x1001 tx timeout [ 2398.534728] Bluetooth: hci0: sending frame failed (-49) [ 2399.329186] Bluetooth: hci1: command 0x1001 tx timeout [ 2399.334771] Bluetooth: hci1: sending frame failed (-49) [ 2400.609179] Bluetooth: hci0: command 0x1009 tx timeout [ 2401.409142] Bluetooth: hci1: command 0x1009 tx timeout 13:43:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000005) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000478000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x2, @local, 0x7ca}], 0x1c) r0 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="9cb9df88924eae1c4c9e917339bc72a18835c572f312b1cc55cd0c9885b52568046ef1e33c40967aef2df8823e27eeec5036c4562234e0821d90b4537dacc650a82ef7a3cefd6dc7d7bd1bfd55bae9a370b91470dc7693ca68dcf970fb57edf02e2e8b78246639e4f4088616e3b5d76d6d28ac7df7dbaead7ef769efbd5ace594c82b82e1995cc50ec4658d7c5210b2921650573fe8fd751ebf33233b24d10b51d76377398bfbc24d14984594211d2c2b7cf6181c259213636543efb1790bc4d9110e99bfdf76b41d4fcfe0e275909c740f888f6d5c6a5e713041accda2156a09234f9ad5109", 0xe6, 0x0) keyctl$assume_authority(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r7) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x4f00, 0x10000000002) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x3, [], "439144782237b8800dd031e8e5aa0fc0"}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f00000002c0)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:43:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "142260f4d140dace02a914a1b1cdda8437794c0a27d0b1299afc1e198fca7e692cf9f63105df272d34c702b7e2aebe78e3b386b579d863536c029b38224248e435e7f13299537bb811be5172b9603fbdeb041a8ea842c2fc3d3b465ee0d81d9609b7059aa85dc9e2655aee1bbdcd14f06be04ac9e7f6b817773fd2481688f9be76d2a4b77e555a99e3661a14b668c7351a98f8598f6232232741dce48106039807bb068226c00f7e4c7740662f5c31700d3723fa4d87970b4b5091f7a74353615cd73066cec291d775becb9cba36f85de8a6e802e357db0be69d4feda6e5da1940f1a84e85e4033bd7982418a6d52d7477032c8a38009fdfba6cb053fbde16fc"}}}, 0x128) 13:43:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 13:43:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001000000000048000200000000000000f4ffffffffffffff00000000000000000000000000000000000000009ba0fb15000000000000000000000000000000000000000000000000000010f3c8257a8dcd19f46392164705cb8f95dca116f58eca7a213a2e806a3a74b5d404449df4a94e2e402600000000000000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="00000002000000000300c4c1080001006270660050000200080006000000000004000500400002003c0001000000000002000020000000000b75daf6a86081eca802891600000011000000000000000010000000000000000000000000000000000000000000ddffffff00"/116], 0x7c}}, 0x0) r7 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x42, 0x0) 13:43:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x7, 0x6}]}, 0xc, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0x10, 0x3, 0xc) sendmsg(r8, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000580)={0x8001, 0x800, 0x2, 0x6c1, 0xde20, 0xfffffff8, 0x2, 0xffffffe0, r9}, 0x20) write$vnet(r7, &(0x7f0000000480)={0x1, {&(0x7f0000000300)=""/156, 0x9c, &(0x7f00000003c0)=""/189, 0x3, 0x4}}, 0x68) r10 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000140)={0x100, 0x800}) 13:43:55 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffa, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x25, @remote, 0x2}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x8, 0x4, 0x8000, 0xfffffff7, 0x6, 0xfffffc01, 0x40, 0xfffffff9, r2}, 0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000100)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timerfd_gettime(r9, &(0x7f0000000140)) r10 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$bt_hci_HCI_TIME_STAMP(r10, 0x0, 0x3, &(0x7f00000000c0)=0x3, 0x4) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x4) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)) 13:43:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 13:43:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 13:43:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002940)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000002a40)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000002a80)=0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002ac0)={{{@in=@broadcast, @in=@empty, 0x4e23, 0x1, 0x4e23, 0x6, 0x2, 0x30, 0x20, 0x33, r7, r11}, {0x0, 0x30a2, 0x8919, 0xfff, 0x80000000, 0xed, 0x0, 0x9c3}, {0x200, 0x18000000, 0x0, 0xfffffffffffffffa}, 0x8, 0x6e6bb8, 0x0, 0x1, 0x4}, {{@in6=@local, 0x4d3, 0x39}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0x3, 0x2, 0x1, 0x8f, 0x6, 0xffffff7f}}, 0xe8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r6) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x3, r13}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:56 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vsock\x00', 0x200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001640)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000016c0)={r2, 0x5, 0x714b}) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/238, 0xee}], 0x2, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000038e800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') lseek(r8, 0x203ffffd, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)={r9}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f00000015c0)={r9, 0x8}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 13:43:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x2000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x3, 0x81}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r4, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r8, 0x80dc5521, &(0x7f0000000140)=""/185) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000200)="a73335c7d15e80", 0x7, r2}, 0x68) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 13:43:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}}, 0x2) [ 2406.201131] *** Guest State *** 13:43:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0) flistxattr(r1, &(0x7f0000000140)=""/211, 0xd3) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4012, r0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x29080, 0x0) 13:43:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000040)={0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setgid(r8) lchown(&(0x7f0000000080)='./file0\x00', r6, r8) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0x8, 0x0, 0x0) [ 2406.240096] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2406.281688] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2406.310601] CR3 = 0x0000000000000000 13:43:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}}, 0x4) [ 2406.329770] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2406.350190] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 13:43:56 executing program 2: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x50, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x7fff, &(0x7f0000000140)=0x2) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x0, 0x0, 0x7, 0x2}) truncate(&(0x7f0000000100)='./file0/bus\x00', 0x0) [ 2406.375648] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2406.396026] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2406.409930] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:43:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 2406.458673] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2406.513507] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2406.529088] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2406.539763] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2406.548074] GDTR: limit=0x0000ffff, base=0x0000000000000000 13:43:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}}, 0xa) [ 2406.557006] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2406.565771] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2406.584504] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2406.599662] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2406.620004] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 13:43:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x149800) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pptp(r4, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1e) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000240)={@dev, @initdev}, &(0x7f0000000280)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_generic(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x410040}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x15, 0x100, 0x70bd27, 0x25dfdbff, {0xc}, [@generic="625e80406f91c21388242ce70f90ca80a063b03ed7e557d2b0bb49506b681287cf9cfab058bd83ac924cc93deceba1e4fea16f3beea3081bd4f12f9a16a6814343983355fe975069eb9076f54c5925a5d57065deba4a785feb986f84033fd5df42db4b7deddf63ed4280a101e8b116a47e901b39d09ccc8d69f26b165faa20c98d1a3a5b9b44bf69137384b93c2d60409e522ebad5c5d3c70cba3a35fd3a972e0e1da4c7246342547d3cd55b6aa914", @generic="56c3"]}, 0xc8}}, 0x20000040) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x5}, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x10, 0x2e, 0x0, @remote, @mcast2, {[], @dccp={{0x4e21, 0x0, 0x4, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, "81d83c", 0x0, "fb1289"}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040), 0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 13:43:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) syz_init_net_socket$llc(0x1a, 0x7, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)=0x8) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$unix(r4, 0x0, &(0x7f0000000000), 0xc1800) [ 2406.670648] Interruptibility = 00000000 ActivityState = 00000000 [ 2406.710083] *** Host State *** [ 2406.724718] RIP = 0xffffffff811c9793 RSP = 0xffff88808c83f8c0 [ 2406.749535] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2406.802579] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 2406.813936] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 2406.823578] CR0=0000000080050033 CR3=0000000052cd4000 CR4=00000000001426e0 [ 2406.834335] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 2406.844713] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2406.854510] *** Control State *** [ 2406.858294] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2406.868752] EntryControls=0000d1ff ExitControls=002fefff [ 2406.878179] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2406.885522] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2406.895524] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 13:43:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000140)=0xcc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x301}, 0x14}}, 0xe) [ 2406.905362] reason=80000021 qualification=0000000000000000 [ 2406.914749] IDTVectoring: info=00000000 errcode=00000000 [ 2406.923401] TSC Offset = 0xfffffaf50ace08d7 [ 2406.927807] TPR Threshold = 0x00 [ 2406.939580] EPT pointer = 0x00000000906bf01e [ 2406.949721] Virtual processor ID = 0x0002 [ 2407.040551] *** Guest State *** [ 2407.047392] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 2407.057017] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 2407.066535] CR3 = 0x0000000000000000 [ 2407.070987] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 2407.077094] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 2407.084578] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 2407.093808] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 2407.102651] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2407.111092] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2407.119292] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2407.127441] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2407.135532] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 2407.144126] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2407.152327] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 2407.160400] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 2407.168669] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2407.177240] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 2407.183824] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2407.191531] Interruptibility = 00000000 ActivityState = 00000000 [ 2407.197804] *** Host State *** [ 2407.201073] RIP = 0xffffffff811c9793 RSP = 0xffff8880573e78c0 [ 2407.207065] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2407.213642] FSBase=00007f771a1e6700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 2407.221521] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 2407.227414] CR0=0000000080050033 CR3=000000008ed6f000 CR4=00000000001426e0 [ 2407.234491] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 2407.241676] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2407.247778] *** Control State *** [ 2407.251307] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000e3 [ 2407.258012] EntryControls=0000d1ff ExitControls=002fefff [ 2407.263537] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2407.270541] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 2407.277208] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2407.284376] reason=80000021 qualification=0000000000000000 [ 2407.291039] IDTVectoring: info=00000000 errcode=00000000 [ 2407.291141] Bluetooth: Error in BCSP hdr checksum [ 2407.296543] TSC Offset = 0xfffffaf495a97a17 [ 2407.296551] TPR Threshold = 0x00 [ 2407.296561] EPT pointer = 0x000000008f51701e [ 2407.296574] Virtual processor ID = 0x0002 [ 2407.549332] Bluetooth: Error in BCSP hdr checksum [ 2407.809372] Bluetooth: Error in BCSP hdr checksum [ 2408.069286] Bluetooth: Error in BCSP hdr checksum [ 2408.289129] Bluetooth: hci0: command 0x1003 tx timeout [ 2408.294738] Bluetooth: hci0: sending frame failed (-49) [ 2408.329327] Bluetooth: Error in BCSP hdr checksum [ 2408.589319] Bluetooth: Error in BCSP hdr checksum [ 2408.849405] Bluetooth: Error in BCSP hdr checksum [ 2409.089182] Bluetooth: hci1: command 0x1003 tx timeout [ 2409.094811] Bluetooth: Error in BCSP hdr checksum [ 2409.359442] Bluetooth: Error in BCSP hdr checksum [ 2409.619457] Bluetooth: Error in BCSP hdr checksum [ 2409.879410] Bluetooth: Error in BCSP hdr checksum [ 2410.139423] Bluetooth: Error in BCSP hdr checksum [ 2410.369177] Bluetooth: hci0: command 0x1001 tx timeout [ 2410.374604] Bluetooth: hci0: sending frame failed (-49) [ 2410.399477] Bluetooth: Error in BCSP hdr checksum [ 2410.659437] Bluetooth: Error in BCSP hdr checksum [ 2410.919347] Bluetooth: Error in BCSP hdr checksum [ 2411.169133] Bluetooth: hci1: command 0x1001 tx timeout [ 2411.174885] Bluetooth: Error in BCSP hdr checksum [ 2411.429465] Bluetooth: Error in BCSP hdr checksum [ 2411.434452] Bluetooth: Error in BCSP hdr checksum [ 2411.689623] Bluetooth: Error in BCSP hdr checksum [ 2411.694658] Bluetooth: Error in BCSP hdr checksum [ 2411.949505] Bluetooth: Error in BCSP hdr checksum [ 2411.954618] Bluetooth: Error in BCSP hdr checksum [ 2412.209539] Bluetooth: Error in BCSP hdr checksum [ 2412.214469] Bluetooth: Error in BCSP hdr checksum [ 2412.449163] Bluetooth: hci0: command 0x1009 tx timeout [ 2412.469413] Bluetooth: Error in BCSP hdr checksum [ 2412.474338] Bluetooth: Error in BCSP hdr checksum [ 2412.729386] Bluetooth: Error in BCSP hdr checksum [ 2412.734358] Bluetooth: Error in BCSP hdr checksum [ 2412.989377] Bluetooth: Error in BCSP hdr checksum [ 2412.994299] Bluetooth: Error in BCSP hdr checksum [ 2413.249257] Bluetooth: hci1: command 0x1009 tx timeout [ 2413.254785] Bluetooth: Error in BCSP hdr checksum [ 2413.260154] Bluetooth: Error in BCSP hdr checksum [ 2413.519478] Bluetooth: Error in BCSP hdr checksum [ 2413.524449] Bluetooth: Error in BCSP hdr checksum [ 2413.779370] Bluetooth: Error in BCSP hdr checksum [ 2413.784370] Bluetooth: Error in BCSP hdr checksum [ 2414.039351] Bluetooth: Error in BCSP hdr checksum [ 2414.044395] Bluetooth: Error in BCSP hdr checksum [ 2414.299368] Bluetooth: Error in BCSP hdr checksum [ 2414.304329] Bluetooth: Error in BCSP hdr checksum [ 2414.559468] Bluetooth: Error in BCSP hdr checksum [ 2414.564415] Bluetooth: Error in BCSP hdr checksum [ 2414.819423] Bluetooth: Error in BCSP hdr checksum [ 2414.824364] Bluetooth: Error in BCSP hdr checksum [ 2415.079387] Bluetooth: Error in BCSP hdr checksum [ 2415.084352] Bluetooth: Error in BCSP hdr checksum [ 2415.339443] Bluetooth: Error in BCSP hdr checksum [ 2415.344439] Bluetooth: Error in BCSP hdr checksum [ 2415.599460] Bluetooth: Error in BCSP hdr checksum [ 2415.604616] Bluetooth: Error in BCSP hdr checksum [ 2415.859490] Bluetooth: Error in BCSP hdr checksum [ 2415.864605] Bluetooth: Error in BCSP hdr checksum [ 2416.119419] Bluetooth: Error in BCSP hdr checksum [ 2416.124331] Bluetooth: Error in BCSP hdr checksum [ 2416.379427] Bluetooth: Error in BCSP hdr checksum [ 2416.384486] Bluetooth: Error in BCSP hdr checksum [ 2416.639480] Bluetooth: Error in BCSP hdr checksum [ 2416.644393] Bluetooth: Error in BCSP hdr checksum [ 2417.330973] ================================================================== [ 2417.339146] BUG: KASAN: use-after-free in kfree_skb+0x38/0x390 [ 2417.345334] Read of size 4 at addr ffff888048c81364 by task syz-executor.1/20230 [ 2417.353013] [ 2417.354798] CPU: 0 PID: 20230 Comm: syz-executor.1 Not tainted 4.19.82 #0 [ 2417.361720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.371078] Call Trace: [ 2417.373661] dump_stack+0x172/0x1f0 [ 2417.377653] ? kfree_skb+0x38/0x390 [ 2417.381410] print_address_description.cold+0x7c/0x20d [ 2417.386963] ? kfree_skb+0x38/0x390 [ 2417.390586] kasan_report.cold+0x8c/0x2ba [ 2417.394728] check_memory_region+0x123/0x190 [ 2417.399139] kasan_check_read+0x11/0x20 [ 2417.403098] kfree_skb+0x38/0x390 [ 2417.406543] bcsp_close+0xc7/0x130 [ 2417.410124] hci_uart_tty_close+0x1ea/0x250 [ 2417.414881] ? hci_uart_close+0x50/0x50 [ 2417.418850] tty_ldisc_close.isra.0+0xaf/0xe0 [ 2417.423357] tty_ldisc_kill+0x4b/0xc0 [ 2417.427147] tty_ldisc_release+0xc6/0x280 [ 2417.431303] tty_release_struct+0x1b/0x50 [ 2417.435976] tty_release+0xbcb/0xe90 [ 2417.439685] ? put_tty_driver+0x20/0x20 [ 2417.443647] __fput+0x2dd/0x8b0 [ 2417.447022] ____fput+0x16/0x20 [ 2417.450299] task_work_run+0x145/0x1c0 [ 2417.454177] do_exit+0x994/0x2fa0 [ 2417.458412] ? find_held_lock+0x35/0x130 [ 2417.462470] ? task_work_run+0x118/0x1c0 [ 2417.466618] ? get_signal+0x384/0x1fc0 [ 2417.470498] ? mm_update_next_owner+0x660/0x660 [ 2417.475167] ? _raw_spin_unlock_irq+0x28/0x90 [ 2417.479652] ? get_signal+0x384/0x1fc0 [ 2417.483610] ? _raw_spin_unlock_irq+0x28/0x90 [ 2417.488113] do_group_exit+0x135/0x370 [ 2417.491992] get_signal+0x3ec/0x1fc0 [ 2417.495711] ? __fget+0x340/0x540 [ 2417.499242] do_signal+0x95/0x1960 [ 2417.502903] ? tty_vhangup+0x30/0x30 [ 2417.506713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2417.512263] ? do_vfs_ioctl+0x120/0x1380 [ 2417.516354] ? selinux_file_ioctl+0x46f/0x5e0 [ 2417.521003] ? setup_sigcontext+0x7d0/0x7d0 [ 2417.525346] ? ioctl_preallocate+0x210/0x210 [ 2417.529755] ? selinux_file_mprotect+0x620/0x620 [ 2417.534679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2417.540403] ? check_preemption_disabled+0x48/0x290 [ 2417.545418] ? kick_process+0xef/0x180 [ 2417.549316] ? task_work_add+0x9c/0x110 [ 2417.553294] ? exit_to_usermode_loop+0x43/0x2c0 [ 2417.557951] ? do_syscall_64+0x53d/0x620 [ 2417.562085] ? exit_to_usermode_loop+0x43/0x2c0 [ 2417.566742] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2417.571324] ? trace_hardirqs_on+0x67/0x220 [ 2417.575634] exit_to_usermode_loop+0x244/0x2c0 [ 2417.580234] do_syscall_64+0x53d/0x620 [ 2417.584113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2417.589300] RIP: 0033:0x45a219 [ 2417.592484] Code: Bad RIP value. [ 2417.595847] RSP: 002b:00007fc16788fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2417.603563] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000045a219 [ 2417.610822] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 2417.618093] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2417.625578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1678906d4 [ 2417.632865] R13: 00000000004c4e89 R14: 00000000004d9d30 R15: 00000000ffffffff [ 2417.640149] [ 2417.641794] Allocated by task 20292: [ 2417.645519] save_stack+0x45/0xd0 [ 2417.648969] kasan_kmalloc+0xce/0xf0 [ 2417.652682] kasan_slab_alloc+0xf/0x20 [ 2417.656562] kmem_cache_alloc_node+0x144/0x710 [ 2417.661139] __alloc_skb+0xd5/0x5f0 [ 2417.664774] bcsp_recv+0x8c7/0x13a0 [ 2417.668395] hci_uart_tty_receive+0x225/0x530 [ 2417.672895] tty_ldisc_receive_buf+0x15f/0x1c0 [ 2417.677466] tty_port_default_receive_buf+0x7d/0xb0 [ 2417.682471] flush_to_ldisc+0x222/0x390 [ 2417.686432] process_one_work+0x989/0x1750 [ 2417.690655] worker_thread+0x98/0xe40 [ 2417.694453] kthread+0x354/0x420 [ 2417.697806] ret_from_fork+0x24/0x30 [ 2417.701499] [ 2417.703125] Freed by task 20292: [ 2417.706479] save_stack+0x45/0xd0 [ 2417.709917] __kasan_slab_free+0x102/0x150 [ 2417.714149] kasan_slab_free+0xe/0x10 [ 2417.717945] kmem_cache_free+0x86/0x260 [ 2417.721912] kfree_skbmem+0xcb/0x150 [ 2417.725610] kfree_skb+0xf0/0x390 [ 2417.729074] bcsp_recv+0x2d8/0x13a0 [ 2417.732686] hci_uart_tty_receive+0x225/0x530 [ 2417.737184] tty_ldisc_receive_buf+0x15f/0x1c0 [ 2417.741756] tty_port_default_receive_buf+0x7d/0xb0 [ 2417.746771] flush_to_ldisc+0x222/0x390 [ 2417.751053] process_one_work+0x989/0x1750 [ 2417.755282] worker_thread+0x98/0xe40 [ 2417.759069] kthread+0x354/0x420 [ 2417.762451] ret_from_fork+0x24/0x30 [ 2417.766150] [ 2417.767767] The buggy address belongs to the object at ffff888048c81280 [ 2417.767767] which belongs to the cache skbuff_head_cache of size 232 [ 2417.780935] The buggy address is located 228 bytes inside of [ 2417.780935] 232-byte region [ffff888048c81280, ffff888048c81368) [ 2417.792896] The buggy address belongs to the page: [ 2417.797829] page:ffffea0001232040 count:1 mapcount:0 mapping:ffff8880aa347ac0 index:0x0 [ 2417.808480] flags: 0x1fffc0000000100(slab) [ 2417.812706] raw: 01fffc0000000100 ffffea0002323208 ffffea00025c5a88 ffff8880aa347ac0 [ 2417.820574] raw: 0000000000000000 ffff888048c81000 000000010000000c 0000000000000000 [ 2417.828437] page dumped because: kasan: bad access detected [ 2417.834160] [ 2417.835773] Memory state around the buggy address: [ 2417.840801] ffff888048c81200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 2417.848173] ffff888048c81280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2417.855545] >ffff888048c81300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 2417.862898] ^ [ 2417.869392] ffff888048c81380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2417.876738] ffff888048c81400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2417.884080] ================================================================== [ 2417.891508] Disabling lock debugging due to kernel taint [ 2417.897900] Kernel panic - not syncing: panic_on_warn set ... [ 2417.897900] [ 2417.905304] CPU: 0 PID: 20230 Comm: syz-executor.1 Tainted: G B 4.19.82 #0 [ 2417.913622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.922963] Call Trace: [ 2417.925560] dump_stack+0x172/0x1f0 [ 2417.929208] ? kfree_skb+0x38/0x390 [ 2417.932822] panic+0x26a/0x50e [ 2417.936000] ? __warn_printk+0xf3/0xf3 [ 2417.939886] ? kfree_skb+0x38/0x390 [ 2417.943498] ? preempt_schedule+0x4b/0x60 [ 2417.947649] ? ___preempt_schedule+0x16/0x18 [ 2417.952054] ? trace_hardirqs_on+0x5e/0x220 [ 2417.956362] ? kfree_skb+0x38/0x390 [ 2417.959974] kasan_end_report+0x47/0x4f [ 2417.963935] kasan_report.cold+0xa9/0x2ba [ 2417.968083] check_memory_region+0x123/0x190 [ 2417.972479] kasan_check_read+0x11/0x20 [ 2417.976435] kfree_skb+0x38/0x390 [ 2417.979873] bcsp_close+0xc7/0x130 [ 2417.983420] hci_uart_tty_close+0x1ea/0x250 [ 2417.987741] ? hci_uart_close+0x50/0x50 [ 2417.991703] tty_ldisc_close.isra.0+0xaf/0xe0 [ 2417.996204] tty_ldisc_kill+0x4b/0xc0 [ 2418.000047] tty_ldisc_release+0xc6/0x280 [ 2418.004335] tty_release_struct+0x1b/0x50 [ 2418.008481] tty_release+0xbcb/0xe90 [ 2418.012186] ? put_tty_driver+0x20/0x20 [ 2418.016342] __fput+0x2dd/0x8b0 [ 2418.019661] ____fput+0x16/0x20 [ 2418.022952] task_work_run+0x145/0x1c0 [ 2418.026927] do_exit+0x994/0x2fa0 [ 2418.030378] ? find_held_lock+0x35/0x130 [ 2418.034434] ? task_work_run+0x118/0x1c0 [ 2418.038481] ? get_signal+0x384/0x1fc0 [ 2418.042355] ? mm_update_next_owner+0x660/0x660 [ 2418.047499] ? _raw_spin_unlock_irq+0x28/0x90 [ 2418.051975] ? get_signal+0x384/0x1fc0 [ 2418.055843] ? _raw_spin_unlock_irq+0x28/0x90 [ 2418.060332] do_group_exit+0x135/0x370 [ 2418.064216] get_signal+0x3ec/0x1fc0 [ 2418.067918] ? __fget+0x340/0x540 [ 2418.071364] do_signal+0x95/0x1960 [ 2418.074887] ? tty_vhangup+0x30/0x30 [ 2418.079201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.084735] ? do_vfs_ioctl+0x120/0x1380 [ 2418.088783] ? selinux_file_ioctl+0x46f/0x5e0 [ 2418.093275] ? setup_sigcontext+0x7d0/0x7d0 [ 2418.097583] ? ioctl_preallocate+0x210/0x210 [ 2418.101979] ? selinux_file_mprotect+0x620/0x620 [ 2418.106896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.112428] ? check_preemption_disabled+0x48/0x290 [ 2418.117437] ? kick_process+0xef/0x180 [ 2418.121309] ? task_work_add+0x9c/0x110 [ 2418.125267] ? exit_to_usermode_loop+0x43/0x2c0 [ 2418.129920] ? do_syscall_64+0x53d/0x620 [ 2418.133964] ? exit_to_usermode_loop+0x43/0x2c0 [ 2418.138618] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2418.143184] ? trace_hardirqs_on+0x67/0x220 [ 2418.147498] exit_to_usermode_loop+0x244/0x2c0 [ 2418.152067] do_syscall_64+0x53d/0x620 [ 2418.155949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2418.161225] RIP: 0033:0x45a219 [ 2418.164421] Code: 80 00 00 00 0f 86 94 01 00 00 48 81 fb 00 01 00 00 0f 86 b3 01 00 00 80 3d d5 80 45 01 01 0f 84 83 00 00 00 f3 0f 7f 07 f3 0f <7f> 47 10 f3 0f 7f 47 20 f3 0f 7f 47 30 f3 0f 7f 47 40 f3 0f 7f 47 [ 2418.183423] RSP: 002b:00007fc16788fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2418.191118] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000045a219 [ 2418.198383] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 2418.205636] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2418.213638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1678906d4 [ 2418.220901] R13: 00000000004c4e89 R14: 00000000004d9d30 R15: 00000000ffffffff [ 2418.229871] Kernel Offset: disabled [ 2418.233601] Rebooting in 86400 seconds..