[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.640522][ T26] audit: type=1800 audit(1560833436.446:25): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 64.664765][ T26] audit: type=1800 audit(1560833436.456:26): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 64.723723][ T26] audit: type=1800 audit(1560833436.456:27): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.30' (ECDSA) to the list of known hosts. 2019/06/18 04:50:47 fuzzer started 2019/06/18 04:50:50 dialing manager at 10.128.0.26:42829 2019/06/18 04:50:54 syscalls: 2465 2019/06/18 04:50:54 code coverage: enabled 2019/06/18 04:50:54 comparison tracing: enabled 2019/06/18 04:50:54 extra coverage: extra coverage is not supported by the kernel 2019/06/18 04:50:54 setuid sandbox: enabled 2019/06/18 04:50:54 namespace sandbox: enabled 2019/06/18 04:50:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/18 04:50:54 fault injection: enabled 2019/06/18 04:50:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/18 04:50:54 net packet injection: enabled 2019/06/18 04:50:54 net device setup: enabled 04:53:28 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@null=' \x00', 0x3, 'syz_tun\x00'}) fchmodat(r0, &(0x7f0000000140)='./file0\x00', 0x43) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x9) r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000300)={0x8b, 0x7d, 0x2, {{0x0, 0x66, 0x1, 0x539, {0x0, 0x4, 0x7}, 0x82880000, 0x100, 0x9, 0x3ff, 0xb, 'nodev{nodev', 0x10, '/dev/input/mice\x00', 0x10, ' \x00', 0x8, ',wlan0lo'}, 0x10, ' \x00', r1, r4, r5}}, 0x8b) r6 = accept(r0, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000440)=0x80) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) fchmodat(r0, &(0x7f0000000500)='./file0/file0\x00', 0x80) setregid(r4, r4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffffffffffa}}}, &(0x7f0000000600)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000640)={r8, @in={{0x2, 0x4e20, @empty}}, [0x8, 0x0, 0x7, 0x2, 0x8, 0x4e, 0x6, 0x2a32, 0xa4aa, 0x2, 0x1f, 0x9, 0x8, 0x81, 0x2]}, &(0x7f0000000740)=0x100) epoll_create(0x0) write$P9_RAUTH(r0, &(0x7f0000000780)={0x14, 0x67, 0x2, {0x80, 0x4}}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000007c0)={r8, 0xffff}, &(0x7f0000000800)=0x8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={r2, r3, r4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a80)={0xffffffffffffffff}, 0x117, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000b00)={0x13, 0x10, 0xfa00, {&(0x7f0000000880), r9, 0x3}}, 0x18) setsockopt$sock_void(r6, 0x1, 0x1b, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000b40)={0x4000000000, {{0x2, 0x4e21, @empty}}, 0x0, 0x8, [{{0x2, 0x4e22, @rand_addr=0x16}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @rand_addr=0x6}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e24, @multicast1}}]}, 0x490) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000001000)={0xcc0, 0x8}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001040)={'raw\x00', 0x4d, "af9c5ec11a9ae2d7f46da10a90304357ddce2bcfaf9d076fa21bff3a6156fff5102d15f40b147cfde373f0bd8d4c23ce1855b0fa343186ebe5d02163d27304a4c2299365a9ba57ff8afcb6ae35"}, &(0x7f00000010c0)=0x71) getpeername$packet(r7, &(0x7f0000001280)={0x11, 0x0, 0x0}, &(0x7f00000012c0)=0x14) sendmsg(r7, &(0x7f0000001580)={&(0x7f0000001300)=@hci={0x1f, r10, 0x3}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001380)="3c3e33cb74e2b8ba3525f2e111e8493096dd0330f59ee3a8600e722fb4672cf3a9d0c1dff044", 0x26}, {&(0x7f00000013c0)="625d79ca2a3fc930ad7f7fedea89", 0xe}, {&(0x7f0000001400)="d41c38c05021cd3e19847a41147b9b5ea546e4d52f7fee3e3974926f07da2aadabf29a00bccea36be487a5637ec9ef102b32cc4c0fc830", 0x37}, {&(0x7f0000001440)="f5fec36ac6d76b7c1dc8f519213ff8d21344c7e9901cbfe11af3a08f1de71970dad81ff41dc6fbdbed7979ade18c3dcd65151f1e", 0x34}, {&(0x7f0000001480)="b6303a2d99d38b77d3edc0c568c78eab4a940f656db3376fca4958e48edc02b154037c67f4a21aea2b2af9557cfc921675d3a49131e1772b972793ca656b018bc888f650268626874b2aad0b7475aaac375b0e1e1aae26969eb3b921a7f1", 0x5e}], 0x5}, 0x4) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000015c0)={0x0, 0x1, [0x8001, 0x6, 0x4, 0xffff, 0x8001, 0x196, 0xff, 0x3c2d]}) mknodat(r0, &(0x7f0000001600)='./file0\x00', 0x180, 0x3) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000001640)) membarrier(0x1, 0x0) syzkaller login: [ 236.432183][ T9007] IPVS: ftp: loaded support on port[0] = 21 04:53:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000001) r2 = mq_open(&(0x7f0000000140)='TIPC\x00', 0x40, 0x120, &(0x7f0000000180)={0x10001, 0x81, 0x0, 0x8, 0xfffffffffffffff9, 0x9, 0x5, 0x7b74}) r3 = dup2(r0, r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x700, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='./file0\x00', r4) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x1f, 0x0, 0x5, "b6d10f2c87f31b8285bd96e1aeefb1dd", "ed748615f911f0f3108b"}, 0x1f, 0x3) write$rfkill(r4, &(0x7f0000000300)={0x80000001, 0x5, 0x3, 0x1}, 0x8) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={r5, 0x73, 0x17}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'sha3-512-ce\x00'}}, &(0x7f0000000480)="491bbb47b740999f7eb4e2e053eeefa1d1172800d70d312ee7d689dd32028a799544e95fe47ecda9e5f72a8d2eb6d7f7d65201dd541b41c711358c91feec16df8f42250a9ec31a5408a4f496fc67b1b3c9a1009eb21e98aeb3af9199b00ed7f5f5db533643e3c325386e8ab48f04181e7ccc4d", &(0x7f0000000500)=""/23) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) rseq(&(0x7f0000000540), 0x20, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000580)) fcntl$notify(r4, 0x402, 0x10) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000005c0)=0xc2a9) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000600)=""/249) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, r6, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xe84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x48, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0x400, @local, 0x2}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x9, @local, 0x80c7}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000800)={r7, 0x5c}, &(0x7f0000000840)=0x8) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000880)={0x2, 0x4e21, @loopback}, 0x10) ftruncate(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000008c0)={r7, 0x54b1, 0x10}, 0xc) write$P9_ROPEN(r4, &(0x7f0000000900)={0x18, 0x71, 0x2, {{0x94, 0x4, 0x4}, 0x100}}, 0x18) syz_open_dev$media(&(0x7f0000000940)='/dev/media#\x00', 0xe6f, 0x840) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000980)={{0x7, @name="ea9995662fb32a36b11ca2c00067d62e3b4428fe91f829d4d07d87677e90cee3"}, "1f7b5db92859aec68eaa7ea165eb3b563881c2e15d235c714e1540c74a1c586f", 0x3}) [ 236.561124][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 236.651559][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.660192][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.668910][ T9007] device bridge_slave_0 entered promiscuous mode [ 236.678371][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.693666][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.701954][ T9007] device bridge_slave_1 entered promiscuous mode [ 236.722773][ T9010] IPVS: ftp: loaded support on port[0] = 21 [ 236.756464][ T9007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.770148][ T9007] bond0: Enslaving bond_slave_1 as an active interface with an up link 04:53:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) mq_timedsend(r0, &(0x7f0000000040)="01aae1", 0x3, 0x3, &(0x7f0000000080)={0x77359400}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xa, 0x5, 0x4, 0x2}, 0xa) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x2, 0x3, 0x9, 0x200]}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x2, 0x3, 0x0, 0x3, 0x92c1, 0x5}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x3}}, 0x18) r2 = accept4(r0, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000540)=0x80, 0x80800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x400000, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000640)={0x0, 0xfb, 0x109, 0x2, 0x100000000, "85425592eb005a6aaaf574a0ae840115", "6f8402a9f61ebd4b39428333210a18833974dab517881374ed339aa700034b9ac9f8947353b656f9daacb57fe65c430da39b31677ff3809dbd59d412a3151e538f77dff5ec72b5a4cfb731921d36d99c743cc0561f3c8e2fc2888c8e080414db9bd07991f7603c0d6c655368f5ec77840f04fde64514058e8ce5e761a53f5f1a06875754b19f977bf91a6b47f74164c48d5242d09a9df8492c697b9c2fe593579de950da94f582746c586fff9430c36553a7738c50ecb7143eba7dc490a01093eca6698dabf2c5de55a91e4d437e65de25c22433480b1a6433ac4695a10e2667aeedcfb1a4a9b9115995b232610f60b02b83964c"}, 0x109, 0x2) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x9, 0x509, 0x80, 0xffff}]}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000800)={0x2, 0x1, 0x98c4, 0x7, 0x45c9}) recvmmsg(r2, &(0x7f0000001c80)=[{{&(0x7f0000000840)=@alg, 0x80, &(0x7f0000001b40)=[{&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000980)=""/235, 0xeb}, {&(0x7f0000000a80)=""/132, 0x84}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x4, &(0x7f0000001b80)=""/218, 0xda}, 0xd9}], 0x1, 0x0, &(0x7f0000001cc0)) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000001d00)='trusted.overlay.upper\x00', &(0x7f0000001d40)={0x0, 0xfb, 0x7a, 0x5, 0x12, "948a83e947bee6b433761a6956e214f0", "e355948791e92262a9c23fc5b788042fe9c0782b3c6de2e61d8f3a74dae9e552a405c9398fed563fb2507d646419430ca44d0f2fbad844f3dd3cf4b32322d95d69263559b9cfcd72b894fd8316bf423d018499018f7d1f3be46cc9f94f0d2a356fba46a10f"}, 0x7a, 0x3) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000001dc0)=0x80000000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001e40)='team\x00') getsockname$packet(r0, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001ec0)=0x14) accept$packet(r2, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f40)=0x14) getsockname$packet(r0, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001fc0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002240)={0x0, @multicast1, @multicast1}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000022c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000023c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002400)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@initdev}}, &(0x7f0000002500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002540)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000002640)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002680)={'eql\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003bc0)={'bridge_slave_0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000003cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003d00)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000003dc0)={@empty, @multicast1, 0x0}, &(0x7f0000003e00)=0xc) getpeername(r2, &(0x7f0000003e40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003ec0)=0x80) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000004140)={@broadcast, @remote, 0x0}, &(0x7f0000004180)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000004280)={@dev, 0x0}, &(0x7f00000042c0)=0x14) clock_gettime(0x0, &(0x7f00000073c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000072c0)=[{{&(0x7f0000004300)=@nfc, 0x80, &(0x7f0000006640)=[{&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/165, 0xa5}, {&(0x7f0000005440)=""/194, 0xc2}, {&(0x7f0000005540)=""/247, 0xf7}, {&(0x7f0000005640)=""/4096, 0x1000}], 0x5, &(0x7f00000066c0)=""/39, 0x27}, 0x2}, {{&(0x7f0000006700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000006780)=""/51, 0x33}, {&(0x7f00000067c0)=""/231, 0xe7}, {&(0x7f00000068c0)=""/187, 0xbb}, {&(0x7f0000006980)=""/20, 0x14}, {&(0x7f00000069c0)=""/105, 0x69}, {&(0x7f0000006a40)=""/37, 0x25}, {&(0x7f0000006a80)=""/43, 0x2b}, {&(0x7f0000006ac0)=""/3, 0x3}, {&(0x7f0000006b00)=""/50, 0x32}, {&(0x7f0000006b40)=""/131, 0x83}], 0xa}, 0x9}, {{&(0x7f0000006cc0)=@sco, 0x80, &(0x7f0000007080)=[{&(0x7f0000006d40)=""/208, 0xd0}, {&(0x7f0000006e40)=""/207, 0xcf}, {&(0x7f0000006f40)=""/94, 0x5e}, {&(0x7f0000006fc0)=""/183, 0xb7}, {0x0}], 0x5}, 0x81}, {{0x0, 0x0, &(0x7f00000071c0)=[{&(0x7f0000007100)=""/98, 0x62}, {&(0x7f0000007180)=""/4, 0x4}], 0x2, &(0x7f0000007200)=""/136, 0x88}, 0x5e7}], 0x4, 0x40000100, &(0x7f0000007400)={r18, r19+10000000}) getsockname(r2, &(0x7f00000074c0)=@can={0x1d, 0x0}, &(0x7f0000007540)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000007b80)={&(0x7f0000001e00), 0xc, &(0x7f0000007b40)={&(0x7f0000007580)={0x598, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x270, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3800000000000000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x70cc}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3b2f}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0xf8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xf8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xb079}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r21}}}]}}]}, 0x598}, 0x1, 0x0, 0x0, 0x4000805}, 0x80) [ 236.819272][ T9007] team0: Port device team_slave_0 added [ 236.829506][ T9007] team0: Port device team_slave_1 added [ 236.977024][ T9007] device hsr_slave_0 entered promiscuous mode 04:53:28 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x52000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'nr0\x00', 0x4}, 0x18) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f00000000c0)="4764ad2ae38a9913eaa10fd48c99d5522c541c798c34e2ef9489751c416cb4a93a4cd31c2a8e75bb51a66a6fce9800188dfbe6105a0e84e5e266e890ab012eb287679aa55c78040c65a654aecf", 0x4d) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x3, 0x88, [], 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/136}, &(0x7f0000000300)=0x78) memfd_create(&(0x7f0000000340)='/dev/zero\x00', 0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x6, 0x6, 0x191, 0x4, 0x80000001}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000440)={r2, 0x7fffffff}, &(0x7f0000000480)=0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000004c0)=0x0) wait4(r3, &(0x7f0000000500), 0x20000000, &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x5, 0x6) sendto$ax25(r0, &(0x7f0000000600)="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", 0x1000, 0x4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001600)={r4}) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000001640)={'veth1\x00', {0x2, 0x4e21, @remote}}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000001680)={0x1ff, 'syz1\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000016c0)={0x1, 'veth0_to_hsr\x00', 0x4}, 0x18) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000001700)=0x3, 0x2) ioctl$TCSETA(r0, 0x5406, &(0x7f0000001740)={0x8, 0xfe, 0x200, 0x80, 0x4, 0x5996, 0x96c9, 0x5, 0x4, 0x3f}) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000001780)={0x1, 0x40}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000017c0)={0x0, r1, 0xffffffffffff8000, 0xffff, 0x683, 0xa794}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001880)={0x10, 0x30, 0xfa00, {&(0x7f0000001840)={0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000018c0)={0x11, 0x10, 0xfa00, {&(0x7f0000001800), r5}}, 0x18) r6 = syz_open_dev$usb(&(0x7f0000001900)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000001a80)={'filter\x00', 0x0, 0x3, 0x54, [], 0xa, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001a00)=""/84}, &(0x7f0000001b00)=0x78) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000001b40)={'HL\x00'}, &(0x7f0000001b80)=0x1e) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000001bc0)={0x9, 0x3, 0x5, 0x51}, 0x10) [ 237.025072][ T9007] device hsr_slave_1 entered promiscuous mode [ 237.103254][ T9012] IPVS: ftp: loaded support on port[0] = 21 [ 237.199965][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.207258][ T9007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.215207][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.222285][ T9007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.271674][ T9010] chnl_net:caif_netlink_parms(): no params data found [ 237.281609][ T9015] IPVS: ftp: loaded support on port[0] = 21 04:53:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x60000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000000c0)={0x51, "4899b1934807ba05fafdd8af856b7f0a424036a06e0a08faf16b4d612bb1f4e1cbb78e63dfba8e5eb4ae86ff7f839cfab9de98245fb28c1aaf0131953aaf0d84451be69cd00af3633328c5f70a306e5a34449eef630fe2e627ade716df5433eae9891ca87577085de8b62fcb38d9c465201ff25c4dde955b0fdad90309032a55"}) sync_file_range(r1, 0x8, 0x8000, 0x1) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0xc, 0x3f, 0x4, 0x800, r2}) write$P9_RWRITE(r2, &(0x7f00000001c0)={0xb, 0x77, 0x1, 0xaea}, 0xb) ioctl$TCSBRK(r2, 0x5409, 0x1ff) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000200)) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000240)=0x8, 0x4) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000280)) r4 = getpid() ptrace$getenv(0x4201, r4, 0x7, &(0x7f00000002c0)) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000300)) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000340)={'ipddp0\x00', 0x4}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000380)={0x1, 'bridge0\x00', 0x1}, 0x18) r5 = accept4$nfc_llcp(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x80000) sendmsg$nl_generic(r2, &(0x7f0000001780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)={0x125c, 0x31, 0x0, 0x70bd2a, 0x25dfdbfb, {0xb}, [@generic="1cc24bf0e195af8089aedead4964891453cfa6fc443a5f14651ed6b4a7ad5153ef4c495cb73b47a73f90c0c84bd4e0c7d3e293d0df572b78efc660532a8ebc0e5f1844d959c34e41f64bd139337a3f2249b2ea28e4b196b778d9f6559764433af437", @generic="18b16319f1f0c851d1056ffc0978501a84e854acb19e5e03176a44144494588443cb698180d74b7f690451cadff42252555774276aa91bad183eecefc4e2cb639bde4a9d7f75100ebac405abc2b049863927a30e8943e3aaed095b834a2f2f6a552452dd10b4003358e9d27f10e3988e714522a5fec986ac300ac66e78be9bf850151141c5c5f1dddeaed798a131de80a9afda1641dfcb31fa90dd3e8eebfcc6e28931b2ad", @typed={0x4, 0x78}, @nested={0x103c, 0x16, [@typed={0x14, 0x18, @ipv6=@loopback}, @generic="e17a18e65679cb116f8c", @generic="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", @typed={0xc, 0x18, @str='bridge0\x00'}, @typed={0xc, 0x6c, @u64=0x80000000}]}, @typed={0x6c, 0x91, @binary="30b9472814834e73a577de4672bafa2844f64fea7f7b278260047293ad1313866298bee1f94a85a35a1cd8dffbccf9e25f0401ed239ceeec7fabd48de7c654f8b0c715c25b6d26a850b5b4af85ee25aeab2332447f8d4d2653aad3777be1b565944d0d0734bf"}, @typed={0xc, 0x4a, @u64=0x7}, @generic="28d79b7463f84c938c955488bdc558fd91f30c51164c6b5b7b4b26e264ba863139bcd122254366bb34f0595b2a04a0381200dbcfd1f324ec7623a7e4f96fb5a6778126395ee0efaf930cf8d612aa08ea6b15098a63b1dcc8fd4f2dfb675dea30bfc97f7c74e2b945f4944241996cd8fab658a03d035c7d4345e2ba8193711f8f48408c188641beae"]}, 0x125c}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000001800)={0x3, &(0x7f00000017c0)=[{0x9, 0x3, 0xdf5e, 0x2}, {0x1ff, 0xe1, 0x6, 0x7f}, {0x29884e5d, 0x80, 0x1000, 0x3ff}]}) ptrace$setregs(0xf, r4, 0x7, &(0x7f0000001840)="bb85e36ee33c5ff623e21cd906461c374142d2515fedfa8ef5b9a2aa6ec26fcd3e094ff84662810afe9beef23d8576aa38cb9c5629a3de2245ca2e12b0e4b446a0ace01fe65614697e9635e6bc28e9711274b02d72a80d3935547744dd58d1e814733bae0237") getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000018c0), &(0x7f0000001900)=0x4) ioctl$FIBMAP(r5, 0x1, &(0x7f0000001940)) timer_create(0x7, &(0x7f0000001ac0)={0x0, 0x3c, 0x1, @thr={&(0x7f0000001980)="561129c41701ab898ffe690cd51cd557256e3df15599b830b5772007d2afd38dce2c5e9c1533aa1b38b950333fd6f058514730417b9049c32013c977196005f9ddad46c373f44c884943fdb5dd888cfad96518da02fa2c1937fa19f02734d750a683563b8c2e0c3fc32cc88b940aa617bb1e2828d2ebb0e457e0e3ddb5fe7967dcb868e0b913fcc218a5ff287b3b4330f6ee4ed97a3ac9468970c2bb209453cbaa656d0bd2bfb24b74e1623322cd6b101be377c932cc1841", &(0x7f0000001a40)="4a4894adb314de0fb915c287316b24b8bc530c3d6f38554a44819c2ea00bd073ac5aa5dacb3940f54360102e8158c690215bff3603c5e1a5656c6ac0611cf40fc586c624d3df5cc5a5ee6956ccc91dd073a1dc4d2e5fcd9250fd76e19b38220b61e3e8c7de42"}}, &(0x7f0000001b00)) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x6) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000001b40)={0x53b2, 0xa1, 0x7, 0x9, 0x4, 0x4, 0x5, 0x977, 0x6, 0x5, 0x2, 0x101}) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000001b80)={0xec, 0x2, 0x9, 0x6e30}) write$FUSE_LSEEK(r3, &(0x7f0000001bc0)={0x18, 0xffffffffffffffff, 0x3, {0x9}}, 0x18) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000001c00)) ioctl$TCGETS(r3, 0x5401, &(0x7f0000001c40)) [ 237.434234][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.459280][ T9010] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.466935][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.486277][ T9010] device bridge_slave_0 entered promiscuous mode [ 237.518959][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.536834][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.575930][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.595211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 237.611384][ T9010] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.619198][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.627525][ T9010] device bridge_slave_1 entered promiscuous mode [ 237.637444][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.666655][ T9019] IPVS: ftp: loaded support on port[0] = 21 04:53:29 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = gettid() ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000140)={&(0x7f00000000c0)="3ea1af3a1c86a90bd7d534c57608090d0213861acc676523ce8959062c072c70c6dc0b0489d196d056abe1b81e3a3a3dd219289fde939993bbcd9f54fc955b6816f5e4fba316517fc42a0609f7539056f0fd7bc845", 0x55}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e24, 0xc8e1, @mcast2, 0x3}, {0xa, 0x4e21, 0x7, @empty, 0xffffffffffffff32}, 0x8e5, [0x1000, 0xfffffffffffffffc, 0x800, 0x0, 0x6, 0x2, 0x7, 0x100000001]}, 0x5c) gettid() ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffa000/0x3000)=nil, 0x10000, 0x5, 0xa2, &(0x7f0000ff9000/0x4000)=nil, 0x10000}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000240)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0x0, 0x230, 0x0, 0x120, 0x230, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@ipv6={@loopback, @ipv4={[], [], @multicast2}, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'veth0_to_bridge\x00', 'ip6tnl0\x00', {0xff}, {}, 0xbf, 0x3a, 0x0, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x6, 0x0, 0x0, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xff], 'veth0_to_team\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0xfffffffffffffff9, 0x4, 0x60}, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', 0x80000001}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x7f, 0x98a3}}, @common=@hl={0x28, 'hl\x00'}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x0, 0x0], 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000800)={0x76b, 0xc15, 0xffffffffffffffe1, 0x3, 0x8, 0x20}) accept$unix(r0, &(0x7f0000000880), &(0x7f0000000900)=0x6e) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c86}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10f}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x30}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000b80)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000bc0)={r3, 0xffffffffffffffff}, 0x8) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000c00)=0x3) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000c40)=0x4) setxattr(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)=@random={'trusted.', '-cgrouptrusted\x00'}, &(0x7f0000000d00)='MARK\x00', 0x5, 0x2) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000d40)) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000d80)={0x6, "16c3771369454819fae0810a93a5ae3b7dced732c730be301bf24f85e4892e94", 0x3, 0x1}) mlock2(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000dc0)={{0x200, 0x7}, {0x67, 0x7}, 0x4, 0x4, 0x9}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)={&(0x7f0000000e40)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000ec0)={'veth0_to_bridge\x00', @random="4914a7d0e9c1"}) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000f00)=0x86a8) prctl$PR_GET_TSC(0x19, &(0x7f0000000f40)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000f80)=@gcm_128={{0x304}, "983251cd53522022", "97a6d73b67eb8a4ba1fba93f46ca761f", "62211250", "3196615dc90ceb09"}, 0x28) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000fc0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000001040)=0xfffffffffffffffb) [ 237.708436][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.718423][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.727488][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.734624][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.744009][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.752669][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.784086][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.791206][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.799199][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.849118][ T9010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.899270][ T9010] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.923366][ T9010] team0: Port device team_slave_0 added [ 237.937264][ T9012] chnl_net:caif_netlink_parms(): no params data found [ 237.953245][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.963292][ T9010] team0: Port device team_slave_1 added [ 237.976181][ T9015] chnl_net:caif_netlink_parms(): no params data found [ 237.980873][ T9022] IPVS: ftp: loaded support on port[0] = 21 [ 238.016691][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.025613][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.076688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.126998][ T9010] device hsr_slave_0 entered promiscuous mode [ 238.184072][ T9010] device hsr_slave_1 entered promiscuous mode [ 238.254664][ T9007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.265438][ T9007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.278135][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.286775][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.295332][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.304251][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.312815][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.321496][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.330776][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.346774][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.354579][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.362366][ T9015] device bridge_slave_0 entered promiscuous mode [ 238.372828][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.381027][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.389090][ T9015] device bridge_slave_1 entered promiscuous mode [ 238.425290][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.432448][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.440821][ T9012] device bridge_slave_0 entered promiscuous mode [ 238.450947][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.458613][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.466961][ T9012] device bridge_slave_1 entered promiscuous mode [ 238.482782][ T9015] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.493302][ T9015] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.521390][ T9012] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.540756][ T9012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.572309][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.598933][ T9015] team0: Port device team_slave_0 added [ 238.609844][ T9012] team0: Port device team_slave_0 added [ 238.630162][ T9015] team0: Port device team_slave_1 added [ 238.651134][ T9012] team0: Port device team_slave_1 added [ 238.755768][ T9015] device hsr_slave_0 entered promiscuous mode [ 238.794472][ T9015] device hsr_slave_1 entered promiscuous mode [ 238.898496][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 238.962797][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 239.096082][ T9012] device hsr_slave_0 entered promiscuous mode [ 239.135765][ T9012] device hsr_slave_1 entered promiscuous mode [ 239.181630][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.188987][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.196775][ T9022] device bridge_slave_0 entered promiscuous mode 04:53:31 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)={0x200000000000000}) [ 239.228038][ T9010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.236664][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.249838][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.258796][ T9022] device bridge_slave_1 entered promiscuous mode 04:53:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") [ 239.310315][ T9010] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.384478][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.395154][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.459647][ T9022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.470418][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.479918][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.489246][ T2817] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.496388][ T2817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.515603][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.523289][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.532137][ T9019] device bridge_slave_0 entered promiscuous mode [ 239.543258][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.557000][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.569324][ T9019] device bridge_slave_1 entered promiscuous mode [ 239.584984][ T9022] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.605121][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.612939][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.622091][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.631107][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.638229][ T9024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.647881][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.656847][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.717365][ T9019] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.728354][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.744223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.752840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.770243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.780319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.795502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.809234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.832922][ T9022] team0: Port device team_slave_0 added [ 239.845553][ T9019] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.876638][ T9010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.893375][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.904515][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.913043][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.929582][ T9022] team0: Port device team_slave_1 added [ 239.953221][ T9019] team0: Port device team_slave_0 added [ 239.969773][ T9019] team0: Port device team_slave_1 added [ 239.987121][ T9015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.042248][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.096826][ T9022] device hsr_slave_0 entered promiscuous mode 04:53:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") [ 240.155993][ T9022] device hsr_slave_1 entered promiscuous mode [ 240.215997][ T9019] device hsr_slave_0 entered promiscuous mode [ 240.264105][ T9019] device hsr_slave_1 entered promiscuous mode [ 240.315582][ T9015] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.332098][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.341863][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.368921][ T9012] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.390210][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.398371][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.407150][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.416028][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.424561][ T2817] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.431638][ T2817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.472811][ T9010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.487540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.504339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.513120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.537971][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.545149][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.563270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.572250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.580908][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.588060][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.597114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.641395][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.651484][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.670425][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.684349][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.692862][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.700030][ T9024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.708588][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.753419][ T9015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.765046][ T9015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.784979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.795896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.807518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.818465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.827582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.837546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.847418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:53:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") [ 240.856545][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.866189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.875662][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.884578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.893219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.903007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.001054][ T9012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.025388][ T9012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.043817][ T9060] QAT: Invalid ioctl 04:53:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = msgget$private(0x0, 0x86) msgsnd(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000000000083d07c8489c85339a63edaee1c64d2e3e3c3f594effaf47927988dd44c9fe53b8d925fdad64ceb3854764df5a4852c430ea5a85223af6b69da5d55825a6a7d326db36ffe5f7b3395bdd243242673bd94e13725f3f7bb79de5a0c4a44246fc76c0fa775eed6b261dc05a45177b85ffb38272948071ac1803a59727639fdae9a80b2b0c60189f1f87d1518b770aa50b40f91019ba850356d3b5ea7"], 0xa7, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x800, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000400)=0x8, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f0000000440)={0x7f, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000240)={0x6, &(0x7f0000000100)=[{0x0}, {}, {}, {}, {}, {}]}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000280)={r4, 0x20}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000106000000000000000000003da9", @ANYRES32=0x0, @ANYBLOB="000000000000007550b8001c00"/28], 0x3c}}, 0x0) connect$vsock_dgram(r5, &(0x7f0000000580)={0x28, 0x0, 0x0, @hyper}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='bond\x00', &(0x7f0000000180)="d148d9f46ee9f7aed6ef5659714d62b068895c123f0609fc0bd8e0e50da554a2471ff15580cbeace96772d51712dd8ac79b565c5146022604204688d078c389a9ca180eaa67dca0b8840400dc4ed5c2dafa2d92ae92a48bcc9b6bc4c158a33022df562d321a7d10cacf565cea8fe2b358818df95e8757e79685fff403fb61e66e6fc13c6f8d4761e482a75620e9860714f0d78", 0x93) [ 241.049922][ T9060] QAT: Invalid ioctl [ 241.058413][ T9060] QAT: Invalid ioctl [ 241.061219][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.088991][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.120865][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.140613][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.160044][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.170368][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.179609][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.190536][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.210176][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.250245][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.273233][ T9015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.285115][ T9067] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.316353][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.340418][ T9019] 8021q: adding VLAN 0 to HW filter on device team0 04:53:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)={0x0, @aes256}) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x64, &(0x7f00000001c0)=r1, 0xfedc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40140, 0x0) close(r0) [ 241.382442][ T9022] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.406808][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 04:53:33 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) fsync(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) [ 241.441814][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.470424][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.489049][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.512086][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.536621][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.552482][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.562792][ T2817] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.569932][ T2817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.580408][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.589704][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 04:53:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) ioctl(0xffffffffffffffff, 0x890c, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x4000, 0x0) write$capi20(r1, &(0x7f0000000240)={0x10, 0x5, 0xc7, 0x0, 0x8, 0x2}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x1e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3f, 0x7fff, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x3, 0x1, 0x0, 0x0, 0x4, 0xc5, 0x0, 0x0, 0x0, 0x3, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71ea, 0x1, @perf_bp={0x0, 0x1}, 0x2000, 0x7, 0x5, 0x1, 0x7fff, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) tee(r2, r0, 0x4, 0x7) keyctl$update(0x2, r4, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82afa4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d", 0x8a) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000000048083, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r5}}, 0x18) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x9, 0x800000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40002, 0x1d, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 241.624396][ T2817] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.631547][ T2817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.654377][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.663161][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.692666][ T2817] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.699852][ T2817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.715458][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.746500][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.764283][ T2817] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.771373][ T2817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.784567][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.835510][ C1] hrtimer: interrupt took 40480 ns [ 241.855047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.863152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.890426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.933445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.943033][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.965932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.984315][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.993092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.018568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.030729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.040661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.067764][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.100347][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.110495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.137073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.191823][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.224212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.232255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.266920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.277717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.300106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.309482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.321356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.329995][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.341689][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:53:34 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20000002812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='g'], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0xa07000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 04:53:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x81785501, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x800) [ 242.418545][ T9019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.449733][ T9022] 8021q: adding VLAN 0 to HW filter on device batadv0 04:53:34 executing program 4: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f00000001c0)="24ac068c1e6251fdb7ddcde0d6421454a8bc61d0f8a2f1ee3ff7ccb6611a475f1049dfd714794cc6b5fc2f57a902f786e77b", 0x32) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="28b8dee7892d2612c52401cbfb587c61d0d6d93f9280fa47bca6e5b5dfcf928f440f0d38bb658fc5fb3eaa700b8f03c37f130f92d25c26e30501000000000000009cacfa2c76a8eeb33556b4ccc000c9493e52dae1e6"], 0x56) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x82000000004, 0x1d, r0, 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000080)) 04:53:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10800, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0xfff) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={0x0, 0x200000000000000, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000d88000000000000000000000000000000e0000002000000000000000010000000000000000000000002001b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000004b921ba44e8200"/118], 0xb8}}, 0x0) 04:53:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120008000e001000"/46, 0x2e}], 0x1}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x601, 0x100) 04:53:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x51a, 0x20240) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) [ 242.865086][ T9140] IPv6: NLM_F_CREATE should be specified when creating new route 04:53:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000008c0), &(0x7f0000000900)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x1e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x258) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000004c0)={"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"}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r3) 04:53:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x338f, 0x2, 0x0, 0x1}, 0x3c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r0, 0x4) bpf$MAP_DELETE_ELEM(0x16, &(0x7f0000000040)={r0, 0x0}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4080, 0x0) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x0, 0x1, 0x6}, 0xa8d2}}, 0x18) 04:53:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 04:53:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @mss, @window, @sack_perm], 0x20000000000001f4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)='\x00', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x7ffffffc}, 0x14) shutdown(r1, 0x1) [ 243.072613][ T9153] input: syz1 as /devices/virtual/input/input5 04:53:35 executing program 2: r0 = socket(0x2000010000000015, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x10000, 0x1f, 0x2, 0x0, 0x3ff, 0xe0000000000, 0x9, 0x3462, 0x10001, 0xffffffffffff0000, 0x101, 0xabb, 0x1f}, {0x9, 0x4, 0x80, 0xffffffffffffffc1, 0x2, 0x0, 0x0, 0x3, 0xff, 0x85, 0xfff, 0x2185}, {0xfffffffffffff06c, 0x8052, 0x1, 0x6, 0xffffffff, 0x7fff, 0x0, 0x3a, 0x24, 0x7c4, 0x10000, 0x8, 0x9}], 0x1}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:public_content_t:s0\x00', 0x26) getsockopt(r0, 0x114, 0x400002715, 0x0, &(0x7f0000000040)) 04:53:35 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @remote, @rose, @rose]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '#GPLvboxnet1#,bdevselfmd5sume'}]}, 0x29) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '#GPLvboxnet1#,bdevselfmd5sume'}]}, 0x29) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) [ 243.286766][ T9161] input: syz1 as /devices/virtual/input/input6 04:53:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000004380)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000043c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004400)={0x0}, &(0x7f0000004440)=0xc) r3 = getpgrp(r2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001600)=0x0) sendmsg$netlink(r1, &(0x7f0000004300)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20080000}, 0xc, &(0x7f0000004240)=[{&(0x7f0000000300)={0xd0, 0x10, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@nested={0xb0, 0x4b, [@typed={0x4, 0x95}, @generic="b69ac453990b008c8f5cbeab17987eac47d89324d83c1b129c23090c33c1456055139c617b4c175216c5cae4164a46a63e33a9c5448b49e4b18a65644877f0d0cd869a85b569ca056315c6dabe2327bafb707d1e8ddf216768c795a22791b7428a0b279ac8c3bd8b61a68bc64e1cba0fc9d5b33efc537ac86597ad879c4eceb46c2122c9157900a503f6fde2db55287f9ea6218deae49f090389716ab52b68", @typed={0x8, 0x3, @u32=0x1}]}, @typed={0x10, 0x6, @str='/dev/vcsa#\x00'}]}, 0xd0}, {&(0x7f0000000400)={0x11e4, 0x1a, 0x200, 0x70bd27, 0x25dfdbfb, "", [@typed={0xc, 0x2, @str='eth1\x00'}, @typed={0x8, 0x21, @pid=r3}, @generic="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", @typed={0x4, 0x61}, @typed={0x8, 0x7a, @ipv4=@multicast2}, @generic="586b1abb65d136caeffe752e2577834bccc89a5d3bf438e00f4dbb05695b481baf8b59be5fc9d9dbd4bad80642bc365ca0dc8282c8ae36df91a3f64ac39e2529f03eebe881bb526ad600fea0c6d9ea63c8150ed3ac92d8c47eb5468f210c6aa073422742ebbeba6c66c0720fe8236451010fe40d1a336b6e2f5dcdfe2bc808236abc4ddef3d3d106f218739f96a865c4811680b0e7f8c75f80e33decb881c43a20ea939123d1d2de396804d48af2489a35593748dbcf7a13a7fdf12d4938d19ed8d1fe6a06777b72337cc6a13543", @generic="8cd799a605f21f7b743430bb9cbb4e14c4d608415eeca7cf7a5567c6c6a8283fa657309f8b29028cded558206d8492b5d398b4f6ad7ff3dce2cd9041e6ff39e1374e674bb0b63647abfb402b1ab6c511e57657c372409d3c5ebb26beb903869dc9a5c532ba345acf44316629f4a8921534e1bbf163f24d70e30b7c9e98f90ffb00178297af7065edfd4f5b4997a69c4fa5257c6a0f34e1f2c339ad07b0d617c198b1c8", @nested={0x40, 0x34, [@generic="77d01b0f9e17c9016bed439f75b02535273733a7d26f6cd4d8c2f2fb1c9749ed889e0e43e8973b652c9e1adbda6194d729781880faa5e9dccb"]}]}, 0x11e4}, {&(0x7f0000001640)={0x2dc, 0x13, 0x2, 0x70bd29, 0x25dfdbfc, "", [@generic="df3d9e18257cdb0afbba0ae68f7d16a0b70a48f0055486b2f87a1a8b8db5e20cab6cc719970e87b7095375a8c925cdc881e699960c0f6289e61833d6fc843de0f8d34c0e41632232378b3d6412769acc366d735917b14f80e0ebda5642d6b37c6ed79ba9f8eef9f66b85860e5d8d55aa64ea6d0a2251ce3944ff3e6e09969df667517b15bb7c53cd796064622b75d3cde27265ea036170a2ef432faec8a3084fcb86a31b57119198355e81088c717a02f4b8e96cbb407e52ee30bbc04c2e8b68c966ef101ea8f38612a9706b759e9bdd5ee5ac57c03531e707674d82f54daa847c4ea4bc1a1536d2ed60655cecb334178cb35fa8844885866c26ec", @typed={0x8, 0x31, @fd=r0}, @nested={0x180, 0x4b, [@generic="c90c75a2697b9e47d348fedbdbd8f4db822925589032e21f5f18a82ba6e1", @typed={0x8, 0x3d, @pid=r4}, @generic="ddfb1995f97831c7bcb89c5f23a7e8681551b3007294ce12561a4a32496258103b28af6630be099d5ca5ad7ef3d9987922f9f7645b667dfad93c19bd06bf19fe4e2c20e10bfe4a7d9d2f4888ca7d072c0a03c00c5fa3568f8a92f458dc42c6d3b03f2ca1ebd5875d0bd6694f49e189cbc5f304a2b36fb566229409edcb28ada3719f5f14c73c", @typed={0x8, 0x3a, @fd=r0}, @generic, @generic="bf36427aae8bd2d32a4465c8fa2a872ffdfd819c3de65584d86fc09a1de6941ab84b4d2476edd678a057239d3527583f3d1376b4cbc003dba287567040111ed7999c0cd7094ddbbdd74f5d3aa5e1cae6ee23d83c70b01e539aaa20fd7a0fad3013525a7a6a58f3507c70d49250ae999fd1947ebebceba44931dfd10a9c209f3f532da6f956b4859f82f263d05b9a8ff0ab6eca60633b389ee80a09b6423af4e5a11548c86cc71501614f82766ea02d8134467cc0d6b0ca1521a2e46660f7de903c2b75707c56ca"]}, @generic="649541251ed63e22c5f8064e6f8e9247b39c1a83e4c18904cbe371124837da80374b7913ff40c460ca0d02140f1cf7e6e870decd1d5ddae12d", @typed={0xc, 0x84, @u64=0x2}, @nested={0x4, 0x6b}]}, 0x2dc}, {&(0x7f0000001940)={0x2808, 0x42, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@generic="465458f67486cba6dddca3dcdeacce289a00e1ac87bd7276fbf184610d10efbe57c48727d6179172a027e02cca338a6d978163d6fb60652ade0ed912dd3cd502dcfa7fa3a80da0d43a089a5f5a85cd32b30f51b1c7402f94ed074d757d9214245bdf6ea36dd7ee864aa3553ebe61c4419b3c98629a0c8dccbb2a8e6a2988df631b34c7d57640e0d3acd7786fb1dc9cfe9dfefb59701058f8e311d09ffeb295b48b1895b4baece9943d0f2b4fb0c79fcd6f63024a41ed5ee6a9796164ece0b0fd792fafd5797d3b9e9de4cb09d3291b45130852eacc68da7711765ebd5729aff18691d0b00629c4251e0d0cbbdb5407f40c5f", @generic="7a8843233257893ac733db64a8c1ce95286bb74f49f3d90b55ba6892a5691f325f4d501fa142a96f930432149aa7a17346f4b4f0a97d57353755548752ee0e57d315120fde0d36b1a3a24b07b568f8f1b3abb24e55fbb08b7d94f99f1221d7e3e621178805c89d3bfd0d24a3f321708860dc3b6bf754293255e2725f01c0398a5bfbc7c3ba537392590be53f154b4692ad5ee847268381bba5f8b3f56ce2617447d55e9268c21db9e2bb6e093a1e9b99c43dfff23ac6553f80a5f984e7b325a4655bb3f5a04b63ed99d2a883b29ef630e202a7af164177654d303374e7cfdd57adc3b85e7494951ff5cbffac7400307b089350e78ecd28ebf7631487c7b7ef86444c891d245c7c4a6d9cbb9027e22ea5087f532794449fc014476a27ddbbc10f5a8836c5515d03f6023ca2d87073867d0d417b26137b652c5615d5f764fc79d60ed20d69cf430b8b790488fd7ffbe2398f21de1a50374b9dc714476a22dbdafe856debb85c38a4c78270da4ef808965eaf8dfef42be1a6490a26a72584a0a82efbd6d82cf058623921133a36e62896511bce9ceea3e71da71cc6a367a2ec46a7f7d83df7213960bd90a8d5ad740f8b6e151b0f672cc81da286146f7d5aece5dbc8582b073faf43e854a500d8f38a21fd93eca6574adf09c5b2da6de41c143802beaebed13d816a0045b14b683bbc461e3881708fd6e34571bbf469fda8cd7040d3017762b72ecbdb80acee2d1c7b71dc6fd9899948740c44e93b0b1e9371241b03ee29cd89f931807112c099d6b3353e4bf8251a905a312c114750ab2b5a3fef588453f284d0d38edc489c67c81503a29a33f11a768b1f60936d11e848637a5cc1d3441072d97112d0a378f02bf171036a3dbd34ac3643fa82ea027fb7183bf6acffac9f37d550394e3c3a41cc2613ee22b0c781a9478d9a8e769b8c25f57f6a662ede7afcda98c04a67ce58cf9addfa53aa2793f3d1c4de518a48e7cf4cf272902da4152fca031aafabb7629ecb7546b803c3225c68e299cac60401992d157df95baf61aabe7163d19719832f62a7e661a6f6e454be3c10f8f8a7b84a9d318df49613d852f39c272d29fda31c4366347ed3f3b1280d6d4c807a31d5e04220d63823ce2ae4ac62a61691bfbdbd8aa1061eab9d3f0e005f7eb0a586a868b40be30203569aaf267927f811f4c4ab5bd64883a96ce1c0adbccaf1f1cf631eb79b47ee24501677f3d58cfc4ffe38cb770882dc15fad954119a855a3bca56aced01cb8ca0020e92b02c463625c373f33e9548372726bf1b9c01a74f23349f3e46fc22c12f1a97c4b5d2069f17741b87072e0e8b45482eb1487760d491d2f133aa9963683e6384cb9799474e2bd840ef65aaa2ff8e21cff6d6140d4157d13c0347f9701c9030b37bbea203ad05fdeb2a2f7e304c954a5248c8658e2974febc6f76099ebe9f9e171eb57cccb8cea51bc7d60c47a903fd3fa16f95233c9ca75890021f2f8ca9da32616cf6c2f2815324600240b3c3de7a180aee7114808476dcd2f58d5fb5dc7ddbc17901a430fc0dc264aed2436472932d7df498351b610f9c921c9ca949fa0b240f8b883d76df1eecdf8f940b2078bd998a8337bec8086e92aaef930c7106e284d285920c971bd4a10ae12c4cc4b2bb9369c3dd3e8e87d0eecd332deecd8b1aab90ee2addf0ec8afcb441e99755b34a9022e3156674b100bd7e0264f0e2d055bb08225a48034d81fee2a5ad03a025720fba0f911b3250ab8f592b5b56a1ac2e59a44710624a7b999d6216361b21e312dafb0959317a489123e0aa9ae55e2a10462ce189b0f6f8ccce574c715c49e63291e8e293cd5600b57467ba489c754d192d0aa48a45cff3ff46230548d83350cc369b4305c189f783ec52757f390f723f25d67b5143ab9a07a63e79dcee06abc1d299fd89f99dd7b5585f963cc6da774be5201a1cc65f18052bdff8501b7d3dac34317dd808b7a7b5ff2f0066cc2fefa3a145ec2a4e5088c62b1c4cf6b1b80f46f185320443b11ec33c5515c52e501a4c6abae3ebd54f824b7c4aa47bb097396dda584cb81ccfc04fa8b45089d8bba6c9c184f87012b573eacc3487854105dca9aacca2a8b583cda32debe4703aa3a33405c0e755c840f5c39ecdef73937ec86b4af5a6ef60857e1bd8e45f39f84a3b7bd78fcd10f848ef63192b0fb9262aa759c18ea4415e42c8e90078f0afd99bac6afd28822ae1f92f41a5da125c482b971d10031eb2cb9da030028d1d756569630448f53d46b2c687e2ad1cd1a5cbcf59c588ee3c0a7bb8aa56771c48189b8ea4c2df8715ca42c842f37c2e6bdee6cad8b7ec55b63e58620671952dfe28ddc5576f0da0283fcb8a0acc15016fb429aaaa07ad90b700aad2c7649821a9abac8d35ea076a86d73540bee027eb285929a1e447c95f521806375e1edd99e74dc5aba25d7d66e1892ffcedad2f38485caa5079405445bbb7391b230594bbc794f647e8617c2f5fae40d0586fad0f173034ec5f379dc99d25e34f11e491d2fadd411f9873fc382084df4c107bd019cdf68eab94cc9dbba53485aa49ace21b90ff9bf6806261e4e9ed45abc4c6cca526f350ff0ebc240cba9e5c32a5be9ad03668fef45af0c2571481fd47363d9219c43897497b3eff514e6ec1fb57aac357b6b604f6dfa0f16978ec00738478adc38ea56181c035abc21be321437db75b3776085334e405c190dffc0d4c624d949b75d75b2e918e0a50a6e9c9c20df61e8a81a9c39ce9cfde29e2fbac45da6da312fd98b2584f078404f380740cf5173fbe28ef33a1ecca68e47c18781f3c89fed6ea02cb0257d68ffa3eea41d6b1eddc2f9f148b99f41b85416f0907c2e14e22e0b2784c068dd9e6ae34a2605e9395c5c3d446814f38c9f180b47374669a8e2e354dab747a8c72cc49f13c53a09cb92f21a3a5b235745650962cb8e9f89415e06aa0d10478a02a2f048d9f71124ff1b1b0166097f333137d0b6282df51f6448b8944c9e6c660a4e6684774077b630e22f252bc83d2c453cecd6147b7b05f70d6d210dde1ab4fa12f96abd72ec85d85f19e7367400eebbe5e2eecfcdd508423926d94bf33ea51f409e043aa99ad7d65dbb211da40bf33d983489759af50a5ba13ef304d781d6171be1a335db3569b518aec2a9826571b2f8e99ce3648b7007245ab9c0fba0b58d81f1f22d57b7f90d2b7fcfec7c722726577b73a0a744ca2c7ef4ce4c9be35a1a2ab3d4119dccf267a6fcc8c5e0681f094436c8669e21f3fbb80ed1cfee7659702294499baaad38478271583125617d809d8add32038404dcbf2777d4ef62b75c99b0b4d66d30cfe28d1a8fe9719ecd91c598eb2ce6fc982fd01c8e14a4cf62bd1dc1a3146d2f1368816866785e87f3a5ddd06ec27c017f63428efe8e167189f610e7402e7f1005d418c66d2acd4610eb1861984f082f28e292a1791c3674ecb0fcb19cc492f820e1ff3c8d693b38dda144c1d6240f2cfeb0f7f9feaa823bbfd332bd1b6595406fa6912caa6344357bd53db370733d138cf491518918c19e78dc6f1a97def79c56f5baabcb3ef439e111a69ff1b2f21decc256d2dd35af659b07db61ea003cd8143c15270f5a765a8057fcb8e38ee5fb73cca8c6d643eb65689759937ecfa76d8367e79a9dd4fa0d32fffe6a55d11d9e75d824e11174e15aeee6803179814f7ea2e2afb918b08e7eb46fb0a0a155528b55b200983214b9ea7c6bfcb8e31132d025e47c0d60f629a85c01c52908da6ac6d7f64be6431dc0075f106a6cf433fc75cd12655cc959b17dc6eeff83b2cebdf85153dac2d38d624748b3db514b8f603d2e43fda407828b79b61481b2d9cab9b26c79aa93792bd5a1432c07c939169bc55dd0d01d25b6e7be80fcb018d186d0ab377d13c23a787e093f8ece9860e36fc2fbdc0e88880d29a04a5ebf5dea65a40fde801c93e7be7da95931bfbacaab4dd9e43a7d77f081419293334c54d775053733c56b082bd6dc4c61ac49affebec45fa08c6b6b7058b96d185180f686d34b1764a7b2a15b9985bf8ac4f1f087bd99069b9147f4dd9df71871366203e210c6099b11d76e05a4a3e898df2394c24f2244e30cbec95e227cd8f3c092c51f814326cbddf35dcd5f6c83187e961eb4a377931e5a779417788f4d87ecab479f07b801528c39dd31a8bc68da509fb46a100f8deaee6e6aac452c3fd90e5cc68e227bf85cfe608bb8bc51ee26c3e624c746e9cd1aedd2010bd7b3c94710fc769ba5281b38906fdeab4c2871a491e3f03740a6d67f504370ecf7be9ee447e056e7791298a58e7d8794ce72165147105c127d6dd4e1ddccaa0d22e75b4a9df395ded9c84c8aec346c2272bcf165c5e057ba7cc574edc4e2056b701c48219f5fba133bd2414441edf48431f72239877c18c58e6fa21d2f437dd05fc376d13154e3a389cb75d8f274153a8cf382204c984c141ef8ea35b038d6b87c0f243095980723a83a96119bc3851d4997e5604d540184b6eec69eb3789122c75caf7316d8fbefd241ed6b434b891908c36e34182e14c8de766ae3f245429dc02770d88af14119bc9b653ffb86a07f662f98abc5c74fe7b0f2a1ecc8fbd171e254adeffbecef0f320dc1c356c4252edbdf02e9b17de0aa882af52d9dfd29285cb9ef50a42596cee549083a5a13170e5f3ef752cf993be647a630eca332850a2038283ae309fa16dc2fca4e8c6145d5d2c42a7752672cbc6a9f161d6b095a130a213dee15deb1ee8b180cf1f1971c8de9794bd6f037c09d82fece1d42ca75f1bde23180f8d5568e798e4e3229c33b3c5df92ca880ec2f8ee153bfb0466a64967c1f96c56c917fc119562caf90b864bd94c860d07a3586c5e807eb227cf733edc6a6a036e133dae4dfde537e4154d42ab886e764751760a978e8ed8eb3482927102144a4961c00359ee8117cbb504af731a8b04ffc2fc3803c018e61feb4d4c2fc3f13593e8ad6c12ae7ce8fe026c920ee657d1c861aa19286c52c1c3afaeb9dbe1966ff84f90ce862997d71576b2ec1e4c5844ff0588fa6ce6323e6a8b4cf5c2a9f0805af96275e524ff33f4d3eeb316c1e6efc1107d13100a93ab8209d7d1d89ac1b4b73d8f2d1d475d7b68d39b4964b7bd5dfc21606029561876d357274144c786d93c7571f39a01ba45c9ada6f3473c443889144f7d3fc4e601bfed3c06e13a943ca9c26baf9572deeabe4b29ce7537d856ca5c45bec968e33f191a613d4c9ecfa00202458c298394c3d00618b65d4f8d037a309f9594471eb82b1cf2523fe2f6818c958baea74fec1d002d872a62a9251914ce2202f2e891dc1b59218c70665e945d7f3437bcac2131a3573d22e5ad19f50bd401f9dbff17671f88159907d8de893f581fa83d464306f67c413f4512c4d7f1da9c1eb6ecd8d6fc6a9f8eee955ae1f4131624c4233a31f6d4924258bc33addccff7dd850f43ccc3b2ea0dd9609fe6ae8f017033ec26c917c45cc58fc9c85ccb964738afcc9a365a3a66211403adc7a0568d4fb4b9d9be1704c70d34343cb3d3cf33d66dfd0f8479f1fd48f7cabff26828b6bd403c69cfc8d34a9a3224e20a621b8d315986d4b49a53ed5a718916bab4b67b2d70493702588be240d5e15b3ea47f0b1dbc166469ef7766339480679c91d098872e792b41545fcfb832d1ac7f8f4e8e7ac3e24bf184a777efec5c167ce22ccb339755b28be7a1a4fad9f7736638b6ec93b73a5f49011695198d50b0870949824ef7c036fc7c6ccbc021754e25dab562b737cb1f2e3a780eb2425a5c", @typed={0x4, 0x44}, @nested={0xf0, 0x11, [@generic="dd095a1d4421c1054af1c7968a3b0a8c01f741ce2f44f9f33132684759a829dc85aeea79c67d37a62638c1ab5c64ce6146a4b0ad0c27846d6d47adcd2851fa36e6f8444a64fa8ab625b497ac354519fa6d30045768a41409deb98103e53bc6c7d4e7ebd99fa52235f3d89a47f149aa79b7023d88369c51112ee713db1416a48489bf0a597fcc26075cba98b41573a61f765c2d16966bad6fd8b8f1b1e14dd84b147bea2e9165b1f3c60e5541fafe23eda1cd093cad75ed27c4b2e0d928eb949c7a94cba649dff199a99776687d4316164cfd305019cdf3681a542bb7a8df179616786218", @typed={0x8, 0x72, @u32=0x4c}]}, @generic="a3715c677371dd5ab4d1de9f1320fdae8e8a79070ff7d9d82809c7050eacb15a67066f1e40fd9b98831609a36917cae3c94cd1d2ba72c06702e6701f8ca466ba05c3496bfd299c487b1aba3a1da01b4d9b161ac74f3cc1e34c151d7018ee18dda65246e9d39166a412ca283d3af4b642757e75a9c4681004556fb3ed9dffb0366435ecfe50a4308f2af87713ee5c77ee57b155bff587696864cb5d5e47d70f218c015a440f8d68e7ebe0a32efbd51f14de62772fcb2019679e8e14b5e443be792c98", @generic="7071ce2c58aac156675d2a07e7763d7e669754565bded37dec568989b5d3f5e73bf5749bff2d7bb5eda7b64c6273d0b7e5fb50300d91c157cdc1e827f1dc4e97862949e027ec52146cc7d3b18fcd72e4569da88e4b26902afbc1a2a96881ed6d47aec56cdf43264f10c34774f4571fa649461ee77ad7409fe58495a3ebc220f79527231f39b1904ec61d756d481ea67a36db7a3e8852bfdeaaa235614490b421f32c0dfe31f227ca35333a9fac9d38b06a1ba1ae9ecc207f0923fb3b69afa7120cc1b92d31f561d817c52e6d0b5b24c0", @nested={0x138c, 0x81, [@generic="6cc3b0bb629ab255a2923b09ac43260fdbbcc2ad00e64ed433533ec428e84031b0ce06552d6562fba0bee3649b618bae6f1862ba78a60facfede9dfa7c19155e515a7baef9dae49eded76c23af91118d8d9c51681aba7689a9cc831364bc3b2cc168c649287b220cac865f26991ab8eaa4d881286dcdc9b95b511a3dc0d9547f53bd7e893c2ac5ba5cd145a19442111963d6c4f1dc822b41569f2990", @generic="ab4b5df226367d9050a2b85543a0", @generic="fbb3fb8b2d265d9ab0a988c1e7c9af911857918f4c1c2766dfdb5830c0da4c9facfbcc5416c53601d37c909a410ecadd364c029eb8b842363849eded470d3b6a19d273c39f9e5181063ed1cbf2b777594e5c447cb018c55cbcdfe905b58e8c6ed82da6fcd0800aca44bb6fe25cf22dfaa04160d578292389c8e996b3429d92059ac1d25bc5e05300fb51f448998860dc53a0a78cb3efbafd0976cdf4abd1d90be6bbc2df7956392c75eef8f9240ad5211bf6833d49bee8725f", @generic="76dceb064ddbd065d73c30074f6aff8bbe70f0895b16a6ad80178f1f21b97b21243617d2e6ea12d4e41afe42a7b35ace566737f955594b5ff109fde12ffe5676f3aeadc69146ae2233c73fe81d63a07c357c959a4024fddcb319787106777d3a51b4", @generic="b5ff20da72ac5261a17e019842c7bae75ac138345aec861197c4048e982d71277d6be9198ff8e21bbcde90d8092d32ff41f592fd512e9f4823b43e13105df18f2ad7820402d7a4065e144a4a4642ae62053ba52dc3a7d5ff78f50e8ef92bde64bce30f74454aa292ece4d21cf145a4115b7b008cbb422b17c07f6254f5ac20d754350418f20b7e99731540b9ca6d45ce967625792bacdbbeb0f7a53c4b1ab0dddea3842398931bc59d8c094ab60d9cd55331feca3938d1c532cf9bed4a1f60a1bdd11f5390c48efebfb3f73b3a95682d61990bafc9b9dd1913d60a5f67f4c595a7c2661a6792a7", @generic, @generic="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", @generic="ff8106d3e3161da5ed07961cf72151f07272b8a08045964fcadf360fb9b220f7c7bcbf26207dab50de84fe23ef52e88fc849e9e86f9937cd8cd58bac838466cb6c83de53edfeacfc7c058c0085954a966976f8cf5f61c9e78bfc81614873fb17c5783b8b9f30975e8dd86c59cb2ce57bea6176fabd666e187302cb3dc336c9928172e8a7742d5a25689750989eb6243a4ab8e23bcefe44cf6006ab060d183715f362df61f807bd8f393616926f878cfd4d431133e1f5ff78b6d03f5fd0ca1cc51d3304fdcf485e000f78fd508c88cd8d6b79f70faa5f4d49628f"]}, @generic="79b0f53954755efa3d2b7a90d0803ff856818144c9ba4b4861c82e976cd206b1d8e7e9f5dc6b122bcf8f841de6932cbdc9cc892226a5430e4d627dfcaea5a337b9ffffd37544dee7bde8a0e0591f3a3a5ecd329867184e7ec427d18ebc29e14c229f49854057f3bc39c1cb373b8b2978dc5d0a5fa80f5dd359272d257446cd14fc20bab48876577b77b854536293e3e2379f26875fff1d3d049bcbcdcab6b54e37307b8db500d514323c67d6b3dc58177385343acaf45a74a1441c1504f93b14c7a9bb5cd7c45f3692b2d5787a17d09f6080bf3cfae77fc5c18436dee2328c01f2b76feca81f3fb97b58a0c8fc3c8a4651"]}, 0x2808}, {&(0x7f0000004180)={0x10, 0x23, 0x730, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f00000041c0)={0x24, 0x34, 0x220, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x16, @ipv6=@rand_addr="7f37da27be593018803db4f580c646b2"}]}, 0x24}, {&(0x7f0000004200)={0x10, 0x2d, 0x300, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x7, &(0x7f00000042c0)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x40, 0x1}, 0x4040045) r5 = socket$inet_udplite(0x2, 0x2, 0x88) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x2, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x8000) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa000001001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r7 = syz_open_procfs(r4, &(0x7f0000000100)='cpuset\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000004340)=0x4) dup3(r0, r5, 0x80000) 04:53:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x580, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) ioctl(r0, 0x8001000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070") r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x0) close(r2) 04:53:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") prctl$PR_SET_SECUREBITS(0x1c, 0xf) setresuid(0x0, 0xee01, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x24600, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x0, 0x1}, 0x14) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) rt_sigtimedwait(&(0x7f0000061000), 0x0, 0x0, 0x8) fcntl$setlease(r2, 0x400, 0x0) 04:53:36 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) 04:53:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x204000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) ioctl(r0, 0x1000008912, &(0x7f00000004c0)="c0dca5055e0bcfec7be070") capget(&(0x7f0000000000)={0x19980330}, 0x0) 04:53:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070") socket$kcm(0x29, 0x2, 0x0) clock_gettime(0x1000000000000009, &(0x7f0000000000)) 04:53:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0xd) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x200000d5}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x16) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x7f, @local, 0x4e20, 0x3, 'rr\x00', 0x10, 0x2, 0x28}, 0x2c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 244.478629][ T9204] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 04:53:36 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x20000) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0xa80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1) 04:53:36 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) fallocate(r0, 0xb, 0x0, 0x5) r1 = socket$netlink(0x10, 0x3, 0x1f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2, &(0x7f0000000040)="24dca5055e0bcfec7be070") ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000140)) finit_module(r1, &(0x7f00000001c0)='ppp0ppp1\x00', 0x3) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000029004700000000678600000003000000e585c58b684d49d7898d644a7621c6fa0369e6c8cee1b0d1638ef286215a6a3893e4417e66048a6c5e50642c0fdbe6e57b87fff28100cea097c469fa85eb609d41e2d836edaf265bcb25897690343c3a4fe09f064681c687f14b15ccbccfe55c98cb85c5937b42223c1ae2986330854e9f4d8e813654c28c8690bcb44f000049496cf2d3399cf2a9fb409d1cd3d11e05858839c345252fb0e04110"], 0x14}}, 0x0) [ 244.623929][ T9217] IPVS: set_ctl: invalid protocol: 127 172.20.20.170:20000 04:53:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101000) accept4$tipc(r1, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80000) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r2, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000a00), 0x0, 0x1000000000000000) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) fstatfs(r0, &(0x7f0000000140)=""/225) [ 244.730506][ T9217] IPVS: set_ctl: invalid protocol: 127 172.20.20.170:20000 04:53:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/us\x00\x00o\b\x00\x00\x10(|\x958xa\xbc\x1fR\f\xc1k\xcb\xd7\xe8\x1d\xe24\xbb\xbc\xbf\x9d\xf5{\\\xad\xda\xbes\xbf\xdf\xfd\x94*G\x91\xdb\xbeB\xdb\xb1Ko\xde\xe4\x83\x83b!\xc5\x12.\xcf\x98\xcd\xf1P\xbd\x91\xd1\xce,\xc7\x13\x84\xe82\xa8\x12\xb2MD\xf4\xed\n\xccN%\xb1\xda\x8a\"\xd0\xfd\x80\xe7xY\xd8\x89\x18\r5\x17,\x81\xa9\x1bJG\xfd(\xb7\t\xff\xbfB#M\xc8\xc5FJ\xc5\xc8\xcchS\x16\x04G\x8e\xd5\x17\xc2\x8b\xed\x9f\xdbn=i\xbft\x9d\x9f\xb7\x19\x0e+\x16 {\xa9/\xad\xecd\x05\x0e,\x10>S\xd0', 0x4) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) fchmod(r3, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$VT_RELDISP(r2, 0x5605) 04:53:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x84, 0x800000ec2, 0x4000000000002}, 0x2c) r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x29) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000100)={0x3, [0x4, 0x3, 0xffffffff]}) 04:53:36 executing program 4: r0 = creat(&(0x7f0000000480)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x1, 0x1e000}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) fanotify_mark(r1, 0x11, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000280)='./file1\x00', 0x400040, 0x4020000) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) open$dir(&(0x7f0000000000)='./file1\x00', 0x80000, 0x180) sendfile(r2, r2, 0x0, 0x8800032) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140)=0x285) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x0, 0x4b, "d2ee8fb0fa83d87621a999f45a6b6ae57552dbe7baec1ddff79de941f8ec234fc887011e8bf1d7d884d2841aa18908e84f4485b66f752bf7f6d17658ae17926e09b170250cd1ceae62d723"}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x10000, 0x5}) 04:53:36 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000240)="55c3ca52ef9d93cd8c693616599cb7984dc5eb9b65e817b9a2d39ad6b0cdbf134f940e9efaefb33c44cb109aba92cb483a7c5b0c187c797848c016e17af4cc5b4222831bfc350062adde0028fa350835885e3765b8f5be4fc73108ca1ff0303a5b4d31d5582eb0608a44389eb1394d7b29cf42793e275de2ddfaad0ba7aa33a5209028f841acd1d4a87393144b28ee80e1628b9bcdf3a29c691dd5e3606ebd3a9db6dccdd25483ebc73d383091e77d40a58fbcbe915b3e6e3cb17872ff94bc54e9922e72f3fa9af18d885c9c959d8520743c15f980d238411023bc09aee6c4b0a5a6a118726440c1d174789be0df02", &(0x7f0000000340)="a8796cb8457237625dadc52c71faaaeff48b6b8590b538d8a294a6447d00027fcfae78a63abec30bcf3ba1c5fa08fc7ad4c7824b639eb995559ba55164847d4a19f9ff983195157ab8c0c0165df0d1b10c904953cc5a184f0698a801e518700ede520058cdcbe772727c6a1c72231821c168eb07940bde48685d8dac76c0f6277f2c46a2781c535e7dd5915a358e1846a2139843ace61ca040d33b588a75b5acb220979bc68a0dfd4aeb7ed3ada55a", 0x5}, 0x20) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) r3 = accept(r0, &(0x7f0000000140)=@rc, &(0x7f00000000c0)=0x80) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000001c0)=[0x2, 0x3], 0x2) 04:53:37 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) close(r0) 04:53:37 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) 04:53:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f01b7f67f0f20e06635000020000f22e067260f01d10f01d10f20c06635000004000f22c00f20d86635080000000f22d80f3226660f3a40219c0f20d86635200000000f22d8f265f080770663", 0x4d}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0x7}, @cr0], 0x2) bind$llc(r1, &(0x7f0000000040), 0x10) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xd, @capture={0x1000, 0x1, {0x8be, 0x7}, 0x4, 0x7ff}}) 04:53:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="62e524c6", 0x4) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, {0x1000, 0x1, 0x1, 0x401, 0x0, 0x8}}, 0x8) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x108, 0x4) sendto$inet6(r0, &(0x7f0000000180)="ce841000fa13000400910ed4f2344e05575da7000000003fe155208f80000600257faf5ec2cc050d0000002e9b64c47af6363bbd84500000000080000001b300", 0x40, 0x20001, 0x0, 0xfffffffffffffd22) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000001c0)={0x8, 0x0, [{0x8000000b, 0x200, 0x2, 0x80000001, 0xfffffffffffffff9, 0x9, 0x7}, {0x80000001, 0xfff, 0x4, 0x0, 0xfff, 0x7ff, 0x3}, {0x0, 0x8, 0x0, 0x8001, 0x8, 0x5}, {0x8000001d, 0x138, 0x6, 0xfffffffffffffffa, 0x8, 0x5317, 0x6}, {0x80000000, 0x0, 0x2, 0x40, 0x7fff, 0x7f, 0x8}, {0xc0000007, 0x5, 0x1, 0x100, 0x6, 0x2, 0x3169}, {0x8000001f, 0x7, 0x1, 0x40e, 0x7ff, 0x6, 0x4}, {0xc0000005, 0x1, 0x1, 0x5, 0xfff, 0xffff, 0x9}]}) 04:53:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x0, 0x200000000080, 0x5, 'queue0\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00', 0x0, [0x0, 0x0, 0x1f00]}) 04:53:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffe1, 0x200202) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x6, 0x1ca}) 04:53:37 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7ff, 0x4000) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x307}, "1a1f5faf5c261563", "b4bf3929cde9ddff4f88c434d96f46e2fdda10e51f61b734340c85120f862bf1", "d07a7d1f", "435e7c86793c1f72"}, 0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0), 0x4) listen(r2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) [ 245.737410][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 04:53:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x9, 0x100000000000913, 0x6}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8000, 0x8000) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x4, 0x1, 0x1, 0x4}, 0x0, 0x3, 0x0, 0x0, "47db4bf2d530beea"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 04:53:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_SECCOMP(0x15) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0x3ff, 0x1, 0x5, 0xffffffffffffda32, 0x0, 0x0, 0x8, 0x4, 0x40, 0x2, 0x5, 0x100000000, 0x2, 0x0, 0xffffffffffffff90, 0x7, 0x8001, 0x3, 0x0, 0x8, 0x7, 0x8001, 0xdc, 0xffffffff00000000, 0x1, 0x4, 0x400, 0xa0, 0xd4d, 0x10000, 0xfff, 0xf70, 0x6, 0x7b9, 0x6, 0x3, 0x0, 0x7fff, 0x5, @perf_bp={&(0x7f0000000040), 0x4}, 0x1000, 0x2, 0x9ee, 0x3, 0x7ff, 0x5, 0xf863}) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000002c0)="2e1ac8695b88264c00f680bc802ea90b0e3bcfa26ef838b7b322c13e5b44d664faae66f4baaae9da") connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 04:53:37 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x1, 0x46e, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x7, 0x1, 0x0, 0x6, 0x11}, &(0x7f0000000180)=0x98) 04:53:37 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0xc00, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'erspan0\x00', 0x600}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) ioctl(r1, 0x7f, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x9) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x2000) fallocate(r2, 0x11, 0x0, 0x10000) 04:53:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x9, 0x100000000000913, 0x6}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8000, 0x8000) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x4, 0x1, 0x1, 0x4}, 0x0, 0x3, 0x0, 0x0, "47db4bf2d530beea"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 04:53:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x9, 0x100000000000913, 0x6}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8000, 0x8000) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x4, 0x1, 0x1, 0x4}, 0x0, 0x3, 0x0, 0x0, "47db4bf2d530beea"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) [ 246.129217][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 246.129231][ T26] audit: type=1800 audit(1560833617.936:31): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16558 res=0 04:53:38 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) 04:53:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x9, 0x100000000000913, 0x6}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8000, 0x8000) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x4, 0x1, 0x1, 0x4}, 0x0, 0x3, 0x0, 0x0, "47db4bf2d530beea"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 04:53:38 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0x81}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) 04:53:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x9, 0x100000000000913, 0x6}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8000, 0x8000) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x4, 0x1, 0x1, 0x4}, 0x0, 0x3, 0x0, 0x0, "47db4bf2d530beea"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 04:53:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f01b7f67f0f20e06635000020000f22e067260f01d10f01d10f20c06635000004000f22c00f20d86635080000000f22d80f3226660f3a40219c0f20d86635200000000f22d8f265f080770663", 0x4d}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0x7}, @cr0], 0x2) bind$llc(r1, &(0x7f0000000040), 0x10) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xd, @capture={0x1000, 0x1, {0x8be, 0x7}, 0x4, 0x7ff}}) 04:53:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="28001b002300010000000000000000000000ffff0000000000000000000000000000000000000000db768bc9062463e5e6db8a906193aa2157c5fa55b2944a7add18efee709d31885f01db69038d4db9625e3b1940bbcc6540f1ad63c1eb37332c549fa6ae90cf7031c63f4a9233950a73a75d916e5e5810c0c4dcfd179c310b1f23c358ed5777cbf946ee3f3d7f8be92aefa49438c140f672554ceee67c9df807eb16daed3fb4e73f28fb3b5b0b8b840308c7a74497858e3a59fafcbefbef9d56b25902851181016f095cff426a5c2dece5"], 0x1}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x1fd, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 04:53:38 executing program 2: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/80, 0x50) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x3ffffffffffffff) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x6}, 0x7}, 0x20, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x9, 0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x7, @win={{}, 0x2, 0x0, 0x0, 0x0, 0x0}}) 04:53:38 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getuid() lstat(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./bus\x00', 0x1, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="4451216d4596a715df0e160362fc91aee8fa5f3c457b5d2c7e98036fa7a2b21654922514ec4b5974cb2af3fd301a3a3063868d267bf763e24a351d5b96a276e32bd6d992ad", 0x45, 0x8}, {&(0x7f0000000140)="0f66ad615e67a9f97495e18fa6ff1899ec7e1877945ca22a6edb3cb331e19c80e8ebc87f8ff97b1ca70370a4826c4fb2d42ad285bb8f903dd28a40fe08b2c472421c34a8c3c906f11e68465981e9f517a3785afa535761b724c9af41846e296f48d445d3bdbe092e4063edfdac1885904cb6c427ccb676a02cc9ee9013bf7cb031514e982e8f1732e079e2132e0be368e4227bd4342a90d2ec90cc65a80231da9c218b26e8b6dfc4ac3a4999915fa6", 0xaf, 0x5}, {&(0x7f0000000200)="38123cb7a75453ea8e9a89912a5de8b34a5a25f8b968533a52ed685dabf8a2a3a44916baa5b016e49d5d9a38b5ddc78e50f1545f00faef985f07c29aaa0b6e74f58cec8d44f2d681d64214e467c4584cedde2dbd9ae151268931dacc14cd8539de35c27bb944748cdaa2294d12c298eb219d80216f862e0efa8c6e5888f908eefa5785aa90bd5ee5cb8acc15e59feafb803da09475773235", 0x98, 0x6}, {&(0x7f00000002c0)="f48f453cb09bdc63f49052a812d6b30a131c3db53c65e04ca4", 0x19, 0xa82}, {&(0x7f0000000300)="6d7ee278e6d7072a258577051e3f0bc28f13468b881aab928b1f90037f6db8136d3b846d973113ab1029ba00636e848bceab8bbb02feb58bdd22320d2858bf3cc4efa4a6c77d446c5fc65de6210f13337df3232916514304b9313a46391960869a92210b0dd90fb753f43a796988b6588795412a94740ebdedeaa2c712f6c99a5ce07850e28dade333da9be6bb5a64ad3cc025ae52c7fe5931a12aac1679ba3274d5d27aef682aec2d6c7afcc7e57624b11fa838dc78fc8245dc646655be000ee9d9953bb0210c2ba6a989ec7f9615754ee98ddaf37c40622d43f81075c38d2e7c1511565598e516cbc6530b6cc3ee04db1d4041db7c8e", 0xf7}], 0x20000, &(0x7f0000000680)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@quiet='quiet'}, {@part={'part', 0x3d, 0xef1}}], [{@fowner_lt={'fowner<', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x66, 0x67, 0x63, 0x66, 0x75, 0x0, 0x65], 0x2d, [0x38, 0x63, 0x63, 0x36], 0x2d, [0x36, 0x32, 0x65, 0x31], 0x2d, [0x61, 0x30, 0x76, 0x36], 0x2d, [0x76, 0x73, 0x31, 0x66, 0x34, 0x33, 0x66, 0x65]}}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'uservmnet1ppp1wlan1ppp0.&em0'}}, {@uid_lt={'uid<', r2}}, {@uid_lt={'uid<', r3}}, {@measure='measure'}, {@smackfsdef={'smackfsdef', 0x3d, 'em0user'}}]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") fallocate(r4, 0x2a, 0x1000000000, 0x7) 04:53:38 executing program 3: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00004db000/0x1000)=nil, 0x1000, 0x2000008, 0x4002012, r0, 0x0) madvise(&(0x7f00003f3000/0x1000)=nil, 0x1000, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) 04:53:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f01b7f67f0f20e06635000020000f22e067260f01d10f01d10f20c06635000004000f22c00f20d86635080000000f22d80f3226660f3a40219c0f20d86635200000000f22d8f265f080770663", 0x4d}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0x7}, @cr0], 0x2) bind$llc(r1, &(0x7f0000000040), 0x10) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xd, @capture={0x1000, 0x1, {0x8be, 0x7}, 0x4, 0x7ff}}) 04:53:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) msgget(0x1, 0x52) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000001c0)={'veth1_to_team\x00', 0xfffffffffffff920}) sendto(r0, &(0x7f0000000100)="8ca06cfcd75b4eb531900825f50142ffc1aada667e409cf63daf3fec77dacb8a7a220958db8109e205917ad175feb19b4467d98f9180ab829998cef0cd6141b5e4cd78c56ea229aa2281d3e3159ef2a59528d6d114f5bfcd9da0ab0cc67ed34250bd46b1b7d397440a2c151ccc998f73c16cb280be18b5b9e711c03ed84e0a0a678235b556fb75077c1f1f3db0c052cb3fe303fb9719f6148ba2e87acb7cdb3d16", 0xa1, 0x0, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x9, 0x782fad92, "7b9d0a89e71f02ec3f65e49a8a1d63f2a408e3faed51ce86c9656f57daaf349da9a0bad6f5aff0728b91c35a25c9017110b34c39b04eff198dee7f328ccd7c", 0x26}, 0x80) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e23, 0x1, @mcast2, 0x7ff}, {0xa, 0x4e20, 0xfffffffffffffffa, @dev={0xfe, 0x80, [], 0x16}, 0x55}, 0xffff, [0x100, 0x0, 0x0, 0x101, 0x3, 0xa6e, 0xfffffffffffffffc, 0x6]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x10000000018, &(0x7f0000b67000), &(0x7f00000000c0)=0x1b0) [ 247.168033][ T26] audit: type=1804 audit(1560833618.976:32): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir356956744/syzkaller.aUVasY/9/bus" dev="sda1" ino=16550 res=1 04:53:39 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) accept(r0, 0x0, &(0x7f0000000040)) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000f0607031dfffd946fa2830020200a000900010002000000000000000400ff7e", 0x24}], 0x1}, 0x0) [ 247.241065][ T26] audit: type=1804 audit(1560833619.006:33): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir356956744/syzkaller.aUVasY/9/bus" dev="sda1" ino=16550 res=1 [ 247.392408][ T26] audit: type=1804 audit(1560833619.016:34): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir356956744/syzkaller.aUVasY/9/bus" dev="sda1" ino=16550 res=1 [ 247.440249][ T9364] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 247.508542][ T9367] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 04:53:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x6, 0x7, 0x3, 0xffffffffffffff32, 0x1ff}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, 0x4) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r4 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x101}, &(0x7f0000000240)=0x8) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000001c0)={0x20}, 0x2) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000198, 0x0) 04:53:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x20000000000000, 0x800, 0x0, 0x2, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000080)="94", 0x1) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) ioctl$TCFLSH(r1, 0x5411, 0x70d000) 04:53:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x4, "e52a8cb8ccd553cfe608dada1bbe5ed6f68f179fdb2f3cf267c5faf2670633af", 0x0, 0x825, 0x5, 0x98, 0x10, 0x7, 0xffffffffffffffe1, 0x7}) bind$vsock_stream(r0, &(0x7f00000000c0), 0x10) 04:53:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x800) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x1, 0x2}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x12, 0xdb, &(0x7f00000000c0)="09be68cec2175ffd2090789f0e0971821f737fa1174d630184c74d5d5fbc0ba4de0a1a7565d4f042c0569399ab5ad1c3e8d37c7df240a9f4ad0dee0e9271adf7ea70d3cd397ced95fed6b418b7b62f369c240431cbd9e2d6a4c479a235773123d41473f3f3f69854d5d7fe6104997410ab9cf7ba10f2b981aa610ce52cf825a66cdf111a10193060387deaa88e26fb13b15c3768b1e1aae9c0ec2c72d107371df358e9ec356a0e940c1d316a003522f89a9c043ed3def22fdda89cc0ab6ea8a20d2c6ef635bd25356ed78e8f88fb859f2702e4b658f000ea1b7fee"}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 04:53:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f01b7f67f0f20e06635000020000f22e067260f01d10f01d10f20c06635000004000f22c00f20d86635080000000f22d80f3226660f3a40219c0f20d86635200000000f22d8f265f080770663", 0x4d}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0x7}, @cr0], 0x2) bind$llc(r1, &(0x7f0000000040), 0x10) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xd, @capture={0x1000, 0x1, {0x8be, 0x7}, 0x4, 0x7ff}}) 04:53:40 executing program 1: setresuid(0x0, 0xee01, 0x0) getgroups(0x2, &(0x7f0000000040)=[0xee01, 0xffffffffffffffff]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fff, 0x2000) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000240)=""/149, &(0x7f0000000080)=0x95) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000040819030000000008000200cf000000340003002f657972696e6765746841d328766d6e6574316367726f7570707070315b6574683076626f786e65743175736572000000000000000000005193248d95e60b49d68e64b97c83ea3c822a9c511d95cf2bde2885294e7410fde8e3512ccd118639e43c2e7f64784c4188f4f548b2f460dd159228ea94880d2acadce61bb924a2392cbfe66e714c394bffc4f9a9888451cea557c5b6231f8164332a36c4"], 0x50}}, 0x0) 04:53:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f01b7f67f0f20e06635000020000f22e067260f01d10f01d10f20c06635000004000f22c00f20d86635080000000f22d80f3226660f3a40219c0f20d86635200000000f22d8f265f080770663", 0x4d}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0x7}, @cr0], 0x2) bind$llc(r1, &(0x7f0000000040), 0x10) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) 04:53:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x4, "e52a8cb8ccd553cfe608dada1bbe5ed6f68f179fdb2f3cf267c5faf2670633af", 0x0, 0x825, 0x5, 0x98, 0x10, 0x7, 0xffffffffffffffe1, 0x7}) bind$vsock_stream(r0, &(0x7f00000000c0), 0x10) 04:53:40 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2400) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc={0x103}, 0x80, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r1, &(0x7f0000000080), 0x1c0, 0x0) 04:53:40 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4002, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x9, 0xfffffef9) r2 = dup(r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000002c0)="4605805e67537448ae8c59d59650a3ea9fcbaea1a3919e28d1a008fca814c210356d36ff97da671b907dd762891c31232b8c4ef6027b54f3010c17c10ebbb3f9e5c2e42a5e3dbf949516781c56ede04766da9e3c6eb9df49a9ae553cb19105a2a9f436f2d04051c227177c925d53c1683079c56c6adb1bf37890ea595ad803a1b9b9a7ddd196ddb1520a321a", 0x8c, 0x0) keyctl$update(0x2, r3, &(0x7f0000000180)="6b12805a7e3ddba82b7d2298fdfd265aa4251caac379eda05f8699858aaefb5a26534ff6df4a24d4a144f03f32024083c58670761e4023e5352a5bc6ce2e8749d5ed27559242c4e89185b5fefbf092b4b1be4f9b2726b6e2e195b719720148f366ff47a2f05ed2d3f66f38610de5d88e1674ef339cb6764fdfb0857b744d23417cf777587e0944abd01886ed08b7898e08b8af99088b8856c373b4475ddfece65443244ee6a525a17c2f44bc04ed040cecd613758cb8d85c1eb57eac10428a1a4863739f30ed822ade2308bc6e37e8c98aa2327d2ad22ff23afa4fb6e24485", 0xdf) ioctl$void(r2, 0xc0045c78) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000280)) 04:53:40 executing program 1: mkdir(0x0, 0x121) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001500)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x80, 0x3}, &(0x7f0000000380)=0x8) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)=""/12, 0xc) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x400080, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getpid() setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 04:53:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:41 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fffffff, 0x20000) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x800) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x40, 0x102) ioctl$VT_RESIZEX(r0, 0x80004518, 0x0) 04:53:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x422, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x1}, 0x4) 04:53:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x5, 0x5, 0x0, 0x10000, 0x7, 0xfffffffffffffff8, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000034, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8000, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x40, 0x3, 0x3}}, 0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2, 0x8, [0x7, 0x7ff, 0x800, 0x7, 0x80000000, 0x7fff, 0x1, 0x1]}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x9}, &(0x7f0000000200)=0x8) 04:53:41 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x82000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) unlinkat(r0, &(0x7f0000002700)='./file0\x00', 0x200) connect(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x3014}) recvmmsg(r1, 0x0, 0x9b7e24fd9e0bcfae, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f00000002c0)='/dev/dsp\x00'}, 0x30) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000080)={0x5, 0x7, 0x0, 0x0, 0xeea}) ptrace$getregset(0x4204, r4, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=""/42, 0x2a}) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x1}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x2}}, 0x18) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0x2f}) io_setup(0x4, &(0x7f0000002580)=0x0) io_pgetevents(r6, 0xc5, 0x3, &(0x7f00000025c0)=[{}, {}, {}], &(0x7f0000002640), &(0x7f00000026c0)={&(0x7f0000002680)={0x100000001}, 0x8}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="8c0c57c59e837c1e884428d9fc2f2d3bb705ea417f0056cbc98d89fd87dd9f7dabdb31ac04b4e5ed979c929831acc67570f5e69f411532028d4d7f7c9e4e91f93c839d7da8dc815493c0534c", 0x4c}, {&(0x7f0000001480)="d6306879f58dd03c552d4dae17da6263dd68b4cfa70eb9dc341edd8c8333cf4c835a15371ea0c29643769169167914d2f5878995c3d57b5c77592837abcc47aa9f404e2f9a97b8bc48944e1c079b8389cd9a72bacb333f72781110146689b16e65a3cd21effa5fe76a37940c978ac590e249cdecd2981a577c22f2b78323fb64760206f97f98f37dc318d550dd97b14e724cef7d69f1e5d81933064cb27d5f90dbb058429eb3832761a62bd4b7611a3da802f908c7bd97807f948684e5d827042919757a60daa64dd277b8d4278cdca205759cdc6601658018a3", 0xda}, {&(0x7f0000001580)="1da6200409a3efb8a9a10f40b5c18d8b1bf7530a73f9ac7bfd43844c4b448005ecb752bb77c1abec544f15e0247a1dccc7c76177b6123478083ff9b86b4889262e67d869963c4e206fbaaad3c8991b91dcece656b8d87379ddbe196c08a157e3ee59298eb36b12e056fd4b9777c9c6a7718f335bbbf2edad031c2a80bd5a904167fa084e5d3721240f34f8bde03779b84702751856491f17dbb796d9e46cda482ae660474863158f590de75479b2daf960dcf95ae2470a3cc5814da6ff854849a2836b3e200edeb090dff34195d18d39d1fd1e4d36311f9a19f6cc5ffcf09dee8766dee7b3b366d2ae85b955a654cdae5026ac6d7d5c1be7219cd73da606fcfaa5524dac71c5acdbe37f653dc892e1e5cdf7ee7e5929ba23d720f9c608ef71d8622536d86583df9ca616d22e5c2f4882f07703dfc8ce874a70d16d9e244d5319fbf403187ca154b4785e0bc246f5451004cee48344c8e953d455a842705b314c3ea261574c9e77b48f0fc0a7ba871df5318052651150e8bbbcd752de58cb1635104b6663c435e77a7e407258cd6c716ba3cbd770022cdf2fdeeb69179a6cbbac879386cf2e8d68c0d971fa0c6b4e83535dfddce7d0de27ea0bb585417cb15da6400b7b39a911e1a1f481cae1f41b8de4cc2c5006b0dbd911ef03570551a93716eb3f62c11b58201afa016104f4088727b4184827b59f86ffec0502db485dd7f1a9b59cae7477dcb4db9e5ff012f7e493acf3c4999bee2e9dc1bb99994415455e445dd39ed79cc76da7fe82a0f1dca6d2f29fce39d26d4a9d34269667b5e01520aaf4a01c54422f61f0bda4e456f874dff69efa78b55907551af876aea856ba63b725d3ee26348192f4e3955d03fde64d4492add550f81a75f7135b0bec3a8d0aac843cc927bc3d3d0bd1b777587597ddfc72c21c76f8adefba77f9dda05792a0d27c346ead514d4eea89bf31b1b6fe98986dea3ea8a107457ef3de03aec23171ac878b9053e3be7ee8574dfd0a4359ce367367372c96bfe5be1f02883c855df4ded57aae3dd2ffe846e8c1383dcb617e196057b80b3a70fbd191db4671ce51b20e145f918bca2fdf0dd4597c8e235638cda30f7ff57eb3a23528455e755b4086161831e5a77a9fbf7cb5fc2e6ad14e165b62ab09d0f737e164745e7e908fcb2e39d18682ed3940f823ed7c3dbb828f654656621e79702a50fdc8fa4aeb52f31932434a6b3d6234ead57f363e40893b885ba5a42c17e05858b3eea99e4c74d549727b6a12583095c08bca41b73b34bd7d81af630498af07ad0f786fdcc5ac8e93d2ff8b3fbdcaac264ec5393fd3e667976eb7ff793696a421a392cb2f8de3033d3bfac437dd205596553e9a988acbb763f2feed9de13c9e7b553b35a5c821786a1a9dd72b6c13113d263077cff4aef001c0b6467ddb1c01ded4af005ba4f877e912a030854673fb4a6dcc9e4694f421aeb0eafc2f6fb2b53b949216d62debca964349ddb891d720a724000a3a7a033f0db3671ee2c0818b8fc3d4ba4ed8a2e83955be24c662f11132e2c579528718b77f4682f83b2273382dfe25c9c49a9273391be305d695562405ef5db90c41d0e6a00df6dce65a6cfff6a66f187b5385e77fe62e447bc9de4dff57358f9b7af347c8e841b53d80a2cec9e62232f7985054677221cbb846c710f86bb35dc6d4398c8531cc784098c520c61fc474e1958d4a1ebc41a526adb729990539efcf2c733047cfe8cf1430f7954da9b14a86d318d563e72ec8155a1e7aa94c0db28e1a60fe75dcddb94e241a03cbb41f0e1826874ec37df425f3cf286beb6893e1b212a3901056fcded8264db9793d4ccf4c09c666ce353c7a4f122e309e92e28f211987ba010aaa80094f50bddec7268847c0d8f71ee22e155cb4c069d278840cf8193a20029aad772f01d2ede3c3bd0cea21d8cbc593a51383065152450258a257e8f0cb41dc2a63fb5548f85a2e35bb2f678257fdb83edc8460f92c7caba29e834da29c43e29238147200c0b274b6b41f2b4621819a6fc3a276c09bf1b7625fee7927b69bbed53f452870180dc065fe4919c853bec87b37b5a3cdaff6465603b46bd016a6c4606ebc060610dc88afd73c4402bda3c33afa2845c5b82018eb6885ba919557134b3260c461cc8922bcea773aa9f3d174681c7719d1405291ee5fe1ff8e1ebc7a7c6e5c8a734a0f7e33c26e9515e0cc0b1b34bcf87ce40fb8d7e55a17c02a59cd22d95b8cb1a986d9c787584291f1d59ee2d6ed1d618ee30e3ef67df5b1d9b8d529abf078b69f3e8279e0b1f0902333a2ca32bda3fc1c5ab06104a1df43867bb08fd58336bc8ce7d8182ed043b3870e8bb9e3f4d375f01c5a38703632a7900a64d6209c05ec89ef5166f0762536dcf20107599a058432a377ed093b38e3c6670392aae516afee9a178027fa81ed60d17ec3abd59b4d76086b7a724019ff6860b5a5629222a2c355655ed1573a5350fcd408db379b54056811174b522f8bcba5e478777bcb138e9e434ae201d60ff80778df037928d459383d8082bfb1c62e259deda9b53c39985f1605d0f46f4aaddbfd20a31c14b30c4f486e03efe2c55dafb4db3064b38dc98ec0025eb872ed2411879537347a065bf6948c56a2b94106ceb25730fb08212d43021d571d04437456adfa1c7a19e4a207d1632bf25481a17a3081a3590b5d7659a77fad0d674611bcb72bdfe7b2665b1fca68394857feb492b90cc233459053b743e380300e2ac573387a32d55d6fbe01735d5e09b04638769f79365a6cf268f66183d82b1403a95a0c1716b13769f5f0f3bad810ea4c2f3dfce1bf011d93a8a43d26a9dac270fc209f9129c28b4e1e6ff804e11ef9d796338e0c1d4e385b067a1fc6367799500c6514a71bee3c66054501a3385c298caab7dcb8242cea41e21a9d3bc99b870585f7a0d5a24c83ec30deb519ba3bc585f0713b6bdca922258f95ff20aa47f19f6920e9af0375296baee279298819490844385dbaf6fc9547907eb27e03914cac127b36cfcf49cd4873be3161fe56ab23ffefd31b57a6ee63f3203a94d2c007344dac96643d9cd5ef6c2e318cdac5ce919fdedf91866b995bed34e652c07bda49d3527490fae094d37362f5396075e1e8e29a9ce46aab8cfcad417a540e4e9ad479db41d136da57894d18576524b76e9b7e59e9e19a4c6ec451cd08228a1cc3725abaf6dfd692760eb002dcad5ddb81527a61f7c02e2faf143d70d5e97a0755d6c9983ae7a723d36bfe7e6729016f5a5fb810f7bf8d319d2a011dc6299dba4a895d297b888ebf7a60494d94107ce29bef653a9c0367c5ee4741963d8771f48e1682c47a17a378fe288ea1ac4a72dad2bc454d99602ace88b80af22c5c2a5e28420fbd1761341ed0ef7fcefe353db5577bd1b068e0840b8365a889c401566ea058fffd1076376c5afbb33c8f3e83b48664e30187c6c8f1299f7d2c3190444db2f3a3277417c50172f45281c13df57abce11886aaa58b0201c216767f4d5665b8563f8f95b85f83902e037fa5a64663d03b4fa95ce52b4237cde2f49805738cfe7f573684c9c94db3c9e31b36416ae11b780414c7b9131b22c9c5f4e65cde6c0546c5b2db29958c9e6d16b1cd33f22b4d8d4d6811714213163b6160023f54167203b9c5270e71c49b921af4d79f3a88067ac65a0b3a89ab53220487743dea3e53971005ccc6c5f3130db63a9a1fa66acc254a11d19766dbd305a2ae67e3c20b2bdf2159f5b44f66358efe0c9665b953ead3f9ec763b8e1f5fb3091d0ac7d1c4badd7272850b2c08f7b4445ea37e3d1cf490ca3a69ed205991e990b25c39857554ef85ccb18a3cf15dd881f756b9a98e55f62c01e26a135b48037304ffc4ce4126cf5d4e5579ef594b748148d87ea30289b84612aaed5f4de7834f3e1477674e971ee7e50e9a810031a3fb148172ca421d9d5e37c80b3463a8a0feca6df7bd442beecb79a4c199a8ee962cbb2d46d2c054e7e1619645d521884caf9105dc828d00c6688e3a484b999d6453b9c626f6c2b1f15da3a7c15bdf88ec60231661bcfdfb6035bd3ae1ccffba0425e134d1186c91cef907c5fbf57508517d8b231526fb4195be84f979ba3947d28409d769521c6be3ef191982e6ec9136abc436332003dd48fc757404fb087fa9009d2d86aa6db420170f76ecd11a4f394a82e51473cc33765544520c651f81208b3cfdcf145831993d1e2ddb59c5aa68caae538117d2d065b343621689e44ac7d1713a3d7a26bdf87fc62eda8573bef3fe454a2fec445b88b55689e159b9489ac0de7c972cedb27a206fabd68baa9fafd02ca4c5c07c36c1c5d24e8e0ca757fb22bf0762717a264375751e30c39a6a050dab0884ac8a169376761af5c965508ccb54374c3f52c84f70c573658b82667f59ebbe39b3f4420928e26c700f0fa96b0796648043d775ff75fc774dfceec97ff80c3e123e1eb25780d4305a8794e21e034bbe154073888efed0f63b8dd074a83286482b7fc42024a817288a47817fab2a826470bc267da4a207affeb04f2b843074db18c5fe04c425e4d53ce0e5280573e4a28c7f3ff27d8827dbb8e8392524cef31fbfdb3f3753f333d27c428e53a87460140cd402a5ca512a7ff036e99754e4db390c0134032f6b04d25be27c270352a1c3874be1d425c31e43aa3beba3d94d1d18020d80dd3747d1f9e7c8e98320a627e64e54157362c2a73c62e954aacaff2284d5a498498392cbef0e890e0feb4de52aab8636425ca621637943b1e99fcbe0cc9e9ad770b0347e5ff465bc266294da5e887cd092a040f0eea1d3b7afa736758e21c56ec641791abd10f5eb85f63a265310d3920594b9171a067c10e092af092840a3403af11c381841d52a35c862f9ad3fee31b67dc74fd8836ad06ee0ce41e3206eb787b262dce87bfd6a5351666546f48456ccfdcbeadfcbb1e837a69096f9c987c0d5b00281a096f12f0ca92da55c72dc4622276d0cb6b969d3c5fe6daa943410b24ba140c52e7bf9b59298f21261e479b6541b3fe1f1a37632b5718638b637547e582a69162aa8c9bd0b2e154aec2c5a3e191b5575ac53ad72514dcefaa8fe20257a27a624bec546341c7b3c3a5ffefc6190c949c1a5748148020d31971516efe1bff7b32f03bd338c4ba97e4777f88b4d529020e055ea9f056bf78f39a01e04b29157728e7efa482bb2d2673dd8ff9cebb13bb6974a80ab60f092a242aaff9be9267c0ad30de36bcc9dace6e65568936c8fabb6909ea3c33caa8eb420326034303ade6033c0e892133c767733c226f8e4b7fcaed92ae56ac7e94c5da478851237ae4dd2fc45675f94073af14fac3a3c104ed380f8bd2d6766d83f3076d1dc36fc6bcb3e9597fd3be97fef81d11b515a8e57eda8efc3deca253ac20dcd2a26e27e7a7900141dd2889e37285528c4367646fce05145ce13e1efe1d921350ac86b92920c4e28f2efe1001ac6aee2067d00c6f0cb512515f4afdd890057754661330091fccd1b1c88f1a84c54aff51e60f7c4068216f6d93ea8d66598c6974a8479698599611ac71dd42225121e7587f434781554ffaff0684ff2f6b2f4ec137c97e56e4306a6a6d48eba4c3d78ccee3135de46cc9d6e4d5095556c688cb384ef3f041dc42916850460ea9e3e6813a8af31c7d17ace4ed5949f42bb72eb05558894be2530166ce91fd0efbd2372b0b54b1717cb6764ec03c1783f26b7431a8f4f7b77026b0b993992579c2f3a38ddb6bf0eec7a321a171901cea9c94d3164f28908e141b9ca91", 0x1000}], 0x4, 0x0) 04:53:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f01b7f67f0f20e06635000020000f22e067260f01d10f01d10f20c06635000004000f22c00f20d86635080000000f22d80f3226660f3a40219c0f20d86635200000000f22d8f265f080770663", 0x4d}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0x7}, @cr0], 0x2) bind$llc(r1, &(0x7f0000000040), 0x10) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f01b7f67f0f20e06635000020000f22e067260f01d10f01d10f20c06635000004000f22c00f20d86635080000000f22d80f3226660f3a40219c0f20d86635200000000f22d8f265f080770663", 0x4d}], 0x1, 0x4, &(0x7f00000001c0)=[@cstype0={0x4, 0x7}, @cr0], 0x2) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 249.532660][ T26] audit: type=1800 audit(1560833621.336:35): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16580 res=0 04:53:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x422, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x1}, 0x4) 04:53:41 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0xfffffffffffffef2) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet6(0xa, 0x20000002, 0x5617) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r4 = gettid() ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000040)={0x1, 0x0, [{}]}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 04:53:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000002c0)={0x1, 0x48, &(0x7f0000000380)="310dc404aa17df1bbcb58f79b7f40e7311f644546b5f37e3f572dd47fb385f77242f3beb7d684e6865416cf88137b2e03713b3b54be5def0e7d22e55567d6e3bfd2960c64f06295f"}) fcntl$setflags(r0, 0x2, 0x535a3d8b8fae3e6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) getresuid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000008c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0xfffffefe) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000880)={0x58, 0xf336, 0x7}, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000040)=[{&(0x7f0000199fe1)="1f00000002011900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000600}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x80, r7, 0x820, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9db}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20008044) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) unshare(0x40000) [ 249.907093][ T9462] input: syz1 as /devices/virtual/input/input16 [ 249.968689][ T9457] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 04:53:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="c0dc00025e0b") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x3e1b, "6c3cc8a9b0722c5fed684423bc1d3df778c33e4af41ad28818b51a384942b1c4", 0x2, 0x1}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz1\x00') r2 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00'}) [ 250.171832][ T9467] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 04:53:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:42 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000021000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000034f246e91f9472eb0000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r3 = dup3(r1, r2, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000740)={0x0, 0x9, 0x3f}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000007c0)={r4, 0x2}, 0x7787) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x1ee, 0x0) 04:53:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000002c0)={0x1, 0x48, &(0x7f0000000380)="310dc404aa17df1bbcb58f79b7f40e7311f644546b5f37e3f572dd47fb385f77242f3beb7d684e6865416cf88137b2e03713b3b54be5def0e7d22e55567d6e3bfd2960c64f06295f"}) fcntl$setflags(r0, 0x2, 0x535a3d8b8fae3e6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) getresuid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000008c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0xfffffefe) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000880)={0x58, 0xf336, 0x7}, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000040)=[{&(0x7f0000199fe1)="1f00000002011900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000600}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x80, r7, 0x820, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9db}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20008044) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) unshare(0x40000) 04:53:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x80c00) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000001c0)={@local, @loopback, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@loopback, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001700)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001940)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000001a40)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b40)={0x0, @broadcast, @local}, &(0x7f0000001b80)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001bc0)={@loopback, 0x0}, &(0x7f0000001c00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001c40)={0x0, @loopback, @remote}, &(0x7f0000001c80)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001d00)=0x14, 0x80000) recvmmsg(0xffffffffffffffff, &(0x7f0000008480)=[{{&(0x7f0000001d40)=@x25={0x9, @remote}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001dc0)=""/63, 0x3f}, {&(0x7f0000001e00)=""/3, 0x3}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/153, 0x99}], 0x4}, 0x1f}, {{&(0x7f0000002f40)=@pppoe, 0x80, &(0x7f0000003580)=[{&(0x7f0000002fc0)=""/124, 0x7c}, {&(0x7f0000003040)=""/197, 0xc5}, {&(0x7f0000003140)=""/221, 0xdd}, {&(0x7f0000003240)=""/234, 0xea}, {&(0x7f0000003340)=""/177, 0xb1}, {&(0x7f0000003400)=""/58, 0x3a}, {&(0x7f0000003440)=""/192, 0xc0}, {&(0x7f0000003500)=""/121, 0x79}], 0x8}, 0x2}, {{&(0x7f0000003600)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000003680)=""/118, 0x76}, {&(0x7f0000003700)=""/86, 0x56}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/203, 0xcb}, {&(0x7f0000004880)=""/116, 0x74}, {&(0x7f0000004900)=""/177, 0xb1}, {&(0x7f00000049c0)=""/14, 0xe}, {&(0x7f0000004a00)=""/229, 0xe5}, {&(0x7f0000004b00)=""/157, 0x9d}, {&(0x7f0000004bc0)=""/64, 0x40}], 0xa, &(0x7f0000004cc0)=""/22, 0x16}, 0x1f}, {{&(0x7f0000004d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004d80)=""/201, 0xc9}], 0x1}, 0x6}, {{&(0x7f0000004ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004f40)=""/39, 0x27}, {&(0x7f0000004f80)=""/43, 0x2b}, {&(0x7f0000004fc0)=""/163, 0xa3}, {&(0x7f0000005080)=""/138, 0x8a}, {&(0x7f0000005140)=""/85, 0x55}, {&(0x7f00000051c0)=""/229, 0xe5}], 0x6, &(0x7f0000005340)=""/116, 0x74}, 0xfffffffffffff6d6}, {{&(0x7f00000053c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005440)=""/161, 0xa1}, {&(0x7f0000005500)=""/2, 0x2}, {&(0x7f0000005540)=""/166, 0xa6}, {&(0x7f0000005600)=""/1, 0x1}, {&(0x7f0000005640)=""/179, 0xb3}, {&(0x7f0000005700)=""/234, 0xea}, {&(0x7f0000005800)=""/222, 0xde}], 0x7, &(0x7f0000005980)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000006980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006a00)=""/70, 0x46}, {&(0x7f0000006a80)=""/183, 0xb7}, {&(0x7f0000006b40)=""/59, 0x3b}, {&(0x7f0000006b80)=""/225, 0xe1}, {&(0x7f0000006c80)=""/185, 0xb9}, {&(0x7f0000006d40)=""/199, 0xc7}, {&(0x7f0000006e40)=""/21, 0x15}], 0x7}, 0x5}, {{&(0x7f0000006f00)=@tipc=@id, 0x80, &(0x7f00000083c0)=[{&(0x7f0000006f80)=""/249, 0xf9}, {&(0x7f0000007080)=""/196, 0xc4}, {&(0x7f0000007180)=""/4096, 0x1000}, {&(0x7f0000008180)=""/149, 0x95}, {&(0x7f0000008240)=""/25, 0x19}, {&(0x7f0000008280)=""/135, 0x87}, {&(0x7f0000008340)=""/98, 0x62}], 0x7, &(0x7f0000008440)}}], 0x8, 0x2000, &(0x7f0000008680)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008f80)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008fc0)={'bpq0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000009000)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000009040)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000009140)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f000000b840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000b880)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000b8c0)={'lapb0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000b940)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f000000ba40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f000000c140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000c100)={&(0x7f000000ba80)={0x658, r3, 0x120, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xbc, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r10}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x2ac, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xf1e}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x73f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x2, 0x6, 0x9, 0x6}, {0x800000, 0xd37f, 0x7f, 0x8}, {0x7, 0x4, 0x3, 0x400}, {0xbc00000000000000, 0x8001, 0x2, 0x6d}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x100000001, 0x8000, 0x7}, {0x3, 0x7fffffff, 0x3, 0x9}, {0x2, 0x40, 0x5, 0x80000001}, {0x3, 0x3, 0xc5fb, 0xe7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r20}, {0x130, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 04:53:42 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x1, 0x0, 0x7, 0x284, 0x87f, "30d2761136e3a760f66cd6b8c28dd0c184a33a29c6ad9761f6fe1d43d857f3e8fb247f4089df4a6b907dd1b1ea53a5b99f5de784a0b530f5fc547dcfe710c6", 0x3a}, 0x60) syz_open_dev$midi(0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 04:53:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x40000) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x2, 0x1f, 0x0, 0xfffffffffffffffc, 0x16, 0x7e, 0x7, 0x9, 0x7, 0x5}) 04:53:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 250.840645][ T9492] input: syz1 as /devices/virtual/input/input19 [ 250.906475][ T9501] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 04:53:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={r2, 0x80000, r3}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2d) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000003c0)=0x84) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 04:53:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x1, 0x2, 0x7, 0x1, 0x4, "1774d9ee4b9f14d1412b5d8970380f832be241c0e0bcd17fd66e18984bc3dc0bf2e187af00a20f4b0d80f0e4900ef8a244174d6afa926195d47a440ff7531e", 0x29}, 0x60) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 04:53:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:43 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) write$cgroup_type(r3, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000280)) close(0xffffffffffffffff) recvmsg(r2, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0xd01}, 0x3f00) close(r3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004500)={&(0x7f0000004280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}, 0x20) 04:53:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto$unix(r1, &(0x7f0000000240)="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", 0x138, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 04:53:43 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x1, 0x0, 0x7, 0x284, 0x87f, "30d2761136e3a760f66cd6b8c28dd0c184a33a29c6ad9761f6fe1d43d857f3e8fb247f4089df4a6b907dd1b1ea53a5b99f5de784a0b530f5fc547dcfe710c6", 0x3a}, 0x60) syz_open_dev$midi(0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 04:53:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket(0x10, 0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) ioctl$TIOCSBRK(r2, 0x5427) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) write(r1, &(0x7f000018efdc)="1400000052001f0214f9f407000904000a92a36f", 0x14) clone(0x100, &(0x7f0000000100)="bdbbfba19c8e3da35cb197c9fc0694aa7b5706c31fbdbb8f0fe3fa3c0fc67d0f1a37974eba237f4b21afa2e19ab8f48dd61d7cc60dcfc486cc0873d2470f77e5ec801c7df949da6058a3926382d0cab870746258bf70017d07178e82b114270f1b8c6d6ee02f4c2eb912f5da4e6dd5ba720f3e9b6bf66de8a0d23fa1f54cc60229aa66b8b7c565a360733181ccad292017e22d4329e7a2003d454e2881ea5f3700f68daa4dad6d33accf3651fd48ec06fef2118a396d21c7f6caf91d7a53e589f7044ec0c283a2fcb611c48e404e5859f472a2d5086863a7fb18aaa46c5e0b2abcdbd8edb677f6cd8604b37f746ad2f1dc9f69506149", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="8d077b3f5002dbee4980fe4485e1968ab974b96d80") 04:53:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)=0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x100000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,cache=mmap,noextend,sq=0x0000000000000001,func=KEXEC_INITRAMFS_CHECK,fowner=', @ANYRESDEC=r2, @ANYBLOB="df8589049ebc1f1026e1"]) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r3, 0x65, 0x3, 0x0, &(0x7f00000002c0)) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000003c0)={0x5, 0xf3d, 0xfffffffffffff001}, 0xc) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000005c0)=""/230) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) write$selinux_attr(r4, &(0x7f0000000580)='system_u:object_r:fixed_disk_device_t:s0\xfe', 0xff04) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) 04:53:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) close(r1) 04:53:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) fadvise64(r0, 0x0, 0x4, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) [ 252.540834][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:53:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 252.598668][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:53:44 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x7ffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) read$FUSE(r0, &(0x7f0000002380), 0xffffffffffffffb4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1f) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000140)="8299f10267d387725962eeb2304c92804ee372c7bbec591a306126cf76ceb548e00e8474effc2e56d2b68e7d68dc8d0d9b738f247cc7c783df8231a9926575c55083ba95c4f56eb89bcbcf251804f4dbfb6e2bd13521857d8fd97fa96720fea4f2f9ab86bf873a02737767668006eae61240b243783e41c4450f7e4b7e19a5e976cd46ac3263479651dfdf907e0d3ecec31c5969966ed9215959f7cde081b98e5e85026562773b6dd5741b448642c1ab6ad6896808336bed06e70a4b71") ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000000c0)={0x0, 0x1, {0x56, 0x0, 0x5, {0xae, 0x10000}, {0x66, 0x2}, @cond=[{0x8, 0x4, 0x2, 0xffffffff, 0x0, 0xffffffff}, {0x1f, 0x3, 0x800, 0xf3, 0xffffffffffffb01c, 0x80000001}]}, {0x53, 0x6, 0x3f, {0x9a1, 0x2}, {0x47d3, 0x2dd}, @period={0x59, 0x1, 0xfffffffffffffe01, 0x3, 0x7fff, {0x8, 0x0, 0x4, 0x884}, 0x3, &(0x7f0000000080)=[0x365, 0x18, 0xcc3]}}}) 04:53:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) r1 = epoll_create(0x5639) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x442401) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x8}, 0x8) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 04:53:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:45 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) 04:53:45 executing program 1: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff92, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, "686f3d556275f876a3feb482c27f87b5f5aec2ca17424d2d7c0aecd42d080e49"}}) 04:53:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x0) 04:53:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r2, 0x208, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaba}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6314}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040091) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000240)=""/58) 04:53:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015005}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={0x0, 0x100000001, 0x4, 0x80, &(0x7f0000ffd000/0x3000)=nil, 0x6}) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0) 04:53:45 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 253.859013][ T9613] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 04:53:45 executing program 5: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x3fc, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x94, 0x20, 0x208, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0xffff, 0x5, 0x0, 0x0, 0x7, 0xd}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8000}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x1) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)=0x1) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:53:45 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x8440, 0x80000105) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2000000, 0x40016, r0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0xffffffffffffff8b, 0x30000000, 0x401, 0x7, 0xfff}) madvise(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f00000000c0), &(0x7f00000032c0)) 04:53:45 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x14) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000003680), &(0x7f0000000280)=0x4) r5 = dup3(r0, r1, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000000)) 04:53:46 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 254.415996][ T26] audit: type=1804 audit(1560833626.226:36): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir363349795/syzkaller.MOQuWI/22/bus" dev="sda1" ino=16598 res=1 [ 254.499137][ T26] audit: type=1804 audit(1560833626.266:37): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir363349795/syzkaller.MOQuWI/22/bus" dev="sda1" ino=16598 res=1 [ 254.548944][ T26] audit: type=1804 audit(1560833626.286:38): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir363349795/syzkaller.MOQuWI/22/bus" dev="sda1" ino=16598 res=1 [ 254.675681][ T26] audit: type=1804 audit(1560833626.286:39): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir363349795/syzkaller.MOQuWI/22/bus" dev="sda1" ino=16598 res=1 04:53:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xffff, @ipv4={[], [], @multicast1}, 0xffffffff00000001}, 0x0, [0x6, 0xf9f, 0x2, 0x4, 0x100000001, 0x83, 0x2, 0x1]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x802, 0x180) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) exit(0x7) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x800000007a, 0x0, [0xc0000103, 0x10000000800002c0], [0xc1]}) 04:53:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x100000001}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x2, 0x1ff, 0x3, 0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x5, 0x2000) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000640)=0x23) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000005c0)) r4 = open(&(0x7f00000006c0)='./bus/file0\x00', 0x10000000081, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100003}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b8, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ea}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400000000}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff00}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2af}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6605}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400040000000000}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000680)={0x0, 0xffff}) ftruncate(r4, 0x200004) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 04:53:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:46 executing program 5: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x3fc, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x94, 0x20, 0x208, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0xffff, 0x5, 0x0, 0x0, 0x7, 0xd}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8000}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x1) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)=0x1) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:53:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:46 executing program 3: bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x0, 0x3}, 0x8) r1 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x7, 0x56e, 0x8}, 0xc) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) write$selinux_attr(r2, &(0x7f0000000580)='system_u:object_r:fixed_disk_device_t:s0\xfe', 0xff04) 04:53:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:47 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) eventfd(0x9) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0xfffffffffffffffc}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:53:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 255.504366][ T9681] Unknown ioctl -2144578294 04:53:47 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = eventfd2(0x5, 0x0) dup3(r1, r0, 0x0) 04:53:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:47 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) flock(r0, 0xb) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x100, 0x80, 0x2, 0x81, 0x100000000}) fanotify_mark(r2, 0x105, 0x4000000a, r1, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/118, 0x76}], 0x1) r3 = dup3(r1, r2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffffffffffe1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x200, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, [0x2, 0x6, 0x4ff7, 0x1, 0x57, 0x100000000, 0x1d, 0x1ff, 0xba, 0x2, 0x0, 0x5, 0x0, 0x8000, 0xfffffffffffff800]}, 0x0) 04:53:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000005a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)='#', 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r3, 0xee, "2f02d105f94ac32ab8a2c40e3b0d75251198389ce1c107a04292b9420d80d34e1cdfb8095cee8c82f069b59d6903ee918c5598b66441bb3fb1c3c66804ef61c122906659177a28f4b7d49462ca67f9dc8edb34408c66bd9f92718f8486b1d686e7652083f95d11e2e58e234a60788f309329a63e57664b2479111f1fbeb15c7d8707a918508b325fe0085273a9f19da285853fc2663ff5e907234501448831a002e06c8f6ecd8364707e2dab3d4401b8aca5c1d6869350943f18fbb923fa64ba8bd86d19ce44277dc04dc4ee28bc9dcd3e6f19b32f044bbd906f3fd04b4f6c30b18675edcfbb05afa6610f9e6e72"}, &(0x7f0000000000)=0xf6) 04:53:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) write$P9_RWALK(r1, &(0x7f0000000000)={0x30, 0x6f, 0x2, {0x3, [{0xc1, 0x1, 0x6}, {0x8, 0x2, 0x2}, {0x80, 0x3, 0x8}]}}, 0x30) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/8, 0xfffffd4f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="3802000000000000000000fd4d36750095000000ac000000a7c6b2ac66a3572d3659fc84c9f918b917fc1fbbd6b9a37d4ed2d0b61512467c84f48881d7ea5c984f170e716d8aee919a44e5bb964289b54d6d7f0b8d5b6ffe1e0a4927"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 04:53:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x6c, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x20000048) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x165) [ 256.240586][ T9686] Unknown ioctl -2144578294 04:53:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:48 executing program 2: accept(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x1b}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x1be, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1400) syz_open_procfs(0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0xf) 04:53:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:48 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:48 executing program 2: accept(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x1b}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x1be, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1400) syz_open_procfs(0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0xf) 04:53:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:48 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x10001, 0x101, 0x0, 0x0, 0x2}, 0x14) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff00000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x41}, 0x48c0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, 0x0, 0x0) 04:53:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x9, 0x408000) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x100000000, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffffffffffb, 0x1000, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4028af11, &(0x7f0000000140)) 04:53:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000140)=0x742795b9ea632ed0) r2 = accept$alg(r0, 0x0, 0x0) dup3(r0, r2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x1, 0x2, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) 04:53:48 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 257.148036][ T9719] syz-executor.1 (9719) used greatest stack depth: 22112 bytes left 04:53:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000140)) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) r3 = getuid() getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000180)=0x84) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8880}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c0056000300000000000000dad07fa9dcbfee9d7eece0b4cefd40af1b4d1e836a8958e35a3a2ec69c08007f00e000000104001000d4b1f7db0e4d661155dc9ea3109b72a4fe87ce1db74052aed0f16389cfd885186af7138a71c6b1cdd8f7b9049151f2e189b121765e34b48dd84f4b6981ee2f2bd40d4981aaf0baa074f5df499081706f9f87740f45c8022b77263b88e20758dc655f99971404a2e46dfd13fab049602024aff387d816267569861d5b9b5dd2ae63000008000c00", @ANYRES32=r2, @ANYBLOB='\b\x00Z\x00', @ANYRES32=r3, @ANYBLOB="08008d00", @ANYRES32=r2, @ANYBLOB="3000540018003a002d2d6e6f6465766c6f766d6e6574312f0000000030000e00fe880000000000000000000000000101000000"], 0x4f8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB="f40d3696244522035612eb8449a019b0d24fad962424a2ff7358758a841c28a19aef"], 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)) r6 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000640)={0x8, &(0x7f0000000600)=[{0x0, 0x1, 0x5, 0x9}, {0x9e9a, 0x1, 0x69078028, 0xc092}, {0x2e99, 0x1, 0x4, 0x4}, {0x3, 0x7, 0x80000000, 0xfffffffffffff001}, {0x109, 0x4, 0x8}, {0x2, 0xfff, 0x6, 0x1}, {0x9, 0xd2, 0x800, 0x2}, {0x1f, 0x1ff, 0x7, 0x1}]}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r4, 0x8}, &(0x7f0000000440)=0x8) alarm(0x9) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x2a4a, 0x4) ftruncate(r6, 0x1000000) sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 04:53:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat6\x00') r2 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x80, 0xff, {0x0, 0x7530}, {r3, r4/1000+30000}, {0x0, 0x1, 0x2, 0xffffffff}, 0x1, @can={{0x3, 0x0, 0x7, 0x1}, 0x4, 0x1c6229682a6df7f1, 0x0, 0x0, "6f56b5ef334093bb"}}, 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000380)=@v2={0x5, 0x2, 0x0, 0x800, 0x1000, "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"}, 0x100a, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x3, &(0x7f0000000300)="51dca5165e0bcfe27f0000e222d916211b310399f408a0c1a7ffc749a171e6bc4f2b71f5266d0acf7b67daad4619caa3f0fda9a9d029397683de16327d8a48eb119ca284ee45c2e3b6dd2f30a72af830851b78d67793464c1b979610323644370766883bc6483a5bcd62340b") connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x3}, 0x1c) sendfile(r0, r1, 0x0, 0x88002) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000013c0)) 04:53:49 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x18) 04:53:49 executing program 3: r0 = socket(0x200800000010, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000011c0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000012c0)=0xe8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600)='/dev/autofs\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000001640)={0x1, 0x70, 0x5e4d, 0x5, 0x101, 0x0, 0x0, 0x9, 0x0, 0x5, 0x8, 0xff, 0x1000, 0x1, 0x4, 0x1, 0xa10, 0x7, 0x3, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x7, 0x33, 0x7, 0x0, 0x0, 0x40, 0x2, 0x8d2d, 0xfe2e, 0x81, 0x5, 0x8, 0x6, 0x0, 0x1, 0x4, @perf_config_ext={0xa43e, 0x6}, 0xc840, 0x2, 0xd74c, 0x2, 0x4, 0x8, 0x3}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)=0x0) syz_open_procfs(r4, &(0x7f00000015c0)='attr/current\x00') sendmmsg$inet(r0, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0x1000}], 0x1, &(0x7f0000001300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xffffffffffffffa9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast1}}}], 0xc8}}], 0x1, 0x4000000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3) write(r0, &(0x7f0000000100)="23000000260003000000f7ff02007701000000ff0100000000200000ffffffff0100ff", 0x23) r5 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x410000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001440)={{0x4, 0x2, 0x8, 0x5, '\x00\x00\x00\x00\x00\x00\x00\x00\xb7fEp\xe9\xbf~\xc8\x00', 0xb}, 0x5, 0x14, 0x6, r6, 0x2, 0x3, 'syz0\x00', &(0x7f0000001180)=['{lo\x00', 'em0@\xb3em0mime_type\x00'], 0x16, [], [0x471f, 0xecc, 0x6, 0xfffffffffffff38d]}) 04:53:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x59) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:49 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x48000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0xfff, 0xc2, 0x4, 0x1ff, 0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x2, 0x5, 0x99b, 0x66a80000, 'syz0\x00', 0x7fd}, 0x0, 0x10000003, 0x367, r1, 0x1, 0x7ff, 'syz0\x00', &(0x7f00000001c0)=['\x00'], 0x1, [], [0x4, 0x6, 0x9]}) pipe2(&(0x7f0000000000), 0x84000) 04:53:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:49 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x2}) 04:53:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x59) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, 0x0, 0x0) 04:53:49 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r0, 0x0, 0x0, 0x80800) geteuid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff080000000000000000000000000001e00000010000000000000a000000000000000000000000000000000000000000e5388c1bef81976804e28884554be6441f5426dcd1c2437e9b88707cec9407cc0f7331a6fc0a0920c79a796c4adbf78e4296204f8433d8b5ef5ff8a6d243a0146b3f9d9754610659acf54cf9fe7c4d2037c3135912fc34211e15161882d695f9439d5335ef8978e66c0c8a9645cb658b1c91534b06142c30b0ab1d09204e133fafcc24b7af98b42ffb1d3120b37d54c30ccde46ee4490384", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) 04:53:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, 0x0, 0x0) 04:53:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40200, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000001c0)={0x3}) setgid(r1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x2c, &(0x7f0000000080)={0x77359400}, 0x10) r4 = add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="1e480e3d7e85f93533b36e7f7c946e4b81737a850e217330991b2493c6cc9701afc601c9ba236d1ba1651fa5308832bd769cf56d73c8f612afdaf0a1555abcc6b10f989ac6ed60cdd454ee37be970829342b9acd38d0aa8f60d8a92bed7adbdd00386b1a184c5107b7ff1404979a8804f301cd394265475c3d44e83f8d0a89f2635748f17b9451e1db34aad571ca89d16f72d2e9229222076b73434cb9d1783ff6", 0xa1, 0xffffffffffffffff) connect$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, {0x400, 0x1, 0x2, 0x0, 0x1, 0x81}, 0x6}, 0xe) r5 = add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="a22ae482609512d5165f82fbb30147d2b569720df47acc8cfdfad6c2742f1dc470f5ab32c1673534ba90d9930472cf206357ae4124e070fee7ff79bd4a0124ebfd25675a8fa646c669dd7939c322d47e608b6f3d9ddda62a15965beb59cfcbc7732261026b5e7c23c4e62f45222420f33ab93c361e1f0b625e9b6987f559b235084ed2b0866f375d5631a0703ad59d40e77ff28c7af82849b4ef4d8e282179f44277376014974edc2dd0360926da6c2e29628a2ab29b2c7e6e0f55ceb099a524574a18d627e11afe1206df", 0xcb, 0xfffffffffffffff9) keyctl$link(0x8, r4, r5) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 04:53:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x59) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x64, &(0x7f0000000140)={0x0, 0x0, 0x7}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r0], 0x1) r3 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) io_uring_register$IORING_REGISTER_FILES(r1, 0x3, 0x0, 0x0) 04:53:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, 0x0, 0x0) 04:53:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x59) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/4096) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 04:53:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:50 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) r1 = dup2(r0, r0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x101000) write$P9_RGETATTR(r1, &(0x7f0000000280)={0xa0}, 0xa0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) 04:53:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf3f5, 0x1000010001}) mprotect(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x0) 04:53:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x59) close(r1) 04:53:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) r2 = openat$vimc2(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x2, @pix={0x1, 0x4, 0x3a75776f, 0x5, 0x7, 0x7, 0x5, 0x3f, 0x1, 0x7, 0x3, 0x5}}) recvmmsg(r1, &(0x7f0000000180), 0x400000000000370, 0x3b9ac9ff, &(0x7f0000000100)={0x77359400}) 04:53:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x59) close(r1) [ 259.201019][ T9864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.209330][ T9866] FAULT_INJECTION: forcing a failure. [ 259.209330][ T9866] name failslab, interval 1, probability 0, space 0, times 1 04:53:51 executing program 2: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3}}) io_setup(0x2, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) [ 259.300120][ T9866] CPU: 0 PID: 9866 Comm: syz-executor.4 Not tainted 5.2.0-rc5 #1 [ 259.307901][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.318149][ T9866] Call Trace: [ 259.321474][ T9866] dump_stack+0x172/0x1f0 [ 259.325845][ T9866] should_fail.cold+0xa/0x15 [ 259.330547][ T9866] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 259.336397][ T9866] ? ___might_sleep+0x163/0x280 [ 259.341276][ T9866] __should_failslab+0x121/0x190 [ 259.346237][ T9866] should_failslab+0x9/0x14 [ 259.350754][ T9866] kmem_cache_alloc_trace+0x2ce/0x750 [ 259.356158][ T9866] ? __fget+0x35a/0x550 [ 259.360367][ T9866] input_allocate_device+0x43/0x260 [ 259.365597][ T9866] uinput_write+0x8b5/0x1110 [ 259.370232][ T9866] ? uinput_dev_erase_effect+0x190/0x190 [ 259.375905][ T9866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.382394][ T9866] ? security_file_permission+0x8f/0x380 [ 259.388066][ T9866] __vfs_write+0x8a/0x110 [ 259.392430][ T9866] ? uinput_dev_erase_effect+0x190/0x190 [ 259.398098][ T9866] vfs_write+0x20c/0x580 [ 259.402390][ T9866] ksys_write+0x220/0x290 [ 259.406746][ T9866] ? __ia32_sys_read+0xb0/0xb0 [ 259.411536][ T9866] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.417040][ T9866] ? do_syscall_64+0x26/0x680 [ 259.421741][ T9866] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.427833][ T9866] ? do_syscall_64+0x26/0x680 [ 259.432544][ T9866] __x64_sys_write+0x73/0xb0 [ 259.437251][ T9866] do_syscall_64+0xfd/0x680 [ 259.441780][ T9866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.447693][ T9866] RIP: 0033:0x4592c9 [ 259.451606][ T9866] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.471406][ T9866] RSP: 002b:00007f8e6b100c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.479839][ T9866] RAX: ffffffffffffffda RBX: 00007f8e6b100c90 RCX: 00000000004592c9 [ 259.487821][ T9866] RDX: 000000000000045c RSI: 00000000200006c0 RDI: 0000000000000003 04:53:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x59) close(r1) 04:53:51 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000000f0000002400000000bd729b8b6dd6b0c08bd3be7b3babe8556eebf86a3c5b0ffbf9dbd1fc41d85afc6a7a08971a9a324fbaf08110f208a1664ebf3d7ad9f089afbac87ce01ff110849760ca2ea4b7aca0eabd1a75030be5dd9dac360c64fcce8d8c8f3a1f33048fb3a813ad7110867c4fba2c3216034b4ae6be5707d1c6429e8f32821539c5abacd397da32d9cd74de3ccc05a3e69689d354ca0cac4132844ee6033a"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdb}, 0x3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8a381, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0x100, 0x5, {0x50f, 0x36e}, {0x2, 0x3da}, @const={0x7ff, {0x3f, 0x8, 0x76, 0x1}}}) [ 259.495801][ T9866] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 259.503785][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e6b1016d4 [ 259.511763][ T9866] R13: 00000000004c937e R14: 00000000004e03d0 R15: 0000000000000004 04:53:51 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0xe, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a53a11f2"}, 0x0, 0x0, @offset, 0x4}) [ 259.897237][ T9899] FAULT_INJECTION: forcing a failure. [ 259.897237][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 259.912243][ T9899] CPU: 0 PID: 9899 Comm: syz-executor.4 Not tainted 5.2.0-rc5 #1 [ 259.920041][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.930112][ T9899] Call Trace: [ 259.933402][ T9899] dump_stack+0x172/0x1f0 [ 259.937732][ T9899] should_fail.cold+0xa/0x15 [ 259.942326][ T9899] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 259.948134][ T9899] ? ___might_sleep+0x163/0x280 [ 259.952977][ T9899] __should_failslab+0x121/0x190 [ 259.957913][ T9899] should_failslab+0x9/0x14 [ 259.962402][ T9899] __kmalloc_track_caller+0x2d5/0x740 [ 259.967761][ T9899] ? pointer+0x750/0x750 [ 259.971998][ T9899] ? __debug_object_init+0x190/0xc30 [ 259.977650][ T9899] ? kvasprintf_const+0x65/0x190 [ 259.982573][ T9899] kvasprintf+0xc8/0x170 [ 259.986814][ T9899] ? bust_spinlocks+0xe0/0xe0 [ 259.991523][ T9899] ? trace_hardirqs_on+0x67/0x220 [ 259.996542][ T9899] ? kasan_check_read+0x11/0x20 [ 260.001386][ T9899] kvasprintf_const+0x65/0x190 [ 260.006154][ T9899] kobject_set_name_vargs+0x5b/0x150 [ 260.011450][ T9899] dev_set_name+0xbb/0xf0 [ 260.015774][ T9899] ? device_initialize+0x440/0x440 [ 260.021008][ T9899] ? lockdep_init_map+0x1be/0x6d0 [ 260.026058][ T9899] ? init_timer_key+0x122/0x360 [ 260.031330][ T9899] ? input_allocate_device+0x1d0/0x260 [ 260.036870][ T9899] input_allocate_device+0x1f2/0x260 [ 260.042144][ T9899] uinput_write+0x8b5/0x1110 [ 260.046744][ T9899] ? uinput_dev_erase_effect+0x190/0x190 [ 260.052399][ T9899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.058659][ T9899] ? security_file_permission+0x8f/0x380 [ 260.064294][ T9899] __vfs_write+0x8a/0x110 [ 260.068614][ T9899] ? uinput_dev_erase_effect+0x190/0x190 [ 260.074234][ T9899] vfs_write+0x20c/0x580 [ 260.078474][ T9899] ksys_write+0x220/0x290 [ 260.082793][ T9899] ? __ia32_sys_read+0xb0/0xb0 [ 260.087545][ T9899] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.092993][ T9899] ? do_syscall_64+0x26/0x680 [ 260.097664][ T9899] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.104685][ T9899] ? do_syscall_64+0x26/0x680 [ 260.109356][ T9899] __x64_sys_write+0x73/0xb0 [ 260.113961][ T9899] do_syscall_64+0xfd/0x680 [ 260.118510][ T9899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.124404][ T9899] RIP: 0033:0x4592c9 [ 260.128283][ T9899] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.147882][ T9899] RSP: 002b:00007f8e6b100c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.156286][ T9899] RAX: ffffffffffffffda RBX: 00007f8e6b100c90 RCX: 00000000004592c9 [ 260.164249][ T9899] RDX: 000000000000045c RSI: 00000000200006c0 RDI: 0000000000000003 [ 260.172214][ T9899] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 260.180171][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e6b1016d4 [ 260.188130][ T9899] R13: 00000000004c937e R14: 00000000004e03d0 R15: 0000000000000004 04:53:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$adsp(&(0x7f0000001440)='/dev/adsp#\x00', 0x35, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000001480)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="84acf694aac20666c839e982c2db8ff971d7e682e28811d4eb4e4367a242fefff5f6fa8cd979", 0x26}, {&(0x7f00000000c0)="917c707016b84a55df7cd54dc3d78872dafdf1a9a4d5de196a336de5f3f2543580d1d91863916656f9620b48514d768fdb8154d1807f0425d2", 0x39}, {&(0x7f0000000100)="64c4b03822a2deb8a3b389e7f9e2cc273e774d4cc2f29e7ecd78d7902a8df2d16271ce2c3fcb85bb7927f85b69885c35a57ac9a626ea25546fcd00f4b6", 0x3d}, {&(0x7f0000000140)="4c645df3007da2b38199fd48bbd095bd75b38c4fd65ef151abd3f811a1ad09f3db2a37942662bcadaab14d55b4ab82014ce60016bf2f87a69b70e90550fead77684182abf5603df26e05b71bc4e4b1b0ae99ffd92a0524224e21624364497940f483c181e02a316f0af2cfb2f3ea937250ec1cfd242542528da3031bd3d951e15eacd6ba1a94658cc33539b9", 0x8c}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="99200fbd4650397145dde142fac62edae1ea38898e823e2d763a04edc5e33393b26c43642ea622f1ee19cabec539378a00898ad657452dfca7b505be336021eb6f779fcae255e60a0c99a13f7e937e05703fc6ace744df8be97d47a05a860d2c2d6f74a0bc79f42b320741a7b495", 0x6e}, {&(0x7f0000000280)="6cb2a2d166186aba23c40d543b19a9bffe9b21142f986d332771cd607ac61eb5269f435738168b09fb964740add2c9d16a21523e6e3eac315ba6e63f2ed34097ffda57bf159a5b14d51a64ff7cb1adfdb99d71bedcc3acfa53881183f298567d862678e5ed23022fc917c663c7fb190f359be628cb66c18d2c0f270b7057eaf82d30a3ba2a502f30fc87724739f6fd674b05c126c572194436ccde6fe03b75dca0ebe9747c768e522e1e3f7b2fc69d178ac761ed8e3a401aea793e3795076087dd0df7d525d95315e69e37d2fc9c0056323e5834e27ed8b8a5530e31deceeb783ef67718fbda", 0xe6}], 0x7) r2 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001100090468fe0720000000000700ff3f03000000450001070000001419001a001500000040000054369e00"/57, 0x39}], 0x1) 04:53:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x7, 0x2, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x42) sendto(r0, &(0x7f00000001c0)="8aa2e6f00a2e8a13cb432827f9915694d6bde7fa4fa9ccda4f20f020657ee01d4fc354f4deb5ded7e5a106cbf651e7792d9b264e725d0edf014fe8f2e0aca5853225cacc5a0e3f2060ae3741bb0dd6e8431ca0bda91a6769b504872e3f9c99d315f89746bce78ca2bd96d729770db6d5b583801e86a9194b1d1d2d31d4a5d754b1250f28247a79ed430db12784d7a31cc80691d5d6955ee7b3e0435941d1f74036fe99c427d44756b7a40905000000294f302a1beeb1a10a2e3a3524eeb2f76df42ef527cd00e6b233740d396df6bf2f66", 0xd1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000009c0)="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", 0x341, 0x0, 0x0, 0x0) 04:53:52 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) futex(&(0x7f0000a52000), 0x3, 0x0, 0x0, &(0x7f0000000000), 0x1f000000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x1f, 0xbe, &(0x7f0000000080)="fbb7c7044d332be1427472040b254e36bb7e6947bee196c9ba5e312adec71c02ff89567e33c5ffecd5ab61ce2bd5960bca3763d4e3901571975e9b3b9b2026742f4d8c055c1563c52e3e894d7386c953f66a8435b1d1e954b7f93e757ec3f63c11147c30d70eb472f801f8d0ebe6d58caac4b0baa2d5ae2903b906405410b9fc3c7655cf696dcff4621ef78599d36e8c50436e95064b90f8afd53e73ed52d2473342a5e40df902e3829c4734ad74e81bbbf00ab324154dc6160580738856"}) 04:53:52 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) [ 260.428179][ T9909] FAULT_INJECTION: forcing a failure. [ 260.428179][ T9909] name failslab, interval 1, probability 0, space 0, times 0 [ 260.452947][ T9909] CPU: 0 PID: 9909 Comm: syz-executor.4 Not tainted 5.2.0-rc5 #1 [ 260.460734][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.470817][ T9909] Call Trace: [ 260.470851][ T9909] dump_stack+0x172/0x1f0 [ 260.470877][ T9909] should_fail.cold+0xa/0x15 [ 260.470897][ T9909] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 260.470918][ T9909] ? ___might_sleep+0x163/0x280 [ 260.470945][ T9909] __should_failslab+0x121/0x190 [ 260.470973][ T9909] should_failslab+0x9/0x14 [ 260.470988][ T9909] __kmalloc_track_caller+0x2d5/0x740 [ 260.471011][ T9909] ? init_timer_key+0x122/0x360 [ 260.499049][ T9909] ? uinput_write+0x20a/0x1110 [ 260.499075][ T9909] memdup_user+0x26/0xb0 [ 260.499090][ T9909] uinput_write+0x20a/0x1110 [ 260.499114][ T9909] ? uinput_dev_erase_effect+0x190/0x190 [ 260.522915][ T9909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.522936][ T9909] ? security_file_permission+0x8f/0x380 [ 260.522956][ T9909] __vfs_write+0x8a/0x110 [ 260.539404][ T9909] ? uinput_dev_erase_effect+0x190/0x190 [ 260.539426][ T9909] vfs_write+0x20c/0x580 [ 260.539445][ T9909] ksys_write+0x220/0x290 [ 260.539466][ T9909] ? __ia32_sys_read+0xb0/0xb0 [ 260.539483][ T9909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.563843][ T9909] ? do_syscall_64+0x26/0x680 [ 260.563862][ T9909] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.563877][ T9909] ? do_syscall_64+0x26/0x680 [ 260.563898][ T9909] __x64_sys_write+0x73/0xb0 [ 260.563915][ T9909] do_syscall_64+0xfd/0x680 [ 260.563933][ T9909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.563951][ T9909] RIP: 0033:0x4592c9 [ 260.574169][ T9909] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:53:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x3f, @empty, 0x2}, {0xa, 0x4e20, 0x0, @remote, 0x27cd}, 0x0, [0xf4c, 0x7, 0x6, 0x1000, 0x6, 0x0, 0x7, 0x7fff]}, 0x5c) close(r1) 04:53:52 executing program 2: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040)=0x7, 0x4) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 04:53:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x798}], 0x1}], 0x1, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x2000008f) r4 = dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x400000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0xfffffffffffffffc}, 0x8) [ 260.574178][ T9909] RSP: 002b:00007f8e6b100c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.574192][ T9909] RAX: ffffffffffffffda RBX: 00007f8e6b100c90 RCX: 00000000004592c9 [ 260.574201][ T9909] RDX: 000000000000045c RSI: 00000000200006c0 RDI: 0000000000000003 [ 260.574218][ T9909] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 260.574227][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e6b1016d4 [ 260.574236][ T9909] R13: 00000000004c937e R14: 00000000004e03d0 R15: 0000000000000004 04:53:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) fadvise64(r1, 0x0, 0xe8, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) readlink(0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(r2, 0x0, 0xfffffffdfffffffc) umount2(&(0x7f0000000600)='./file0\x00', 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 04:53:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:52 executing program 4 (fault-call:2 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:53 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f00000035c0)={0x7, @raw_data="15a22ce53144cd66d31ee6bc76f1ce04debb316e520a7f35e1cc92c9cf5c22012f089fb7d98ccdf453e7ed8a58c9fd09540c5725210fd51a839a42c6211e709ebb5fc5c90da22a6bd64914ad1775694a50279eadbad17b6fd41a93a764ea079c1de942c847f8335bfe04cdc79c4a20f071b6cca89290600a3bb545686dafee358e2b86dfc7794ff39c6e3f3155a2ccb05171bb1b0751d814c5f444996d2d24158dd5b85d35831ed08141c6582c8c6a9ce3680f732d9357a9bce308ade6d9c13df9e093aa0a1f37d5"}) 04:53:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x1) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) r4 = getpid() move_pages(r4, 0xfef8, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:53:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 04:53:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x02\x00'}, 0x45c) 04:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2c}, 0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x1f}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000180)) 04:53:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2c}, 0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x1f}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000180)) 04:53:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x03\x00'}, 0x45c) 04:53:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffa}, &(0x7f0000000080), &(0x7f0000000180)={r1, r2+30000000}, 0x8) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 04:53:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x04\x00'}, 0x45c) 04:53:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x05\x00'}, 0x45c) 04:53:54 executing program 1: r0 = gettid() setpriority(0x1, r0, 0x0) r1 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="e721732ac5c895e4ec034d908834e9a283351eb3f74f64ba4cbae5de400f208c4814e2db42f55ceadb71be0ec49910a42ac0a81ac531b78a733ca14e9a261c065d61ed0ce4ce", 0x46, 0xfffffffffffffffe) r3 = add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r2, r3}, &(0x7f0000000280)=""/154, 0x9a, &(0x7f0000000480)={&(0x7f0000000340)={'rmd160-generic\x00'}, &(0x7f0000000380)="587d4717b6fff835f5a7cc026976e9e05c2820f9bd123e4cac9d70027c7b87a9fc3844fbb6cef34fbb71f1f18330935429a5fd4fc645a48232d92495fc31b01e599a09e075f624d2d9c0acc76fb94fb75f14b5b1df9b00f847f869daef59378b2c1e2b5759bab3612909f77170ba3ee1c04e8b5b73dea86143f895315569d165e56b53e79cb7278ab62d9d7e50eaa244eb6b34b358c8c9204ad32a68c8bff9339e605b899d8fecd8472ababe001d4ebaff7d49008154da74201335b669d229529bc6c1f6425683028326b6af17f97857f4bc62dfc4da5e714a5796da57", 0xdd}) 04:53:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x06\x00'}, 0x45c) 04:53:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:54 executing program 1: setrlimit(0x7, &(0x7f0000000000)) r0 = userfaultfd(0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3a000000060000000000000000000000060000000000000005000000000000000f000000000000006367726f755e7031ea6f786e65743100a69018b8664597363548ccf785782d58166c85d2920aa17b7808cffcd3be8b10da046b55ccc3846a0d16f401a3bdf4d24b3e7e4ae4cbd8b6089dec5b1c46165007b152f89e2ca3a63ae1c2b41ac749b10a04dc004cebf1ccfa7bb2353f5e9ed5d9b58499b905dae22c3aa7e192174a35f39640c0e4cf27f886528a6f271b76f8e245804942f07c"], 0x38) 04:53:54 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe9}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f0000000300)=""/67, 0xd6}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000380)}, {&(0x7f0000001500)=""/54, 0x36}, {&(0x7f0000001540)=""/162, 0xa2}], 0xffffffffffffff0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0xffff, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000001600)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000001680)={r2, &(0x7f0000001780)=""/153}) 04:53:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\a\x00'}, 0x45c) [ 264.356943][ T405] device bridge_slave_1 left promiscuous mode [ 264.363856][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.427980][ T405] device bridge_slave_0 left promiscuous mode [ 264.434664][ T405] bridge0: port 1(bridge_slave_0) entered disabled state 04:53:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x8c}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) 04:53:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:53:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\b\x00'}, 0x45c) 04:53:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @link_local}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3051000033000108006dea1d84adb589d27167ab1f000000000000008000001c82d6e4713071d3d01a97ac677cd157d997bd2cb463500c7d0e31f9302fb852559a0ab05106a3c7dafca14b748f87d48400d55dccdded8f5e7dcbf7811eb6296a7517ddc0c499774fa95f32260f87c82c2bd08fd9677e52e7cd9178d0289ce431be4cf06fed3e8b1863c5d300be6fa3efb5ea055ddb4097b3c5334bbeb377e9d68ba7c342d821000000000000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d00002287871d00000808001b0000000000"], 0x3cb}}, 0x0) 04:53:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:53:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x03\x00'}, 0x45c) 04:53:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x05\x00'}, 0x45c) 04:53:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x06\x00'}, 0x45c) [ 266.776594][ T405] device hsr_slave_1 left promiscuous mode [ 266.818131][ T405] device hsr_slave_0 left promiscuous mode [ 266.878622][ T405] team0 (unregistering): Port device team_slave_1 removed [ 266.892565][ T405] team0 (unregistering): Port device team_slave_0 removed [ 266.907254][ T405] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 266.979129][ T405] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 267.102626][ T405] bond0 (unregistering): Released all slaves [ 267.234734][T10025] IPVS: ftp: loaded support on port[0] = 21 [ 267.517686][T10025] chnl_net:caif_netlink_parms(): no params data found [ 267.562072][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.570562][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.579849][T10025] device bridge_slave_0 entered promiscuous mode [ 267.588844][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.596526][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.605073][T10025] device bridge_slave_1 entered promiscuous mode [ 267.629630][T10025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 267.640870][T10025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 267.666293][T10025] team0: Port device team_slave_0 added [ 267.676851][T10025] team0: Port device team_slave_1 added [ 267.756901][T10025] device hsr_slave_0 entered promiscuous mode [ 267.809789][T10025] device hsr_slave_1 entered promiscuous mode [ 267.881962][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.889164][T10025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.896693][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.903834][T10025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.985551][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.009801][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.025774][ T9017] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.041080][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.063414][T10025] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.083326][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.099470][ T9017] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.107876][ T9017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.141801][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.151564][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.158721][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.191908][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.202914][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.225821][T10025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.244916][T10025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.258974][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.267820][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.278048][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.289565][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.312012][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0 04:54:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) close(r1) 04:54:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\a\x00'}, 0x45c) 04:54:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xe0, r3, 0x24, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x63dd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 04:54:00 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0104307, &(0x7f0000000080)=0x8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) 04:54:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:00 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "201b688611ddd0d2"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000fb07000000000000000040000000000000005555662c"], 0x1}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x6, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "4b2b52e52d89a9e0"}}, 0x48}}, 0x0) 04:54:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00@\x00'}, 0x45c) 04:54:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) close(r1) 04:54:00 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) syz_open_dev$evdev(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000180)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 04:54:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) close(r1) 04:54:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x87`\x00'}, 0x45c) 04:54:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:00 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffd38d9b0c0001000800100000000500"], 0x1}}, 0x0) 04:54:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:01 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 04:54:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x01\x00'}, 0x45c) 04:54:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:01 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1, 0x3, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a0440a32e9cd1c14"}}, 0x48}}, 0x0) 04:54:01 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x40605346, &(0x7f0000000000)) 04:54:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x02\x00'}, 0x45c) 04:54:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 04:54:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:02 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="dfcae88a04b4", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x46, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00c48) 04:54:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000010c0)='=', 0x0}, 0x28) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 04:54:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x03\x00'}, 0x45c) 04:54:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:02 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x04\x00'}, 0x45c) 04:54:02 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0x0) r2 = gettid() dup3(r1, r0, 0x0) timer_create(0x0, 0x0, 0x0) tkill(r2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) rt_sigpending(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) 04:54:02 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:03 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:03 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x05\x00'}, 0x45c) 04:54:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0x0) r2 = gettid() dup3(r1, r0, 0x0) timer_create(0x0, 0x0, 0x0) tkill(r2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) rt_sigpending(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) 04:54:03 executing program 2: clone(0x8000000000441fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:54:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x404c534a, &(0x7f0000000000)) 04:54:03 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:03 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0x0) r2 = gettid() dup3(r1, r0, 0x0) timer_create(0x0, 0x0, 0x0) tkill(r2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) rt_sigpending(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) 04:54:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x06\x00'}, 0x45c) 04:54:03 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:04 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x404c534a, &(0x7f0000000000)) 04:54:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\a\x00'}, 0x45c) 04:54:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0365755550000, 0x48, 0x38, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xfffffffffffffdf6, 0x0, 0x0}) 04:54:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 272.708495][T10264] binder: 10261:10264 ioctl c0306201 20000440 returned -14 04:54:04 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\b\x00'}, 0x45c) 04:54:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) [ 272.758268][T10270] binder: 10261:10270 ioctl c0306201 20000440 returned -14 04:54:04 executing program 1: 04:54:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:05 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 04:54:05 executing program 1: 04:54:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00@\x00'}, 0x45c) 04:54:05 executing program 1: 04:54:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:05 executing program 2: 04:54:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00`\x87\x00'}, 0x45c) 04:54:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:06 executing program 1: 04:54:06 executing program 2: 04:54:06 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x7f\xff\xff\xff\x00'}, 0x45c) 04:54:06 executing program 1: 04:54:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:06 executing program 2: 04:54:06 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\xff\xff\xff\xff\x87`\x00'}, 0x45c) 04:54:06 executing program 1: 04:54:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:07 executing program 1: 04:54:07 executing program 2: 04:54:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, 0x45c) 04:54:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:07 executing program 2: 04:54:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x45c) 04:54:07 executing program 1: 04:54:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:07 executing program 2: 04:54:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x45c) 04:54:08 executing program 1: 04:54:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:08 executing program 2: 04:54:08 executing program 2: 04:54:08 executing program 1: 04:54:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:54:08 executing program 1: 04:54:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:09 executing program 2: 04:54:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:54:09 executing program 1: 04:54:09 executing program 1: 04:54:09 executing program 2: 04:54:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:54:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:09 executing program 2: 04:54:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89e7, &(0x7f0000000140)) 04:54:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x45c) 04:54:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:54:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/209, 0xd1}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffec8, 0x0, 0x0, 0x800e00539) shutdown(r1, 0x0) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000040)=""/154, 0x9a}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r2, 0x0) 04:54:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x45c) 04:54:10 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000004c0)="c4c90474f19ae56c44db54d8ac685c464c88cc682c12ed6ce0f56d90c1302d3ab4ff36a91b413f040cb1dec071ee2cb7af6e63d98c5a56b34421d252de59a861e30fd1410ba80eddd6fd4bb9238100178d8d066c5b898957bf5e001229283d0a98651bc911d20c8db8fe53f41924101d6148811578af5597ddfeb96d3d964cfb5ae9aa5671fd118cd73fff6ac967e49d42fca1b8f8458f886f9657f7c2c3100c29182c9ed04f359faab951b90026491eb6de9aa67acfa6dc5986bdd20685e508e45b61ad672de0d57158f4184d9673df445bd29ea7ea71f75d6b9e17fd1ac95e9ba64a075325432671c1b09ff8c445d527e6b6d4f2bb68c9c576b16bed2153a873ab0df27a7c09e6743e1028f461b85fc8a7dc99574ba1b582de215e43e5859f1892251b9fdbfa563615ed13c517e4ea234a31cf58e067b23bfeaf559a321b1fa9319b6fbaf74c0fb50a177c3126f8115c04ac21da741e16d9fbd400e0e660bba795d5d37c393dac1b918e12c25311b9a10484d3ca31e5303d2d67102fa403831be49e51005fdad95cb6da88f47fd22acf09220acede0afe0d2a01bc4a373d53946559f11d03823e58bf87669b0ea253da0ea4c6f5b483474d4d20580edc955c0c0a01690e01576084012b7a12716508e2d641d93cebaf26468b7a3d4e2630d72d29094e6b7ac502322f6211869b092fec9be80cc40c3fc88c80920a2821735b52710f9b4e8f762ac198aaf72ba31c0d0b7e82e3685b7a69b3eb9b1455bb278c9feabaee276d451213fcdcd8d8e870d10ccd05672a73d099f7ccb309207839d6dff5f6376255904f45134231ec7ac75af16e1acfdf486562e8303665c09566bddb60799ebbbfe163f22ed381683d2dac4473fd01e66aa61ea188214f43f08dc6b8d7ad9f150936f1e11cedd8ff5c5cb3f17ebd2aab57131efb2e08b9e29de0b539a14b2db3dcbbe1fb58e4253e4a4ecbe19bd1b57ba75a419c58d1b18fd8193ab8f5d7b59901413b45a0413a7c1ffaf7a58d207a186499345e3d6f69105f6dbff28d2db2d64e78866545f643a532c373d4cfe10294fa0234988a2625d496a73348183ab85cf9abe982de39923071402a39ec18896bf56bd0b17e6ab07c10ac01686c2be9114930ecc1a804e8abc89a6ce8718962d89965a27db113d9f2a1470c7856d4588c6d9a415ba86caccd654d61bd96c9e8f2cb1e56c6f77e2f5240233b05ff61954ce92ed9a0f9592bc778f42e64b7fad0e95d756441138c1767eddd453e6a8f9ddde1c1dd338f9be76728dab110eaa605807dbc71f09172880b1a7c05e48ded7821f767c82913ab39dfdaaf3db9e6c225a2d2f295dcd058c50b9e06f660b66f4eeeb85375d32a6a9405a091ba3e3cc9a1e77e327f68adb171de80a215db44df21d9f23ef6ea39c664e8e2893cc91498fb90e14c85b16702407be28657d92dc1fe0516395bf420f0c13477e98141ecde2f6ddf40f836a236486fc6ce4c353a56268bc255f0d2ddf87d22e2198fd7a94667d5c16f76783ce6520edb9fc895f1c0f4dc9d9b98d1e0c29974fbd033a860639865cb3527c2edb294ce41c19fd3cc31187869f6e0ee70efa9d36f4d2eb988e3c9f0c752e2c43c0eaee6ef0494191fa5213e2e6f88611dec6400d7bfe91243d1ba10ad7ab8a9e798bc5fa1feb9a60721095a10cd018433c25e03d2756d74fe5ccdc0865a50f960796bce45978a9d32847ee48435e4c3b051c003384b4a695eb855b995d6f5fdf57aad8492664a91ebdcdeaa1d70139c5685b0ce3b339494996e8a78ec113925f3f2a801c998c3de14424bd74cc348dd968c408bcaad67f3aae23ca65f58d5b3c6d27f9a4eb1a27718a27831af1a869978dcb26769be74da56b46e8b25f6b42e414609dc8fa20b1c045c1db64d47d5bc6e808c85d24f749877f354efdfd23422f80697301c2e184ce219bf9210b5b805fb7fe3060e6bfa8beb569c0ee339a75e58216cba8070b69be471f41320b3148bc824ba77815bec06a3817ebba3d1ed3975f7de0647e33740e79c5d27abefd56015946622ac02bc4f70f014d5796693f90363159e260d7b6cd593a9b7ef60fb49528b41e4c374fb4298036ddc5ae876f850c8b8aee07e89b5f9fb95377a720a8499dce1d55e43773438f15c5c668e61a50ede91cb4a41172182118f82dfb53a4dd02dd183b10651a9a139e51dcae29f18365c98df91c00e1e62f9d1f4f9d52cff1e5ad7202c08f0de40ba89f6632f83334aeabb32097f99b8b9778e61c91be1edf4a52eec66cc6b20b4ffedfe02d2f93cbfaefc6f0b2a28a15975f96a283ac65512ba3b0f1a9e6f052b12879fd309ec5a3b43efa9d45ba135e212e15f63d40c8457d6444ed30f4860e14c46b582972c50711b3395174af1dec6985d1c563ba2cefc0e6bd9d77a8b98a38001295dd2b1c213aa63a7e34bd6888188687dcb595504e8ac3684ec55c6034f9f837009d1243758017130e8578d1be8ba429c4be24994e4b5c8906dca91cd86b30c43b2331bf21d563b82d417e97e56424c6d29681394676ce16340b7b5167e4fd216dc30ae9ac63cfc171a3ba4842d201e6953aea6506af75fd12adc2a6dd7b8b366cbeed32179cbdf6986769adcba1f65a66777cbd9b9fbb8f7659e13332644f07b720340d5e09da7f88429aa806200d73ac14bb08fc9ff3ac61c731dd383951c58c3feed8c27925489c1bc1588a7a34337b959a36537edaa58674935f7ea509e065618024dcb61b3d4f0df2b4dbdff0294fd58539ad1fea005e48be268d21a883cee8a5d9bd5943f8808f0c76eb2631312df15d7ad42f6b07213ded7c2de1e964cb773b8ae265467b7f5a2f0ab7544b2a4241d5ced5b1278f38cd55e319c6675e56d391cbe8bc2bc0f74a50a796ae3dbb732889430868378e7859167596f6a17c5d4bd6216f77d0b0871bc248baa2806c176d87a00250820c08b167e3c889bfc7952c9a7f71922a54050b49124696def2dd8d6736cfe5ba13dadfeabd3cd177bcc35c91cd9b74ac702387dc09545b6c7d030ad501102b22058fed5d24cba481da11d6163e6eb61dfcb872b9280cc548a152deffd0be7ffb28092b19b5642309aa7663c8dee4ff320b4d70101ef6e78b167223706f7f2fa4d19a05cffe04daafe0566f6941349cd6dac300c2c3bdecb85b077b4e0705510a35a2678f5f2803902e61ccb7013f031a085cdb513b9d4c07dfa20c3f810846aa33ac63e03d2f8bcf9353b506ece098fa88f3d7db324c9fa82cb210f0818cdf79c938a003eadf96c0d388ae44ba7dbea2b5c335b19e9e2d7e8e31e29c14ac32e01f75d38bf742a2e9910939b0fd20197380918193166f7ca37485b9c5e8cace1b2130ae18217d776b0a261f4c890c339de7655977c01161985a435495d844699ae08baee943fe518cca300df48174dfec93b94a25aff6cd9b27050c3b2cede4b3309a8b19969387fbb5604001177d7c66939f72d8d5675a7d7011f311646e907ea8652ea3528345ef4246b620de6959af2d1424bdd62e024e5c05117865d1383948a1f4ddfb0d1fa2449af64400803aa9a64173c009c", 0x9e1, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r2, 0x47}, 0x0, &(0x7f00000002c0)="41502e8ee98777c7e5d8b02eee091e230e4e202c248607d293f8aeae28fcd21a588e35981165cd94c32149dedc0e1988a16a95a80cfb54f87cec70607bd3933b82783ee21657a8", 0x0) eventfd2(0x64, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xcf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x6, 0x800) 04:54:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x4) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x45c) 04:54:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f0000000040)=""/54, 0x36) 04:54:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7be070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x408c00, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000080)=0x1ab) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000100)={0x1, 0x6, 0x80, 0x40, 0x80000000, 0x1f}) 04:54:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}, 0x45c) 04:54:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000640)=0x5, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400002, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 04:54:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00`\x87\xff\xff\xff\xff\x00'}, 0x45c) 04:54:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:12 executing program 2: r0 = eventfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000980)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 04:54:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x02\x00'}, 0x45c) 04:54:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3a2, 0x8, 0x1, 0xd, 0x100000000}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x8}, 0x8) 04:54:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) accept4$alg(r1, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="bf4255f1df6cab94c9e14e55da3d4cb2b251386e6816e736ce47052f5874015bd778eeb55abce8ccef681f9938881e67", 0x30) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) dup3(r0, r1, 0x0) 04:54:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x03\x00'}, 0x45c) 04:54:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) close(r1) 04:54:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) close(r1) 04:54:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x04\x00'}, 0x45c) 04:54:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) close(r1) 04:54:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x05\x00'}, 0x45c) 04:54:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101001, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0xfbec, 0x8, 0x4, 0xfffffffffffff800, 0x100}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @loopback}}}, 0x0) getpgid(0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 04:54:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x06\x00'}, 0x45c) 04:54:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x7f}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x9}, &(0x7f0000000300)=0x8) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000140)=""/253) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x1) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000000c0)=0x8) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000340)) 04:54:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 283.196222][T10660] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:54:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, &(0x7f0000000180)="0120b7fd3f6ccea38db801fa4f54f8fd462039344b3359cc940f1740c04a4adf38b2dcb3698fe8e6f428298f1ba51e0220359f00558ee83e4510580e0f1b208a3e5b7d3c6bd64772ba7f61e9c8c9753d728b9bbf7bce60831d7e0619d791d05ecbab6ee5d84c7e795d901a2a93e14a17706c56ddfd3bef5490b335725abd7fefafad79b9973255fb34cc6d7d9fb1e3e66c6d078a853a37e13752cf881bbbd607e37263aff293503947113a39954eb3e313469079a30f212b7421492cb89f41e5fc88b63db8f1499c471cbf", 0xcb, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\a\x00'}, 0x45c) 04:54:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c001040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x84\x00'}, &(0x7f0000000580)=0x44) 04:54:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\b\x00'}, 0x45c) 04:54:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:15 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x71) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='\x00', r0}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000189877649000c61ac41a407bc3028ca219207a0c3ffbcfffd609004a"], 0x38}}, 0x0) 04:54:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x03\x00'}, 0x45c) 04:54:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2) ioctl(r0, 0x3ff, &(0x7f00000000c0)="7d4401000000cfe43be070") r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2400, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000080)={0x4c}) socket$caif_seqpacket(0x25, 0x5, 0x3) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) 04:54:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x05\x00'}, 0x45c) 04:54:16 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000008c0)) accept4$inet6(r0, 0x0, &(0x7f0000000900), 0x0) fsync(r0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x300) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000780)="cfffe81cce072513398ff804a769a309d0983291c5f48c7bc11ae587fb6b1dfae8e5aefa61fef6dcf9410a25bd60c1885608dd875ef3898f7664de776c2ae58d1376735fbebb6376ae09b69f76748dea00fb990ce965357461b231a9f3900ba52ca911d62842639c1f8d32e7b9375faeff047cdd3ed43697510b11a487cb76f0d73d66737554b541f57ed91a81cab7cb51d5df8283c7a3f1fac5c1403172ce26e9e036c31218af793a413a300af0cbd85233ba1e932f9c0409166b9b0c9578574c69a0459dd7ebb8aae62db730f4c948494ce03579983bbf3db17d0acd933075337aabb9144271676e0a4a5edce8") ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000340)={"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"}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000740)=0x63, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000180)={0x8000, 0x80000001}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000240)="40bd3114bccd9f07f49b66bcf15df41bf945394108d307ed0cd02ea0f5db1ccfd1ca33b4d0d149d47e6007b7d3c67b1e408bde135fdc1af0b4acd04e5e4d38a70f2ec2f3b19e31a5d58074ea7556b99c5483ba2f81a0976315eb161eb1cb8318d80380ebcc2132041fe411e3e94de089a168c740fe989f0d0295937519ec0356dda086e6e2ff47639cbb7173f10ed32fa5a0b6404a6758aac1cd185c17770d6eb947e69648e0bc2cfc5346d37e18721ec236423ab56227d1bafec5a84d0b61dddb866a48e8011cc213ad4606a4f833b1395ec81b05811a762c94eaf81d197a3d8efa711e8814d8141af243fa6a523688cbef08aee12681", &(0x7f00000000c0)=""/122}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x2}, {0x8}}}]}}]}, 0x58}}, 0x0) 04:54:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 285.031456][T10743] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 04:54:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x06\x00'}, 0x45c) 04:54:17 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, 0x0, 0x0) close(r1) 04:54:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast2, 0x0, 0x0, 'rr\x00'}, 0x2c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x101, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 04:54:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r1) r3 = geteuid() setreuid(r2, r1) mknod(&(0x7f00000005c0)='./bus\x00', 0x8008, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000000c0)=@v2, 0x14, 0x0) setreuid(r3, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x3, 0x800) sendmsg$nfc_llcp(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x27, 0x1, 0x1, 0x7, 0x1, 0xc0000000000000, "444749e8c49d2ad0231b3e0214aeb0500276fcfa739fae64691a95e91b2aaeaf1c2d7a6e00f39d5364426fe5230bf5972c4a584e8fe7dd4827c766e7cdb134", 0x12}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000480)="720c415f10dafd3a20c10a25473b272feda3039671f87592343dd53461a9d320fa1937c68e80a80c60b1ed85cadddfc3109965ef9acedb69163e301ab1ac2af115378792b7df0570265d5766c9", 0x4d}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="6000000000000000170100007c1b000092cf983d74fa35e93513c7bf308a9b4070a447ea9fbfd94628a114feedda5a4d3d11d2806c9ac79fb8a73c80f6c5886108c408b84683010d93d852f7d00ba5a81a10c879a711a7e2812568828c00"], 0x60, 0x4000}, 0x2000c000) creat(&(0x7f0000000080)='./bus\x00', 0x20) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 04:54:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, 0x0, 0x0) close(r1) 04:54:17 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\a\x00'}, 0x45c) 04:54:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xfffffffffffffffd, 0x2) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESOCT=r0], 0x19) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000300)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0xfffffffffffffee9}], 0x1000014e) r3 = dup(r1) getpid() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000100)={0x5, 0x100, 0x0, 0x0, 0x0, [], [], [], 0x7, 0x10000}) 04:54:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, 0x0, 0x0) close(r1) 04:54:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00@\x00'}, 0x45c) 04:54:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:54:17 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x9, 0x1000, 0xfff}) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x188) 04:54:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, 0x0, 0x0) close(r1) 04:54:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x87`\x00'}, 0x45c) 04:54:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:54:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, 0x0, 0x0) close(r1) 04:54:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x01\x00'}, 0x45c) 04:54:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, 0x0, 0x0) close(r1) 04:54:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:54:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x02\x00'}, 0x45c) 04:54:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:54:28 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='&\x00', 0x2) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="2e0000001d00810ee00f80ecdb4cb9f207c804a00d00000009003ffb0a0002000e0ada1b40d805000600c534c76a", 0x2e}], 0x1}, 0x0) 04:54:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:28 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008916, &(0x7f00000000c0)) sync_file_range(r1, 0x8001, 0x1c0000000, 0x7) ptrace$setopts(0x4206, r0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r0, 0x30) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x40000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 04:54:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x03\x00'}, 0x45c) 04:54:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:28 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x51, 0x80) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x100016) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 04:54:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:54:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000200)={0x2, 0x8, 0xd35, 'queue1\x00', 0x8}) setsockopt$inet_tcp_int(r0, 0x6, 0x100010000000013, &(0x7f0000d06000)=0x59, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='vxcan1\x00', 0x3f6) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf2, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000003c0)={r3, 0x5}, 0x8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000002c0)={0x3, 0x8, 0x6}) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000140)=0x7) sendmsg$nfc_llcp(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200), 0x1000000000000116}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'gretap0\x00', 0x3}, 0x18) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000400)) 04:54:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:54:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:54:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:54:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:54:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\a\x00'}, 0x45c) 04:54:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\b\x00'}, 0x45c) 04:54:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40000, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x7ff, 0x3f, "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", 0x17, 0x3, 0x3, 0xca, 0x5, 0x9, 0x9, 0x1}, r1}}, 0x128) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001140)={0x41}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0xfffffffffffffdf3) dup2(r3, r2) r4 = geteuid() mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x80000, &(0x7f00000000c0)={[{@metacopy_on='metacopy=on'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@xino_on='xino=on'}, {@nfs_export_on='nfs_export=on'}], [{@appraise='appraise'}, {@dont_hash='dont_hash'}, {@uid_gt={'uid>', r4}}]}) 04:54:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:54:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00@\x00'}, 0x45c) 04:54:48 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setrlimit(0x8, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x101, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000006c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x5, &(0x7f0000000440)=[{&(0x7f0000000100)="9003eb631ac0f3c9cca2f33337b1c5b7ed7af4ab5182f906a74b3521528bcf4deb3f78246d799ee3e43c8f9355f9e3b93e35e2fe7bf41cd2ae86fffb42fb6242ce9a941fa6cf50c74d384117b2a83e449576830e74016405617f51a839fde2dcf0e4aab77c08d3f802be77f346a4dc0f5de183db1cc2d362a1ca45252e16ea3d264cd19c5ae739e719fb6994b5c3e744d2", 0x91, 0x4}, {&(0x7f00000001c0)="0843eb25a89b1ba19bea2209e1cd9253e6936fd9b8d4228c3874c11023c8cc4e330ef5a3d75f06c831f50ce268872829d802ebf72a1b4e7d65665513504216a9e1ffe5931fa6a3653fe7ffef2492c36136c2b33dd4432c5b81822fc86caa5d944bcdb17f5d16a7522949b511cffb31c9e0453b2514e0610d67c992b8f49843ef58b3d8e807c66ff3de79a6cee7f1026c4dad9a19f30aaa3f036e50f1a937d56bdf7c778096dc5fee549b02cffd6fa8cb23256372494f4f", 0xb7, 0x6b84eb65}, {&(0x7f0000000280)="f693dbec6e65a924a02ab4829639216678c173d9166cc106710b0ed99d7300fc2c3b8bc9c04aff0f97c4e7505cdfae1ff15a42ff4675db1f8693b5c581a39e2e80cfb939469b2248b41a0b5a7b80589e4d91a1b317ba3da3d93d9cd97604b32b835508138590800a8375bd151694947638d0f75ceb093cdb992afe002749e4a1d9604d324fea1f93e2eb98290844b6db7e4f201a6cb37b5cdfa6197c45239d79940743d40ee6be18", 0x1bf, 0x7fff}, {&(0x7f0000000340)="241fdb1beeea983656be20100926bbdd66ea81554b61588e879f", 0x1a, 0x40}, {&(0x7f0000000380)="7b24b39d0478cdac20662ffe576ff46b3604a256589c56170fd113b529e7b447dd893281b0f90c56c955ad06411a94b8e1dfbdbef84c152a6f7e7c83db2d44a0a45ce09ed0f2adad893d845687cb4d432601ac3a2bdf85adbd81b0909081346f82fe7fe10e13b804230b66ad1a3455a442140f703f2d63068dcedce0453278f87ddc12a657291b6f5fdc00a947878f848f089fe85a55456fd278c22a", 0x9c, 0x8}], 0x40000, &(0x7f0000000580)=ANY=[@ANYBLOB='errors=continue,dont_hash,s=[cpusetposix_acl_accesstrusted&,euid<', @ANYRESDEC=r2, @ANYBLOB=',mask=MAY_WRITE,mask=MAY_APPEND,fsuuid=ew\x00stwdf-97fw-wd7s-ww6a-?w7cw\x009~,subj_role=\',\',mask=MAY_EXEC,\x00']) mq_unlink(&(0x7f0000000680)='\xac/wlan0\\:\x00') socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4) 04:54:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:49 executing program 2: open(0x0, 0x0, 0x32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x40) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000fc0)="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") socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x64, 0xfffffffffffffb07}, 0xc) 04:54:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00`\x87\x00'}, 0x45c) 04:54:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x7f\xff\xff\xff\x00'}, 0x45c) [ 317.714737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 317.720733][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 317.726627][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 317.732405][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:54:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:54:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:54:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\xff\xff\xff\xff\x87`\x00'}, 0x45c) 04:54:59 executing program 2: open(0x0, 0x0, 0x32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x40) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c262b32eced8b5f01e40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515") socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x64, 0xfffffffffffffb07}, 0xc) 04:54:59 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:54:59 executing program 5 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 328.113574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.119447][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 328.125361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.131194][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:55:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, 0x45c) 04:55:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 328.355838][T11022] FAULT_INJECTION: forcing a failure. [ 328.355838][T11022] name failslab, interval 1, probability 0, space 0, times 0 [ 328.424022][T11022] CPU: 1 PID: 11022 Comm: syz-executor.5 Not tainted 5.2.0-rc5 #1 [ 328.431908][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.442000][T11022] Call Trace: [ 328.445321][T11022] dump_stack+0x172/0x1f0 [ 328.449685][T11022] should_fail.cold+0xa/0x15 [ 328.454403][T11022] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 328.460240][T11022] ? hci_unregister_dev+0x6ac/0x820 [ 328.465455][T11022] ? hci_unregister_dev+0x6bc/0x820 [ 328.470686][T11022] __should_failslab+0x121/0x190 [ 328.475639][T11022] should_failslab+0x9/0x14 [ 328.475654][T11022] kmem_cache_alloc_node+0x56/0x710 [ 328.475670][T11022] ? lock_downgrade+0x880/0x880 [ 328.475720][T11022] __alloc_skb+0xd5/0x5e0 [ 328.494581][T11022] ? skb_trim+0x190/0x190 [ 328.498930][T11022] ? mgmt_index_removed+0x18f/0x2c0 [ 328.504152][T11022] ? wait_for_completion+0x440/0x440 [ 328.509462][T11022] hci_sock_dev_event+0xf3/0x580 [ 328.514424][T11022] hci_unregister_dev+0x253/0x820 [ 328.519495][T11022] vhci_release+0x76/0xf0 [ 328.519520][T11022] __fput+0x2ff/0x890 [ 328.527847][T11022] ? vhci_close_dev+0x50/0x50 [ 328.532540][T11022] ____fput+0x16/0x20 [ 328.536539][T11022] task_work_run+0x145/0x1c0 [ 328.541152][T11022] exit_to_usermode_loop+0x273/0x2c0 [ 328.546452][T11022] do_syscall_64+0x58e/0x680 [ 328.551070][T11022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 328.551085][T11022] RIP: 0033:0x4592c9 [ 328.551101][T11022] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.551109][T11022] RSP: 002b:00007f4ce0f97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 328.560929][T11022] RAX: 0000000000000000 RBX: 00007f4ce0f97c90 RCX: 00000000004592c9 [ 328.596942][T11022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 328.604947][T11022] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 328.612943][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ce0f986d4 [ 328.620971][T11022] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:55:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x45c) 04:55:00 executing program 5 (fault-call:5 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 328.913552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.919522][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 328.949013][T11039] kobject_add_internal failed for hci2 (error: -2 parent: bluetooth) 04:55:00 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 328.993523][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 328.999502][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:55:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x45c) [ 329.047515][T11039] Bluetooth: Can't register HCI device [ 329.181725][T11051] FAULT_INJECTION: forcing a failure. [ 329.181725][T11051] name failslab, interval 1, probability 0, space 0, times 0 [ 329.212099][T11051] CPU: 1 PID: 11051 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 329.220126][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.230368][T11051] Call Trace: [ 329.233665][T11051] dump_stack+0x172/0x1f0 [ 329.238100][T11051] should_fail.cold+0xa/0x15 [ 329.242688][T11051] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 329.248849][T11051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.257067][T11051] ? __cancel_work_timer+0x313/0x520 [ 329.262759][T11051] ? try_to_grab_pending+0x910/0x910 [ 329.268275][T11051] __should_failslab+0x121/0x190 [ 329.273371][T11051] should_failslab+0x9/0x14 [ 329.277954][T11051] kmem_cache_alloc_node+0x56/0x710 [ 329.283181][T11051] __alloc_skb+0xd5/0x5e0 [ 329.287533][T11051] ? skb_trim+0x190/0x190 [ 329.291880][T11051] ? lock_downgrade+0x880/0x880 [ 329.296752][T11051] ? hci_dev_open+0x220/0x220 [ 329.301445][T11051] hci_sock_dev_event+0xf3/0x580 [ 329.306406][T11051] hci_unregister_dev+0x253/0x820 [ 329.311511][T11051] vhci_release+0x76/0xf0 [ 329.315854][T11051] __fput+0x2ff/0x890 [ 329.319854][T11051] ? vhci_close_dev+0x50/0x50 [ 329.324547][T11051] ____fput+0x16/0x20 [ 329.328545][T11051] task_work_run+0x145/0x1c0 [ 329.333161][T11051] exit_to_usermode_loop+0x273/0x2c0 [ 329.338550][T11051] do_syscall_64+0x58e/0x680 [ 329.343173][T11051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.349127][T11051] RIP: 0033:0x4592c9 [ 329.353206][T11051] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.372828][T11051] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 04:55:01 executing program 2: open(0x0, 0x0, 0x32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x40) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000fc0)="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") socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x64, 0xfffffffffffffb07}, 0xc) [ 329.381261][T11051] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 329.389336][T11051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 329.397676][T11051] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.405664][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 329.413652][T11051] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:01 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:55:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:01 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 329.713518][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 329.719392][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:55:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400080, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0x4, 0x100000000, 0x0, 0xe}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000000c0)=0x6) [ 329.781278][T11074] FAULT_INJECTION: forcing a failure. [ 329.781278][T11074] name failslab, interval 1, probability 0, space 0, times 0 04:55:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) [ 329.883562][T11074] CPU: 0 PID: 11074 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 329.891443][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.891459][T11074] Call Trace: [ 329.904816][T11074] dump_stack+0x172/0x1f0 [ 329.909166][T11074] should_fail.cold+0xa/0x15 [ 329.913778][T11074] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 329.919602][T11074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.925868][T11074] ? should_fail+0x1de/0x852 [ 329.930493][T11074] __should_failslab+0x121/0x190 [ 329.935454][T11074] should_failslab+0x9/0x14 [ 329.940366][T11074] kmem_cache_alloc_node_trace+0x5a/0x720 [ 329.946316][T11074] __kmalloc_node_track_caller+0x3d/0x70 [ 329.951996][T11074] __kmalloc_reserve.isra.0+0x40/0xf0 [ 329.957405][T11074] __alloc_skb+0x10b/0x5e0 [ 329.962318][T11074] ? skb_trim+0x190/0x190 [ 329.966669][T11074] ? mgmt_index_removed+0x18f/0x2c0 [ 329.971890][T11074] ? wait_for_completion+0x440/0x440 [ 329.977585][T11074] hci_sock_dev_event+0xf3/0x580 [ 329.985168][T11074] hci_unregister_dev+0x253/0x820 [ 329.992424][T11074] vhci_release+0x76/0xf0 [ 329.997206][T11074] __fput+0x2ff/0x890 [ 330.001335][T11074] ? vhci_close_dev+0x50/0x50 [ 330.001355][T11074] ____fput+0x16/0x20 [ 330.001377][T11074] task_work_run+0x145/0x1c0 [ 330.014679][T11074] exit_to_usermode_loop+0x273/0x2c0 [ 330.020100][T11074] do_syscall_64+0x58e/0x680 [ 330.024714][T11074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.030621][T11074] RIP: 0033:0x4592c9 [ 330.034529][T11074] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.055280][T11074] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 330.063731][T11074] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 330.071908][T11074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 330.079915][T11074] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.087917][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 330.095914][T11074] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:01 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:55:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 330.412995][T11092] FAULT_INJECTION: forcing a failure. [ 330.412995][T11092] name failslab, interval 1, probability 0, space 0, times 0 [ 330.498859][T11092] CPU: 0 PID: 11092 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 330.506745][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.516821][T11092] Call Trace: [ 330.520144][T11092] dump_stack+0x172/0x1f0 [ 330.524492][T11092] should_fail.cold+0xa/0x15 [ 330.524514][T11092] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 330.524539][T11092] ? ___might_sleep+0x163/0x280 [ 330.524566][T11092] __should_failslab+0x121/0x190 [ 330.524589][T11092] should_failslab+0x9/0x14 [ 330.524606][T11092] kmem_cache_alloc_trace+0x2ce/0x750 [ 330.524630][T11092] ? kasan_check_write+0x14/0x20 [ 330.549330][T11092] kobject_uevent_env+0x387/0x101d [ 330.559646][T11092] ? wait_for_completion+0x440/0x440 [ 330.559676][T11092] kobject_uevent+0x20/0x26 [ 330.574696][T11092] device_del+0x74b/0xc30 [ 330.579054][T11092] ? __device_links_no_driver+0x250/0x250 [ 330.585039][T11092] rfkill_unregister+0xd1/0x2c0 [ 330.589911][T11092] hci_unregister_dev+0x287/0x820 [ 330.594974][T11092] vhci_release+0x76/0xf0 [ 330.599495][T11092] __fput+0x2ff/0x890 [ 330.603531][T11092] ? vhci_close_dev+0x50/0x50 [ 330.608249][T11092] ____fput+0x16/0x20 [ 330.612327][T11092] task_work_run+0x145/0x1c0 [ 330.616940][T11092] exit_to_usermode_loop+0x273/0x2c0 [ 330.622255][T11092] do_syscall_64+0x58e/0x680 [ 330.626872][T11092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.632775][T11092] RIP: 0033:0x4592c9 [ 330.636688][T11092] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.656662][T11092] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 330.665100][T11092] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 330.673177][T11092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 330.681189][T11092] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.689186][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 330.697165][T11092] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:02 executing program 2: open(0x0, 0x0, 0x32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x40) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000fc0)="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") socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x64, 0xfffffffffffffb07}, 0xc) 04:55:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:02 executing program 5: lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x5, 0x101000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') write$P9_RMKNOD(r1, &(0x7f00000003c0)={0x14, 0x13, 0x2, {0x1, 0x4, 0x3}}, 0x14) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r2, 0x6ad2929b09b71cf9, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x290}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200000}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4080) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") accept4$netrom(r1, 0x0, &(0x7f0000000380), 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) 04:55:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x45c) 04:55:02 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 331.188967][T11122] FAULT_INJECTION: forcing a failure. [ 331.188967][T11122] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 331.202245][T11122] CPU: 0 PID: 11122 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 331.210070][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.220145][T11122] Call Trace: [ 331.223469][T11122] dump_stack+0x172/0x1f0 [ 331.227927][T11122] should_fail.cold+0xa/0x15 [ 331.232541][T11122] ? console_unlock+0x781/0xec0 [ 331.237426][T11122] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 331.237456][T11122] should_fail_alloc_page+0x50/0x60 [ 331.237477][T11122] __alloc_pages_nodemask+0x1a1/0x8d0 [ 331.253900][T11122] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 331.259554][T11122] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 331.265287][T11122] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 331.270951][T11122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.270976][T11122] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 331.270998][T11122] cache_grow_begin+0x9d/0x650 [ 331.287911][T11122] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 331.294169][T11122] kmem_cache_alloc_trace+0x67c/0x750 [ 331.299580][T11122] ? kasan_check_write+0x14/0x20 [ 331.304552][T11122] kobject_uevent_env+0x387/0x101d [ 331.309680][T11122] ? wait_for_completion+0x440/0x440 [ 331.315078][T11122] kobject_uevent+0x20/0x26 [ 331.319609][T11122] device_del+0x74b/0xc30 [ 331.323968][T11122] ? __device_links_no_driver+0x250/0x250 [ 331.329713][T11122] rfkill_unregister+0xd1/0x2c0 [ 331.334576][T11122] hci_unregister_dev+0x287/0x820 [ 331.339617][T11122] vhci_release+0x76/0xf0 [ 331.344224][T11122] __fput+0x2ff/0x890 [ 331.348264][T11122] ? vhci_close_dev+0x50/0x50 [ 331.352959][T11122] ____fput+0x16/0x20 [ 331.356959][T11122] task_work_run+0x145/0x1c0 [ 331.361579][T11122] exit_to_usermode_loop+0x273/0x2c0 [ 331.366881][T11122] do_syscall_64+0x58e/0x680 [ 331.371496][T11122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.377408][T11122] RIP: 0033:0x4592c9 [ 331.381315][T11122] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.400940][T11122] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 331.409485][T11122] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 331.417477][T11122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 331.425462][T11122] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:55:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 331.425471][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 331.425479][T11122] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) 04:55:03 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x45c) [ 331.975836][T11154] FAULT_INJECTION: forcing a failure. [ 331.975836][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 332.010263][T11154] CPU: 1 PID: 11154 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 332.018144][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.028382][T11154] Call Trace: [ 332.031792][T11154] dump_stack+0x172/0x1f0 [ 332.036134][T11154] should_fail.cold+0xa/0x15 [ 332.040749][T11154] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 332.046652][T11154] ? ___might_sleep+0x163/0x280 [ 332.051597][T11154] __should_failslab+0x121/0x190 [ 332.056535][T11154] should_failslab+0x9/0x14 [ 332.061027][T11154] __kmalloc+0x2d9/0x740 [ 332.065300][T11154] ? kobject_uevent_env+0x387/0x101d [ 332.070620][T11154] ? rcu_read_lock_sched_held+0x110/0x130 [ 332.076407][T11154] ? kobject_get_path+0xc4/0x1b0 [ 332.081342][T11154] kobject_get_path+0xc4/0x1b0 [ 332.086099][T11154] kobject_uevent_env+0x3ab/0x101d [ 332.091207][T11154] ? wait_for_completion+0x440/0x440 [ 332.096510][T11154] kobject_uevent+0x20/0x26 [ 332.101013][T11154] device_del+0x74b/0xc30 [ 332.105350][T11154] ? __device_links_no_driver+0x250/0x250 [ 332.111071][T11154] rfkill_unregister+0xd1/0x2c0 [ 332.115939][T11154] hci_unregister_dev+0x287/0x820 [ 332.121097][T11154] vhci_release+0x76/0xf0 [ 332.125439][T11154] __fput+0x2ff/0x890 [ 332.129416][T11154] ? vhci_close_dev+0x50/0x50 [ 332.134089][T11154] ____fput+0x16/0x20 [ 332.138060][T11154] task_work_run+0x145/0x1c0 [ 332.142671][T11154] exit_to_usermode_loop+0x273/0x2c0 [ 332.147956][T11154] do_syscall_64+0x58e/0x680 [ 332.152554][T11154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.158432][T11154] RIP: 0033:0x4592c9 [ 332.162314][T11154] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.182003][T11154] RSP: 002b:00007f355b6b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 332.190416][T11154] RAX: 0000000000000000 RBX: 00007f355b6b0c90 RCX: 00000000004592c9 [ 332.198416][T11154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 332.206383][T11154] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 332.214371][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6b16d4 04:55:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc058534f, &(0x7f0000000000)) 04:55:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'vcan0\x00', 0x600}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") [ 332.222337][T11154] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 04:55:04 executing program 3 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x45c) 04:55:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}, 0x45c) 04:55:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) pipe2$9p(&(0x7f0000000080), 0x4800) [ 332.487043][T11171] FAULT_INJECTION: forcing a failure. [ 332.487043][T11171] name failslab, interval 1, probability 0, space 0, times 0 04:55:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc058534f, &(0x7f0000000000)) 04:55:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 332.582266][T11171] CPU: 0 PID: 11171 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 332.590152][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.600228][T11171] Call Trace: [ 332.603569][T11171] dump_stack+0x172/0x1f0 [ 332.607931][T11171] should_fail.cold+0xa/0x15 [ 332.612542][T11171] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 332.618366][T11171] ? ___might_sleep+0x163/0x280 [ 332.623246][T11171] __should_failslab+0x121/0x190 [ 332.628210][T11171] should_failslab+0x9/0x14 [ 332.632735][T11171] kmem_cache_alloc_node+0x261/0x710 [ 332.638038][T11171] ? find_held_lock+0x35/0x130 [ 332.642837][T11171] __alloc_skb+0xd5/0x5e0 [ 332.647195][T11171] ? skb_trim+0x190/0x190 [ 332.651555][T11171] ? kasan_check_read+0x11/0x20 [ 332.656438][T11171] alloc_uevent_skb+0x83/0x1e2 [ 332.661223][T11171] kobject_uevent_env+0xaa3/0x101d [ 332.666367][T11171] ? wait_for_completion+0x440/0x440 [ 332.671696][T11171] kobject_uevent+0x20/0x26 [ 332.676231][T11171] device_del+0x74b/0xc30 [ 332.680591][T11171] ? __device_links_no_driver+0x250/0x250 [ 332.686420][T11171] rfkill_unregister+0xd1/0x2c0 [ 332.691287][T11171] hci_unregister_dev+0x287/0x820 [ 332.696331][T11171] vhci_release+0x76/0xf0 [ 332.700672][T11171] __fput+0x2ff/0x890 [ 332.704671][T11171] ? vhci_close_dev+0x50/0x50 [ 332.709364][T11171] ____fput+0x16/0x20 [ 332.713352][T11171] task_work_run+0x145/0x1c0 [ 332.717976][T11171] exit_to_usermode_loop+0x273/0x2c0 [ 332.723300][T11171] do_syscall_64+0x58e/0x680 [ 332.727927][T11171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.733844][T11171] RIP: 0033:0x4592c9 [ 332.737766][T11171] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.757417][T11171] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 332.765865][T11171] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 332.773866][T11171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 332.781871][T11171] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 332.789869][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 332.797876][T11171] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00`\x87\xff\xff\xff\xff\x00'}, 0x45c) 04:55:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:04 executing program 3 (fault-call:4 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc058534f, &(0x7f0000000000)) 04:55:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) close(r1) 04:55:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 333.186611][T11204] FAULT_INJECTION: forcing a failure. [ 333.186611][T11204] name failslab, interval 1, probability 0, space 0, times 0 [ 333.233084][T11204] CPU: 1 PID: 11204 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 333.240988][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.251069][T11204] Call Trace: [ 333.254402][T11204] dump_stack+0x172/0x1f0 [ 333.258777][T11204] should_fail.cold+0xa/0x15 [ 333.263406][T11204] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 333.269248][T11204] ? ___might_sleep+0x163/0x280 [ 333.274138][T11204] __should_failslab+0x121/0x190 [ 333.279113][T11204] should_failslab+0x9/0x14 [ 333.283642][T11204] kmem_cache_alloc+0x2af/0x6f0 [ 333.288526][T11204] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 333.294363][T11204] ? lock_downgrade+0x880/0x880 [ 333.299253][T11204] skb_clone+0x154/0x3d0 [ 333.303550][T11204] netlink_broadcast_filtered+0x86e/0xb20 [ 333.309318][T11204] netlink_broadcast+0x3a/0x50 [ 333.314122][T11204] kobject_uevent_env+0xad4/0x101d [ 333.319267][T11204] ? wait_for_completion+0x440/0x440 [ 333.324595][T11204] kobject_uevent+0x20/0x26 [ 333.329130][T11204] device_del+0x74b/0xc30 [ 333.333491][T11204] ? __device_links_no_driver+0x250/0x250 [ 333.339243][T11204] rfkill_unregister+0xd1/0x2c0 [ 333.344117][T11204] hci_unregister_dev+0x287/0x820 [ 333.349174][T11204] vhci_release+0x76/0xf0 [ 333.353525][T11204] __fput+0x2ff/0x890 [ 333.357596][T11204] ? vhci_close_dev+0x50/0x50 [ 333.362295][T11204] ____fput+0x16/0x20 [ 333.362311][T11204] task_work_run+0x145/0x1c0 [ 333.362336][T11204] exit_to_usermode_loop+0x273/0x2c0 [ 333.362355][T11204] do_syscall_64+0x58e/0x680 [ 333.362378][T11204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.370946][T11204] RIP: 0033:0x4592c9 [ 333.390602][T11204] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 333.390613][T11204] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 333.390628][T11204] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 04:55:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") [ 333.390637][T11204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 333.390645][T11204] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.390662][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 333.418710][T11204] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x02\x00'}, 0x45c) 04:55:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/209, 0xd1}, {0x0}], 0x2}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffec8, 0x0, 0x0, 0x800e00539) shutdown(r1, 0x0) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000040)=""/154, 0x9a}, {0x0}], 0x2) shutdown(r2, 0x0) 04:55:05 executing program 3 (fault-call:4 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") fcntl$setpipe(r0, 0x407, 0x7f) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xa1, 0x44200) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, 0x0, 0x0) close(r1) 04:55:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x03\x00'}, 0x45c) 04:55:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5105e2c02ec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0xffd) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r2) r3 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x5, 0x111000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x117, 0x1}}, 0x20) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x0, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, r4}}, 0x38) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x103000, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f00000001c0)=0x3) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 04:55:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, 0x0, 0x0) close(r1) [ 333.959455][T11238] FAULT_INJECTION: forcing a failure. [ 333.959455][T11238] name failslab, interval 1, probability 0, space 0, times 0 04:55:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x04\x00'}, 0x45c) 04:55:05 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000002200)={0x2, 0x70, 0xce2, 0x3ff, 0x8, 0x5, 0x0, 0x0, 0x4800, 0x8, 0x9, 0xff, 0x47, 0x5, 0x5241, 0x2, 0x2, 0x4, 0x5, 0x944, 0xec, 0x9, 0x2, 0x1b0, 0x6, 0x4, 0x3f, 0xb0, 0x0, 0x1665, 0xfffffffffffffffe, 0xef, 0x10000, 0x101, 0x80000001, 0x2, 0x7f, 0x0, 0x0, 0x3b, 0x0, @perf_bp={&(0x7f00000021c0), 0x7}, 0x400, 0x200, 0xfc9d, 0x0, 0x4, 0x401, 0xffffffff00000001}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000001740), 0x0}, 0xfffffffffffffe3b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000540)={'ifb0\x00', @broadcast}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) unlink(&(0x7f0000000a00)='./file0\x00') r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x438, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000b00)=ANY=[@ANYBLOB="080000000000800000000400000000000000000000000000000000000000000000000000000000e6"]) r5 = getpid() perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x7f, 0xffffffffffff7fff, 0x9, 0x0, 0x0, 0x200, 0x26, 0x1, 0xfffffffffffffff8, 0xd5b5, 0x46, 0xe66, 0x7, 0x8d4, 0x7ff, 0x0, 0x1000, 0x8, 0x0, 0x1, 0x9, 0x2, 0xfff, 0x100000000, 0x1, 0x6, 0x2, 0x5, 0x0, 0xff, 0x3, 0x8, 0x590, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x114, 0x9, 0x10000, 0x0, 0x9, 0x1, 0x8}, r5, 0x7, r1, 0x1) sendmsg$kcm(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)="995d5e40f5924c87b4565f099e75fecff74fdc286f4624e5ee83e5450f7e5a34d858f1720f17557e1f1bc6afd0f76b880450d4a058bdbd8bb726e088ff328c361ca5f4441ac936e3ab1988e2d980feffaa6807b2716acbf6447bf3465aa99fb6097bd9d216907639d1e60a244b63d76a3e39f73e79dc4891b3a13850fd524a58be2cebc741709caf9f76c1e7c3b4e35571f066b8c3277e9c56cf8be3cc3afb8816b4ee0770d42a8b3f3cdf379718d30f0e5e84a273411c9bf41f", 0xba}], 0x1}, 0x4) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0xfe72) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r2, r6}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x142) recvmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/81, 0x51}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/5, 0x5}, {&(0x7f0000000840)=""/126, 0x7e}], 0x6, &(0x7f0000000940)=""/108, 0x6c}, 0x40) recvmsg(r2, &(0x7f0000000080)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0xdc, &(0x7f0000000300)=[{&(0x7f0000000480)=""/97, 0xfffffffffffffda8}], 0xfffffffffffffd2}, 0x10000) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000600)}, 0x24000001) r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) recvmsg$kcm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)=""/116, 0x74}], 0x1, &(0x7f0000000b40)=""/98, 0x62}, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8953, &(0x7f0000000040)=0x2) close(r6) [ 334.016441][T11238] CPU: 0 PID: 11238 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 334.024329][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.034416][T11238] Call Trace: [ 334.037759][T11238] dump_stack+0x172/0x1f0 [ 334.042140][T11238] should_fail.cold+0xa/0x15 [ 334.046774][T11238] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 334.052635][T11238] ? ___might_sleep+0x163/0x280 [ 334.057520][T11238] __should_failslab+0x121/0x190 [ 334.062509][T11238] should_failslab+0x9/0x14 [ 334.067043][T11238] kmem_cache_alloc+0x2af/0x6f0 [ 334.071910][T11238] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 334.077764][T11238] ? lock_downgrade+0x880/0x880 [ 334.082641][T11238] skb_clone+0x154/0x3d0 [ 334.086909][T11238] netlink_broadcast_filtered+0x86e/0xb20 [ 334.092866][T11238] netlink_broadcast+0x3a/0x50 [ 334.097686][T11238] kobject_uevent_env+0xad4/0x101d [ 334.104705][T11238] ? wait_for_completion+0x440/0x440 [ 334.110013][T11238] kobject_uevent+0x20/0x26 [ 334.114548][T11238] device_del+0x74b/0xc30 [ 334.118907][T11238] ? __device_links_no_driver+0x250/0x250 [ 334.124657][T11238] rfkill_unregister+0xd1/0x2c0 [ 334.129621][T11238] hci_unregister_dev+0x287/0x820 [ 334.135553][T11238] vhci_release+0x76/0xf0 [ 334.139915][T11238] __fput+0x2ff/0x890 [ 334.143921][T11238] ? vhci_close_dev+0x50/0x50 [ 334.148616][T11238] ____fput+0x16/0x20 [ 334.152616][T11238] task_work_run+0x145/0x1c0 [ 334.157248][T11238] exit_to_usermode_loop+0x273/0x2c0 [ 334.162556][T11238] do_syscall_64+0x58e/0x680 [ 334.167164][T11238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.173066][T11238] RIP: 0033:0x4592c9 [ 334.176970][T11238] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 334.196593][T11238] RSP: 002b:00007f355b68fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 334.205024][T11238] RAX: 0000000000000000 RBX: 00007f355b68fc90 RCX: 00000000004592c9 04:55:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4e, &(0x7f0000000100)="11dca5055e0bcf0100e070") ioctl$void(r0, 0xc0045878) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000300)={0x200000000, [0x9, 0x3, 0x6, 0x8, 0x0, 0x80000001, 0x4, 0x1, 0x101, 0xfffffffffffff4d5, 0x323c, 0x8000, 0x1ff, 0xc00000, 0x8000, 0x6, 0x6, 0xebc, 0x8, 0x5, 0x2, 0x2, 0x63, 0x0, 0x9, 0x1, 0x19c0000, 0x10000, 0x4, 0x0, 0x8, 0x3, 0xfff, 0x2, 0x7, 0x2, 0x3, 0x10000, 0x400, 0x100000001, 0x46fc, 0x3, 0x800, 0x7, 0x3, 0xfff, 0x3, 0x4], 0xf}) ioctl$VIDIOC_G_STD(0xffffffffffffff9c, 0x80085617, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101000, 0x0) r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r5, &(0x7f0000000080)="b63db85e1e8d020000000000f0011dcc606aed5ed2bc7018cebc9b97ae21b14d872c678ce22c9b16004bbc69146d", 0x2e) write$binfmt_misc(r5, &(0x7f0000000000)={'syz0', "7842c25cd28ac38c5e44af0c8693e99e565e7737157da9186640825cd97139a817fceaed4712"}, 0x2a) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000280)={0xaa, &(0x7f00000001c0)="c04ab91b3f2e4f5d4dc357d1d140b98fe885d9cfba11e152f7ec679170500aeaa105a97a7863a86ffb82fea47f537e58369026e5ffcc98dfa99a4e501fd02a1852044d5f2743433f1635478c47926f141e1c8037f35b20cf012418decc3d859518a2a36f343f002ec287482b4a5c8ce420e43c5806593523071619cc59c60438bf463ce1f6b11a8719831b3875a27a4bd50b6a8366c21c69dbea89ba73af5f0a8f0be0e3916ac3867c4e"}) close(r1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x80) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1000000030) socket$pppoe(0x18, 0x1, 0x0) 04:55:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, 0x0, 0x0) close(r1) [ 334.213008][T11238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 334.220996][T11238] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 334.228976][T11238] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6906d4 [ 334.236973][T11238] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 04:55:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:55:06 executing program 3 (fault-call:4 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x05\x00'}, 0x45c) 04:55:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x7ff, 0xfffffffffffffff7}) 04:55:06 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000002200)={0x2, 0x70, 0xce2, 0x3ff, 0x8, 0x5, 0x0, 0x0, 0x4800, 0x8, 0x9, 0xff, 0x47, 0x5, 0x5241, 0x2, 0x2, 0x4, 0x5, 0x944, 0xec, 0x9, 0x2, 0x1b0, 0x6, 0x4, 0x3f, 0xb0, 0x0, 0x1665, 0xfffffffffffffffe, 0xef, 0x10000, 0x101, 0x80000001, 0x2, 0x7f, 0x0, 0x0, 0x3b, 0x0, @perf_bp={&(0x7f00000021c0), 0x7}, 0x400, 0x200, 0xfc9d, 0x0, 0x4, 0x401, 0xffffffff00000001}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000001740), 0x0}, 0xfffffffffffffe3b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000540)={'ifb0\x00', @broadcast}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) unlink(&(0x7f0000000a00)='./file0\x00') r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x438, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000b00)=ANY=[@ANYBLOB="080000000000800000000400000000000000000000000000000000000000000000000000000000e6"]) r5 = getpid() perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x7f, 0xffffffffffff7fff, 0x9, 0x0, 0x0, 0x200, 0x26, 0x1, 0xfffffffffffffff8, 0xd5b5, 0x46, 0xe66, 0x7, 0x8d4, 0x7ff, 0x0, 0x1000, 0x8, 0x0, 0x1, 0x9, 0x2, 0xfff, 0x100000000, 0x1, 0x6, 0x2, 0x5, 0x0, 0xff, 0x3, 0x8, 0x590, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x114, 0x9, 0x10000, 0x0, 0x9, 0x1, 0x8}, r5, 0x7, r1, 0x1) sendmsg$kcm(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)="995d5e40f5924c87b4565f099e75fecff74fdc286f4624e5ee83e5450f7e5a34d858f1720f17557e1f1bc6afd0f76b880450d4a058bdbd8bb726e088ff328c361ca5f4441ac936e3ab1988e2d980feffaa6807b2716acbf6447bf3465aa99fb6097bd9d216907639d1e60a244b63d76a3e39f73e79dc4891b3a13850fd524a58be2cebc741709caf9f76c1e7c3b4e35571f066b8c3277e9c56cf8be3cc3afb8816b4ee0770d42a8b3f3cdf379718d30f0e5e84a273411c9bf41f", 0xba}], 0x1}, 0x4) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0xfe72) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r2, r6}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x142) recvmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/81, 0x51}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/5, 0x5}, {&(0x7f0000000840)=""/126, 0x7e}], 0x6, &(0x7f0000000940)=""/108, 0x6c}, 0x40) recvmsg(r2, &(0x7f0000000080)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0xdc, &(0x7f0000000300)=[{&(0x7f0000000480)=""/97, 0xfffffffffffffda8}], 0xfffffffffffffd2}, 0x10000) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000600)}, 0x24000001) r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) recvmsg$kcm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)=""/116, 0x74}], 0x1, &(0x7f0000000b40)=""/98, 0x62}, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8953, &(0x7f0000000040)=0x2) close(r6) 04:55:06 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x608000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) ioctl(0xffffffffffffffff, 0x1000008915, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) lseek(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x8, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x40) 04:55:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x06\x00'}, 0x45c) [ 334.985477][T11270] FAULT_INJECTION: forcing a failure. [ 334.985477][T11270] name failslab, interval 1, probability 0, space 0, times 0 04:55:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") [ 335.274395][T11270] CPU: 0 PID: 11270 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 335.282441][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.292516][T11270] Call Trace: [ 335.295834][T11270] dump_stack+0x172/0x1f0 [ 335.300282][T11270] should_fail.cold+0xa/0x15 [ 335.304895][T11270] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 335.310724][T11270] ? ___might_sleep+0x163/0x280 [ 335.315600][T11270] __should_failslab+0x121/0x190 [ 335.320557][T11270] should_failslab+0x9/0x14 [ 335.325080][T11270] kmem_cache_alloc_trace+0x2ce/0x750 [ 335.330467][T11270] ? mutex_trylock+0x1e0/0x1e0 [ 335.335257][T11270] ? kasan_check_write+0x14/0x20 [ 335.340219][T11270] kobject_uevent_env+0x387/0x101d [ 335.345349][T11270] ? wait_for_completion+0x440/0x440 [ 335.350659][T11270] ? software_node_notify+0xfd/0x2ed [ 335.355967][T11270] kobject_uevent+0x20/0x26 [ 335.360495][T11270] device_del+0x74b/0xc30 [ 335.364930][T11270] ? __device_links_no_driver+0x250/0x250 [ 335.370662][T11270] ? kobject_put+0x84/0xe0 [ 335.375101][T11270] hci_unregister_dev+0x2c6/0x820 [ 335.380149][T11270] vhci_release+0x76/0xf0 [ 335.384496][T11270] __fput+0x2ff/0x890 [ 335.388508][T11270] ? vhci_close_dev+0x50/0x50 [ 335.393201][T11270] ____fput+0x16/0x20 [ 335.397211][T11270] task_work_run+0x145/0x1c0 [ 335.401838][T11270] exit_to_usermode_loop+0x273/0x2c0 [ 335.407148][T11270] do_syscall_64+0x58e/0x680 [ 335.411764][T11270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.417673][T11270] RIP: 0033:0x4592c9 [ 335.421585][T11270] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.441206][T11270] RSP: 002b:00007f355b6b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 335.441223][T11270] RAX: 0000000000000000 RBX: 00007f355b6b0c90 RCX: 00000000004592c9 [ 335.441232][T11270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 335.441248][T11270] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 04:55:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x400000) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) pkey_alloc(0x0, 0x3) close(r1) 04:55:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\a\x00'}, 0x45c) [ 335.441266][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6b16d4 [ 335.441274][T11270] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 04:55:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\b\x00'}, 0x45c) 04:55:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x105000) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1c) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@initdev, @multicast1, @loopback}, &(0x7f00000000c0)=0xc) close(r1) 04:55:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:55:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)="fa0c000016008152915a655267d7d137ab2ff96e27bf28b285fe3903a44a6017edcaa3a2b4dade3baee72569b51366463fedf5e787c05b0cb5927a3a7edfb4d078e9ae1504d489e058be9fafaa633705b6d4bf6a01f2cd9ebf19724a1b0b9760612582bccd3983ce4474844c065e914dab8bbd52a45f431678bfe28633bf7c8dc83df809238ed87f1e393883ef750ce79c6f84e5e5de176e2f26024e4e3a3d8fbdaf3254022f265d8ccc5fd7205d9d9c2c407ec58162523082d81a39c43f782332ba8e82b4107a049cb82bba8b5edd80473844291437b8d22edca68047582e6be601e9df5e60a32c7cd202c5a30b8b606e43362739551cbb013b65e238f41cc00d7900140cf06b7bc9030f2563bcf9d4f4b7f48c79ec1a323d06276a0a3f8846b7c62b66f9709cabcaad234c53f3bc9b11165a6321f1db1057f076cfaebf8fbfa033fdc1dc2c3e314b36b3b3dd50425447da8bc5938ff7a17361100ab0b1ffeab7ac487411824224781eb9cdd4edef57ae91cd61f56a56c0599cfc3a491447207610f242da6cd6b030ae5f35e3181c44ae68665a023759b9ef4358db46107edc49194aed72b62600ec0ae4fc9065be059fc010cd6e6c9ea77c666b5e25693fbcf595e3e57113ff3a0e0c63d0604a16ea5adb8b7b54d47d4d8804612fde571863064528a49bf684d8a880a11afd819f186c177c49cac3ba1e9d1aa7ad0ff36b9e36d73c05b8abcaf96df0bacd2c9653f30ec29e1284af8749a9b2803c2727e992a6e65df192e1875c3e6d3553ffb7cb34ffee8f8ac0123c390454b42a0316952cbc9949376d9320ec207f77c2d5eb9e86d720cf8e9008a9a51932b45cd4cab21414c92d1c20f9e15e3fc16c7ce181e9ab19b01b70343934c823b1215e173405dd225233823cd4a604a77f06b14eb05b860e6cf8790335788c43abe9de1598e9952e5c7e6b2f8b17b1008ff3033e7d1635b008834bdf4054e6195e55000827c6202b227dde06f23ae21c00b371bdb6b7ea47b2e78844b52a77f9f0929790dcd7df2752e4af092d539c87c18751a5eb3eb4d38a2a0e070064b4ffaacff0543b115cc89f6c7e78f12147ebfcf1c80bac8f98deb59cbe670adb4cd1882a7e0ca4ba85ae9d445223ffb32301d46c0c9b05a830cbea0f72294ab3b539e4ed7cac2e22b235e8ceedeb643fb90b061a58368e76036ff3c1828d8a4e21288662afb6f2acab00d734db7ffc8373a928571819ce9ea6cb0956a6093b2b1f65662b76bc6ac8a171451714e1d0e4ff76470c7651d3cf16f37cb5547317e4fef51e4fb471de6ffbb90c2dd4a64266c4c2f75fc62e58ec306fb92212fb262d8b138899a3b53e67cde2f97d94cd2265cc04d32b29edf77e75b1f88372495cb2937f183bfc8604d72efb3af5c1f41b665b25592676b0ad2185478eade7e663e743e0e09cce6224c787ce1d789d421a62a7bedae76b39bac4a9b350bfe3a75f551341b11dd96cdaea17989dad565b16324a69842dc29a0ed16744ea5935598ac8238e146139189927a14d3b2863044b63b468ae75f48fab68ad235c36daffebfe4b468fc9b13198b1a683dcd3b3b4294ba22caddbacf8792d5783bc12e2538e4609e6bb6e9eeab98a06452c252a657f400260458c29fae8879097698c9aba2b2d889fc78f00d0d8271e09e8542b71018be6ff8cb03cb423e79303047d6ce124a00f64461b899bbddc4fe87ff677533391e16c01fa9cd6420bdc856c4c7f057b249ee9817efd6ab2cd02eb887d2631435ef2d5a1c7e57ac046ef615a1285ca89ade18ae69af3b3f8f76ca8aa060e373c0f99424fe1c5fadc72fe145fd2d4e4da4b78597890516857de188fcdaf15e3b0871b346cd39ab772cc25fab49e60c818cde934b137144adfc4fbde3ddbeccce9679f02b66746e822c67b3ed5fdafb4a936a2683b39a002115ecd62220605ca542610a80f2e3530aa89d3ed6ed9c57bbfd5db3a0b62786a608309a355443c616032008f9458b2f10db93e29470192370084e9322c309c9b23333b46d04e79176659503ad4b05deebb3c67d715ee6e84a89002ea6f7f71bf41ad36b42c8ae01c97174dbb641e50641aba60c291a84e906c013087370a5043e07d36fcead378f6c1e6ed3f5ac695124b82b20261cf7c9b82172e09c81d7d39eed72aee5678613a3c671ddd44f2c7c75a3b5d316aa165d56594fccab20903d7f503a08928e76c779918b2463b720ee6367a43e494a1db3ed1a80690e665570c01ce7eb979cdd95d4e1ca51730eb2cd63ffb2a56049601627c9788254945142dce85adbe1eb5997d16cdfe2a3758b13dc6bb121e2206ae64206868c1c5e89a101bc121719ac435dcad093f5f67cefd863cc7c8f3fc8a9dc62a83c115f1ce714b18af067951aa06dd9bb4ed98a820bf4704d156977caa4e6415b2a0df0386e2f6a061bf44abc8a397cf4abdafc51b78ebec9831f3c60fde6e62a1fd082903080aef20ff8de8bc0dced06f627514600539ca7114a088848da4244a85b4cf5b976d3a698c9a568d417e276917baba05d1a02181db2e6cc35986da4ccc63f8cd8e85a4a923dd27e2f499664601fdc44fdf46e2d2880cd5a7ece89c370234c438dcc0b43865cc62bad21e9dc37da758cbe01752f02fd9cbfe98630a30a78bb1239e25cdaba3d45d13cd3e7216d9d8070f3ff1a0cd9a0c91f29974c98f2677ba88c1091bde4be0cd37ea5eeb3b9cd59560a00ddd40bbd60ffb8d4daa973ef0977c18dd4b38a605cee957872dca85787c37b6931293eddb77015faf143d1d28d24822d1a5d134799e8175a38b255aaf0e39b68c7f734e2e1e7044626daa84c9113e86d86ef63c86010000000000000061dcf516c32d49478f7af30d52baa18ea6b0fc286c06b7e4ee019bf3fe74845a652d4a52aaa241a189c411e90e2953863a2bc4124e573607b94cdff19e280709004931a83f056cb5857672619b97ce38081592c0c319ce72e04e9eadce89775cfb5a4b2842663bc79bde565435cbcd46c4d505ceef7dde86512d39d4cb270deb7e79ebf8602bdc0d76c3e833d36ee08be10be634f44056c2f3fd6a328c7cd562e9c96ff7845fc3df81a876bb07f1cc833bed6ca1dc5cf935a4e959db6a4fae6edbc45357d8758faa9cd04cd41eb6efcfbd91658519bf520b90107f767d126854818485e98cb7ef56804de6950bf4e72098a949d14ea0e4e9f2534cf16cac0aeb970fc5c39f37e93910d5c99ac163792260d2280ec5c9a79bf295588ec23f524aae65f800f9c39e338f3d66b1a69e5488e04823eab36ae6ec6a2c5ce133ccd819a2b217b1ab7f4afd1697bb42929b3131358b5421c83f925571934442d0fd0ce3990d4e5d31d8b956f76df3c2f8533e46b892c88692ce009155dd5c7dbe4c86874b95762650f63e4b4aabb41320978b05b80cfe8fa2830904ef6b5c4f7ad46ca5dac151c9077c4d2c6adfe5066a8eb09a9bc6892330ea2b259a53c7137f8498254e1b04bf920c35c5333d4d640b11da60917ae921037b4aedbd6a0fbeeaf88ef6defc830552b4cbe3fe2a844806a48923dd428ea1c8d797bd8e6aabd1d1a8c97c8038b627120a77f4e47fa1f788aa9da268b0ec10fc453cb722685df76547dbf55a16663aa2b2a51e9c52456cccdf682592d1369dd12e3d3cb504e0f2d7004e62c297d5a25d0298045dae8fca8cb795ea57288b85a7e705820087d55ca6c42e920e2aa1174e128622cf64a197fd728cb2949536ba63e8bda8589261f1377caea37302e47228d3708a5666c66ba711d3c0b310a8c47e86d26597299d523c28c90e4feab43e950f398f7b61ccf7e6490d75ba6d8214e2d5ef2d7a088db490e1ebacf4e6eecc896cb1c704f0a8fcdf4ccb5dfa53eaf43d709287f36c10188c19fd59da7d73494de089c1b0a69ee22dcb847001c5317846a876bee1685d11c4db0673ec4c3a12008bb719650525b3c39e2b0469edda93830b3f1bde3e5b0b4637197866bb08c5858cf0d9876e3c7cad54169887bf9c80f9f4be362e1bc8c27f3434e9a918bac355c184bd899b9aebe6be20e70c0c69234342eb8b57aa9ffb7797a32df91cec2bbc90201658ca2297bf1fe68e65363867e1f6ad79b827f363d64fbd3b188d95307d011c4ce5bf4407908c058eeb97ec98dd0ebfdab6b348fa387f2a7573cac25344c983e8fd526c30ee6d59fe99a30c7d7e2864aa22bfa49df5f32da68309cab3ed9c2ce69b6ecb8508ce28a43ebd6c809b8afd07a4606e664965d316f3707a3abee9bcdc32a78031b0171fb565d90c16cd56e5792c0cf618b799715f32538e38f493d4e19ec76fc8a07576a13975706bfc2bb1516c2d18a4385cc37a206eac6c9fb8d073576a1f56d529e407154fdd0c40d079ae44962c26743b4bf5950ac5ee34c5d7bd60b364ce670958112c37b9829bed7e1327356d6b94af3ba020c2337b2dba37d00af8a128a614390cdde62ce871f948427fb5c187df9a1540a5cc71da1a86144acbfd94bf433f744f0c4f2a675eba3ed251c5b11b08dfefc726c0394a9b75121d88467ed4b2cd69819dfe50693a4a4c8370d3af12f41c0067283bbb5a90044a340fc357a11081a6c13bb9c32d9caa448479fd5f0302b6729ca7233094540b14546d6bcc15771c2686279b34f9c0914f5306d0fabd5979266ea01a17a22507e560dbf904dd62c40e2bcc", 0xcfa}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) 04:55:17 executing program 3 (fault-call:4 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:17 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x17) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0xfffffffffffffd58, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xffffffffffffff9b) close(r2) 04:55:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x03\x00'}, 0x45c) 04:55:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") [ 345.310768][T11296] Unknown ioctl 19278 [ 345.340196][T11303] FAULT_INJECTION: forcing a failure. [ 345.340196][T11303] name failslab, interval 1, probability 0, space 0, times 0 [ 345.360684][T11296] Unknown ioctl 19278 [ 345.373856][T11303] CPU: 0 PID: 11303 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 04:55:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x58000, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r1) [ 345.381723][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.391791][T11303] Call Trace: [ 345.395121][T11303] dump_stack+0x172/0x1f0 [ 345.399473][T11303] should_fail.cold+0xa/0x15 [ 345.404077][T11303] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.409901][T11303] ? ___might_sleep+0x163/0x280 [ 345.414773][T11303] __should_failslab+0x121/0x190 [ 345.419740][T11303] should_failslab+0x9/0x14 [ 345.424281][T11303] __kmalloc+0x2d9/0x740 [ 345.428551][T11303] ? kobject_uevent_env+0x387/0x101d [ 345.433859][T11303] ? rcu_read_lock_sched_held+0x110/0x130 [ 345.439610][T11303] ? kobject_get_path+0xc4/0x1b0 [ 345.444575][T11303] kobject_get_path+0xc4/0x1b0 [ 345.449359][T11303] kobject_uevent_env+0x3ab/0x101d [ 345.454487][T11303] ? wait_for_completion+0x440/0x440 [ 345.454506][T11303] ? software_node_notify+0xfd/0x2ed [ 345.454524][T11303] kobject_uevent+0x20/0x26 [ 345.454541][T11303] device_del+0x74b/0xc30 [ 345.454561][T11303] ? __device_links_no_driver+0x250/0x250 [ 345.454574][T11303] ? kobject_put+0x84/0xe0 [ 345.454597][T11303] hci_unregister_dev+0x2c6/0x820 [ 345.465183][T11303] vhci_release+0x76/0xf0 [ 345.465203][T11303] __fput+0x2ff/0x890 [ 345.465222][T11303] ? vhci_close_dev+0x50/0x50 [ 345.465237][T11303] ____fput+0x16/0x20 [ 345.465259][T11303] task_work_run+0x145/0x1c0 [ 345.465284][T11303] exit_to_usermode_loop+0x273/0x2c0 [ 345.489239][T11303] do_syscall_64+0x58e/0x680 [ 345.489277][T11303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.526913][T11303] RIP: 0033:0x4592c9 04:55:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_LINKINFO={0x25, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x200}}, 0x0) [ 345.530820][T11303] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.530829][T11303] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 345.530845][T11303] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 345.530853][T11303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 345.530861][T11303] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.530870][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 04:55:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x05\x00'}, 0x45c) [ 345.530878][T11303] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 [ 345.614613][T11315] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.2'. 04:55:17 executing program 3 (fault-call:4 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 04:55:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x06\x00'}, 0x45c) [ 345.911258][T11327] FAULT_INJECTION: forcing a failure. [ 345.911258][T11327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 345.924531][T11327] CPU: 1 PID: 11327 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 345.932366][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.942458][T11327] Call Trace: [ 345.945805][T11327] dump_stack+0x172/0x1f0 [ 345.950181][T11327] should_fail.cold+0xa/0x15 [ 345.954807][T11327] ? console_unlock+0x781/0xec0 [ 345.959692][T11327] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.965524][T11327] ? mark_held_locks+0xf0/0xf0 [ 345.970321][T11327] should_fail_alloc_page+0x50/0x60 [ 345.975540][T11327] __alloc_pages_nodemask+0x1a1/0x8d0 [ 345.987688][T11327] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 345.987709][T11327] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 345.987722][T11327] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 345.987740][T11327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.987769][T11327] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.987791][T11327] cache_grow_begin+0x9d/0x650 [ 346.000752][T11327] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.000774][T11327] kmem_cache_alloc_trace+0x67c/0x750 [ 346.000792][T11327] ? mutex_trylock+0x1e0/0x1e0 [ 346.000805][T11327] ? kasan_check_write+0x14/0x20 [ 346.000829][T11327] kobject_uevent_env+0x387/0x101d [ 346.000844][T11327] ? wait_for_completion+0x440/0x440 [ 346.000873][T11327] ? software_node_notify+0xfd/0x2ed [ 346.012819][T11327] kobject_uevent+0x20/0x26 [ 346.012840][T11327] device_del+0x74b/0xc30 [ 346.012861][T11327] ? __device_links_no_driver+0x250/0x250 [ 346.012875][T11327] ? kobject_put+0x84/0xe0 [ 346.012900][T11327] hci_unregister_dev+0x2c6/0x820 [ 346.012929][T11327] vhci_release+0x76/0xf0 [ 346.035154][T11327] __fput+0x2ff/0x890 [ 346.035179][T11327] ? vhci_close_dev+0x50/0x50 [ 346.035196][T11327] ____fput+0x16/0x20 [ 346.035211][T11327] task_work_run+0x145/0x1c0 [ 346.035235][T11327] exit_to_usermode_loop+0x273/0x2c0 [ 346.035253][T11327] do_syscall_64+0x58e/0x680 [ 346.035274][T11327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.035292][T11327] RIP: 0033:0x4592c9 [ 346.035309][T11327] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.035327][T11327] RSP: 002b:00007f355b6b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 346.045117][T11327] RAX: 0000000000000000 RBX: 00007f355b6b0c90 RCX: 00000000004592c9 [ 346.045128][T11327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 346.045134][T11327] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 346.045141][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6b16d4 [ 346.045148][T11327] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\a\x00'}, 0x45c) 04:55:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x206001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:55:18 executing program 3 (fault-call:4 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='hsr0\x00', 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800000000000060, 0x0) 04:55:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x3) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) 04:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00@\x00'}, 0x45c) 04:55:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 346.461814][T11341] FAULT_INJECTION: forcing a failure. [ 346.461814][T11341] name failslab, interval 1, probability 0, space 0, times 0 [ 346.513891][T11341] CPU: 0 PID: 11341 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 346.521848][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.532008][T11341] Call Trace: [ 346.535323][T11341] dump_stack+0x172/0x1f0 [ 346.539676][T11341] should_fail.cold+0xa/0x15 [ 346.544300][T11341] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.550120][T11341] ? ___might_sleep+0x163/0x280 [ 346.554987][T11341] __should_failslab+0x121/0x190 [ 346.559938][T11341] should_failslab+0x9/0x14 [ 346.564459][T11341] kmem_cache_alloc+0x2af/0x6f0 [ 346.569319][T11341] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 346.575140][T11341] ? lock_downgrade+0x880/0x880 [ 346.580013][T11341] skb_clone+0x154/0x3d0 [ 346.584282][T11341] netlink_broadcast_filtered+0x86e/0xb20 [ 346.590501][T11341] netlink_broadcast+0x3a/0x50 [ 346.595294][T11341] kobject_uevent_env+0xad4/0x101d [ 346.600427][T11341] ? wait_for_completion+0x440/0x440 [ 346.605732][T11341] kobject_uevent+0x20/0x26 [ 346.610264][T11341] device_del+0x74b/0xc30 [ 346.614618][T11341] ? __device_links_no_driver+0x250/0x250 [ 346.620348][T11341] ? kobject_put+0x84/0xe0 [ 346.620375][T11341] hci_unregister_dev+0x2c6/0x820 [ 346.620400][T11341] vhci_release+0x76/0xf0 [ 346.620422][T11341] __fput+0x2ff/0x890 [ 346.630142][T11341] ? vhci_close_dev+0x50/0x50 [ 346.630162][T11341] ____fput+0x16/0x20 [ 346.630177][T11341] task_work_run+0x145/0x1c0 [ 346.630203][T11341] exit_to_usermode_loop+0x273/0x2c0 [ 346.651995][T11341] do_syscall_64+0x58e/0x680 [ 346.652020][T11341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.652032][T11341] RIP: 0033:0x4592c9 [ 346.652053][T11341] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.691411][T11341] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 346.691427][T11341] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 346.691435][T11341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 346.691443][T11341] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.691462][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 346.723838][T11341] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:18 executing program 3 (fault-call:4 fault-nth:12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:18 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xa01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='cpuacct.usage_sys\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="ff038aa174036ed7e08f370886dd60df006100261100029e060000cfab170e16b7833e214658904b6b14c7dcf02f170080259c4c209887e3e610feb2209458ec8c3df08d445bc28100468568f0708f76223312c442f3b62a989224f97702be4425c1acb1aa7ad0c191897f984626a1fbab46a6360c47b9f351223cf69f810ed0f8f7f86fd2ed886aea10ec06dedbb2a5f51d75959467b0d7a69e8a941251864732d11cc4fb11c15b6bb9f5ad9c8dc324e4abc8eed53bf93fbca51cc72205892747c0b293a2e2958144e1c81ee94c83f6416750d87d9b0c50c4"], 0xd9) 04:55:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x87`\x00'}, 0x45c) [ 346.919223][T11357] FAULT_INJECTION: forcing a failure. [ 346.919223][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 346.961127][T11357] CPU: 0 PID: 11357 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 346.968992][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.979062][T11357] Call Trace: [ 346.982385][T11357] dump_stack+0x172/0x1f0 [ 346.986751][T11357] should_fail.cold+0xa/0x15 [ 346.991366][T11357] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.998693][T11357] ? ___might_sleep+0x163/0x280 [ 347.003569][T11357] __should_failslab+0x121/0x190 [ 347.003591][T11357] should_failslab+0x9/0x14 [ 347.003604][T11357] kmem_cache_alloc_node+0x261/0x710 [ 347.003620][T11357] ? find_held_lock+0x35/0x130 [ 347.003642][T11357] __alloc_skb+0xd5/0x5e0 [ 347.003657][T11357] ? skb_trim+0x190/0x190 [ 347.003674][T11357] ? kasan_check_read+0x11/0x20 [ 347.003706][T11357] alloc_uevent_skb+0x83/0x1e2 [ 347.013280][T11357] kobject_uevent_env+0xaa3/0x101d [ 347.013302][T11357] ? wait_for_completion+0x440/0x440 [ 347.013324][T11357] kobject_uevent+0x20/0x26 [ 347.041641][T11357] device_del+0x74b/0xc30 [ 347.060855][T11357] ? __device_links_no_driver+0x250/0x250 [ 347.066591][T11357] ? kobject_put+0x84/0xe0 [ 347.071050][T11357] hci_unregister_dev+0x2c6/0x820 [ 347.076092][T11357] vhci_release+0x76/0xf0 [ 347.080444][T11357] __fput+0x2ff/0x890 [ 347.084451][T11357] ? vhci_close_dev+0x50/0x50 [ 347.089143][T11357] ____fput+0x16/0x20 [ 347.093169][T11357] task_work_run+0x145/0x1c0 [ 347.097955][T11357] exit_to_usermode_loop+0x273/0x2c0 [ 347.103276][T11357] do_syscall_64+0x58e/0x680 04:55:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syncfs(r0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='[wlan0%:ppp1&\x00', 0xe, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$RTC_AIE_ON(r2, 0x7001) [ 347.107890][T11357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.113791][T11357] RIP: 0033:0x4592c9 [ 347.117692][T11357] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.137396][T11357] RSP: 002b:00007f355b6d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 347.145910][T11357] RAX: 0000000000000000 RBX: 00007f355b6d1c90 RCX: 00000000004592c9 [ 347.153900][T11357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 347.161882][T11357] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.169864][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6d26d4 [ 347.177842][T11357] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x01\x00'}, 0x45c) 04:55:19 executing program 1: 04:55:19 executing program 1: [ 347.387225][T11367] device nr0 entered promiscuous mode 04:55:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:19 executing program 3 (fault-call:4 fault-nth:13): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x02\x00'}, 0x45c) 04:55:19 executing program 1: [ 347.854403][T11384] FAULT_INJECTION: forcing a failure. [ 347.854403][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 347.881909][T11384] CPU: 0 PID: 11384 Comm: syz-executor.3 Not tainted 5.2.0-rc5 #1 [ 347.889761][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.899823][T11384] Call Trace: [ 347.903172][T11384] dump_stack+0x172/0x1f0 [ 347.907532][T11384] should_fail.cold+0xa/0x15 [ 347.912167][T11384] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 347.918016][T11384] ? ___might_sleep+0x163/0x280 [ 347.922884][T11384] __should_failslab+0x121/0x190 [ 347.927837][T11384] should_failslab+0x9/0x14 [ 347.932351][T11384] kmem_cache_alloc+0x2af/0x6f0 [ 347.937248][T11384] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 347.943064][T11384] ? lock_downgrade+0x880/0x880 [ 347.947933][T11384] skb_clone+0x154/0x3d0 [ 347.952191][T11384] netlink_broadcast_filtered+0x86e/0xb20 [ 347.957934][T11384] netlink_broadcast+0x3a/0x50 [ 347.962797][T11384] kobject_uevent_env+0xad4/0x101d [ 347.967929][T11384] ? wait_for_completion+0x440/0x440 [ 347.973233][T11384] kobject_uevent+0x20/0x26 [ 347.977759][T11384] device_del+0x74b/0xc30 [ 347.982105][T11384] ? __device_links_no_driver+0x250/0x250 [ 347.987839][T11384] ? kobject_put+0x84/0xe0 [ 347.992283][T11384] hci_unregister_dev+0x2c6/0x820 [ 347.997327][T11384] vhci_release+0x76/0xf0 [ 348.001671][T11384] __fput+0x2ff/0x890 [ 348.005668][T11384] ? vhci_close_dev+0x50/0x50 [ 348.010358][T11384] ____fput+0x16/0x20 [ 348.014349][T11384] task_work_run+0x145/0x1c0 [ 348.018966][T11384] exit_to_usermode_loop+0x273/0x2c0 [ 348.025003][T11384] do_syscall_64+0x58e/0x680 [ 348.029614][T11384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.035523][T11384] RIP: 0033:0x4592c9 [ 348.039437][T11384] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.059154][T11384] RSP: 002b:00007f355b6b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 348.067601][T11384] RAX: 0000000000000000 RBX: 00007f355b6b0c90 RCX: 00000000004592c9 [ 348.075595][T11384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 348.083589][T11384] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 348.091587][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f355b6b16d4 [ 348.099587][T11384] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 [ 348.330479][T11386] device nr0 entered promiscuous mode 04:55:20 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xa01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='cpuacct.usage_sys\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="ff038aa174036ed7e08f370886dd60df006100261100029e060000cfab170e16b7833e214658904b6b14c7dcf02f170080259c4c209887e3e610feb2209458ec8c3df08d445bc28100468568f0708f76223312c442f3b62a989224f97702be4425c1acb1aa7ad0c191897f984626a1fbab46a6360c47b9f351223cf69f810ed0f8f7f86fd2ed886aea10ec06dedbb2a5f51d75959467b0d7a69e8a941251864732d11cc4fb11c15b6bb9f5ad9c8dc324e4abc8eed53bf93fbca51cc72205892747c0b293a2e2958144e1c81ee94c83f6416750d87d9b0c50c4"], 0xd9) 04:55:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:20 executing program 1: 04:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x03\x00'}, 0x45c) 04:55:20 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x400200, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300)=0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7, 0x400) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000180)="4036d9b1167d239d630142239baa9cbb7f35cb116d52bf90d1be03e670e9c6866b72cf1de3384682863e13c56bcd96399aa38c3a139eaadc65607f00b61ba07774db14dca95596863a6bb1e86968bfe579d9cc4c66ee93b128489d7443e97275592da5a120981be870ed4ba96fbb537143bf4ea58eaf53b780cd1110dee0ef14ff7ed9990fc4c28760c2765d8e7b03312ad4d2b034fe381d6efdf53a78b223b30582e4") setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000100)=0x123098d, 0x4) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x8000) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, @null, @bpq0='bpq0\x00', 0xb905, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) close(r3) 04:55:20 executing program 3 (fault-call:4 fault-nth:14): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:20 executing program 1: 04:55:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x9, 0x60100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200, 0x80000000}, 0x90) close(r1) 04:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:55:20 executing program 1: 04:55:20 executing program 1: [ 349.127394][T11401] device nr0 entered promiscuous mode 04:55:21 executing program 2: 04:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:55:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x800) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={&(0x7f00000000c0)=[0x7, 0x7, 0x8f, 0x9, 0x8, 0x7fffffff], 0x6, 0x7, 0x7932, 0xfffffffffffffffe, 0xea2, 0x0, {0x1, 0x1ff, 0x6, 0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3, 0x7, 0x2, 0x7fff, 0x4, 0x77, 0x70, 0x7, "1d1027df855691514c01bb119b9520eadb01c7483eaa53f40a91eb90ec88822e"}}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x401, 0x400200) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000100)={0x1, 0x8000, @value=0x50}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000001c0)={0x25, "58bdf4de688942bab202555ccfc194f8ecbfac43b773f6115d9816f7f77594ac376fff9957e66e3769020caecf56c94dae1e233fc4e0c701a7be7c1414ec2d92eda5f6e83a845470e5609726932e2060a0124c9aa3631c6a64571b3530776880250c16a8aa8903fe90a6ce16f7e9b9889c84742d8cbc81de8303340cb20be63d"}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3, 0x73, 0x7, 0x3, 0x3}) 04:55:21 executing program 1: 04:55:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:21 executing program 1: 04:55:21 executing program 2: 04:55:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x40, 0x1, 0x7, 0x1}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0xff, @broadcast, 0x4e22, 0x3, 'wlc\x00', 0x11, 0x0, 0x29}, {@broadcast, 0x4e20, 0x0, 0x0, 0xc8, 0x800}}, 0x44) 04:55:21 executing program 1: 04:55:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r2) r3 = request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) keyctl$revoke(0x3, r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) close(r1) 04:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:55:21 executing program 2: socketpair(0x11, 0x3, 0x1ff, &(0x7f0000000000)) 04:55:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) [ 350.077943][T11435] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002 04:55:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x50c, 0x40) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x107000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/235) 04:55:22 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 04:55:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x900, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x3) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f00000000c0)={{0x80000001, 0xffffffffffffffff, 0x4, 0x1, 0x8001, 0x6d}, 0x5}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) close(r2) 04:55:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\a\x00'}, 0x45c) 04:55:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x23f}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="01050000000000000000fffd5621"], 0x1}}, 0x0) 04:55:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/209, 0xd1}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffec8, 0x0, 0x0, 0x800e00539) shutdown(r1, 0x0) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000040)=""/154, 0x9a}, {0x0}, {0x0}], 0x3) shutdown(r2, 0x0) 04:55:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffff, 0x400) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0)) 04:55:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000200)={r0, 0xfffffffffffffffe}) ioctl(r1, 0x0, &(0x7f00000002c0)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000300)={0x5, 0x1, {0x3, 0x3, 0x1f, 0x3, 0x5}}) close(r1) connect$unix(r1, &(0x7f0000000240)=@file={0x53339b564fa64a5e, './file0\x00'}, 0x6e) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10542, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x80000000, 0x30, 0x6, 0x100}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x9, 0x400}, 0x8) [ 350.712588][T11465] QAT: Invalid ioctl [ 350.730995][T11465] QAT: Invalid ioctl 04:55:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\b\x00'}, 0x45c) 04:55:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+10000}, {0x77359400}}) ioctl(r0, 0x100000001, &(0x7f0000000080)="e37053bcd3150f") close(r1) 04:55:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x101, 0x80) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x2) close(r1) 04:55:22 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="11dca5055e0bcfec7be070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10@\x1f(d4\xb9#\xd6t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x89P\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#\x9a\xa5\x19\xfe\xd9\xce\x8be\x17a\xb0\x9d\xc2\x03h\x18F\x87/\x8a\x907\x87\x05N\xa3\x06\xda\xfd;\xfc\xacw\r\x9fZ\xcf\xcc\x83\'\xd0\x9f\x18\xd5\xf9/Tq\xd0\xea\\\xfa\x0eq\x1d\xdf\xe0\xd1\xa2\xac\x7f.\xe4* \x1d.pL\xcd\xd6\x16Oy6\x1d\x11\x89\xfd\x00\xcc\x8bJ\xb8c\xb3\"\x83\xab\xe0\\Zn\xbf\xf0\xbb\xda\xe5K\x06:\n\xbd\x1fCh\x86A\x8c\xfdB\xcd\x11\xab\xeb\xf0\xa2`Z\xbb\xbcQ\x7f\x87\xfc(\xdd\xe2q(\x14\x87\xc8\x95m\xeb\x9d\x85}\xfd4M\xd4h\xf6\xc8L\xefS$m\x82\xb4\xdf\xca\xd0\xd6\xeb\t\xfa`\x04e\xed\x17\xaf\x13:\x0fOby\xcd\xc27\xdf:*\xeb\xbd\x11\xa7\xa7-\xdb\tw\xb3\xd8\xe0\xa5S\xf5o|\xb4\x05_\xec\x04\xe3\xa3\xe1\x91#\x12\xfb\xd8\x90\x97})Oc\x94>~4\xac\v\x0f\xf6\x99fI\x06\x96e\x9b/\'\xfd\xfb\x8d\x80\xb0\x1c\xac]\x84\tn$V\xa1\xf9,\xf65\xa5\xc7D\xb2|MA\x96\xe5u \x82\xe8z\x1ee\xffD\x12T%{\x0e\xb42\x88.\x89S\f\b\x97\xf1b\xc7z\xc4\xef\x8a\xda\x12\xb0I\x18\xd8\x82]\xc0\xd72Wx>>\xa9\x8b\'\x81\xe1\x1b\brn\xa0\xbe\xff\xc8\xfa\xab\xa8\x86x\x9a\xfd\xf7\'\x19\x8eR\xf59i\xcd\xe2\xb6\x10t\xdb,\x1a\x194\xfem\xe8\x0e\xf8<\xc4\xef]\xf09jn_\x92`Qe\x8a5se&\xfc7=k\xf5\xcc\x7f\xb6\x01\xc0\xd9X\xcb\xd6-\x97g\xda\"\x10\xc2\a\x93\x83O!#\x8a\x9ch-nW\xce<\xc0\xda<\xa74n\x94\x1e\xf0\x1f\x908\xddZ\xd7s\xdbN\xa0\xfe\x1e\xf2\xfd):\x93;y\x86y.\r\x9f\x97\x1b`\xd6Y\xb7\xec\xf3Z\xfa}\x9d\xb7\xb6\x8b\xa9\f\xad\x06mJ-\xb8\x05\xe9\x98\xcf7N\vv\x0f') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[&(0x7f0000000500)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#', &(0x7f0000000600)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#'], 0x0) setgroups(0x3e3, &(0x7f0000000000)) pread64(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x0, 0x3]}, &(0x7f0000000100)=0x8) socket$l2tp(0x18, 0x1, 0x1) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)={0x1, 0x3, [{r1, 0x0, 0x1000000000000, 0xfffffffffffff000}, {r1, 0x0, 0x0, 0xa000}, {r1, 0x0, 0xfffffffff0000000, 0xfffffffff1000000}]}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)={0x2}) [ 351.131410][T11489] FAULT_INJECTION: forcing a failure. [ 351.131410][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 351.192394][T11489] CPU: 1 PID: 11489 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 351.200325][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.210446][T11489] Call Trace: [ 351.213771][T11489] dump_stack+0x172/0x1f0 [ 351.218127][T11489] should_fail.cold+0xa/0x15 [ 351.222737][T11489] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 351.228582][T11489] ? hci_unregister_dev+0x6ac/0x820 [ 351.233811][T11489] ? hci_unregister_dev+0x6bc/0x820 [ 351.239483][T11489] __should_failslab+0x121/0x190 [ 351.244453][T11489] should_failslab+0x9/0x14 [ 351.248977][T11489] kmem_cache_alloc_node+0x56/0x710 [ 351.254198][T11489] ? lock_downgrade+0x880/0x880 [ 351.259076][T11489] __alloc_skb+0xd5/0x5e0 [ 351.263421][T11489] ? skb_trim+0x190/0x190 [ 351.267773][T11489] ? mgmt_index_removed+0x18f/0x2c0 [ 351.272991][T11489] ? wait_for_completion+0x440/0x440 [ 351.278304][T11489] hci_sock_dev_event+0xf3/0x580 [ 351.283256][T11489] hci_unregister_dev+0x253/0x820 [ 351.288299][T11489] vhci_release+0x76/0xf0 [ 351.292648][T11489] __fput+0x2ff/0x890 [ 351.296653][T11489] ? vhci_close_dev+0x50/0x50 [ 351.301343][T11489] ____fput+0x16/0x20 [ 351.305432][T11489] task_work_run+0x145/0x1c0 [ 351.310048][T11489] exit_to_usermode_loop+0x273/0x2c0 [ 351.315354][T11489] do_syscall_64+0x58e/0x680 [ 351.319999][T11489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.325900][T11489] RIP: 0033:0x4592c9 [ 351.329900][T11489] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.349527][T11489] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 351.357962][T11489] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 351.365956][T11489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 351.373945][T11489] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 351.381937][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 351.389928][T11489] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) close(r2) 04:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00@\x00'}, 0x45c) 04:55:23 executing program 2: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000b67000), &(0x7f0000000100)=0xfffffe85) 04:55:23 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000540)={0x20, 0x6, 0x3, 0x61e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}]}) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x121200, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) membarrier(0x44, 0x0) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000007f000000b40c00000700000000000000050000000000000006000000000000000200000000000000000000000000000000000000000000000000000000000000000800000100010080000000000000000000008000000000070000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b7a8ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/576]) 04:55:23 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 351.621617][T11501] FAULT_INJECTION: forcing a failure. [ 351.621617][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 351.680898][T11501] CPU: 1 PID: 11501 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 351.688776][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.688784][T11501] Call Trace: [ 351.688816][T11501] dump_stack+0x172/0x1f0 [ 351.688846][T11501] should_fail.cold+0xa/0x15 [ 351.711156][T11501] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 351.716998][T11501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.723250][T11501] ? should_fail+0x1de/0x852 [ 351.727875][T11501] __should_failslab+0x121/0x190 [ 351.732836][T11501] should_failslab+0x9/0x14 [ 351.737356][T11501] kmem_cache_alloc_node_trace+0x5a/0x720 [ 351.737398][T11501] __kmalloc_node_track_caller+0x3d/0x70 [ 351.748781][T11501] __kmalloc_reserve.isra.0+0x40/0xf0 [ 351.754169][T11501] __alloc_skb+0x10b/0x5e0 [ 351.754185][T11501] ? skb_trim+0x190/0x190 [ 351.754201][T11501] ? mgmt_index_removed+0x18f/0x2c0 [ 351.754221][T11501] ? wait_for_completion+0x440/0x440 [ 351.754245][T11501] hci_sock_dev_event+0xf3/0x580 [ 351.778436][T11501] hci_unregister_dev+0x253/0x820 [ 351.783495][T11501] vhci_release+0x76/0xf0 [ 351.787839][T11501] __fput+0x2ff/0x890 [ 351.791844][T11501] ? vhci_close_dev+0x50/0x50 [ 351.796542][T11501] ____fput+0x16/0x20 [ 351.800540][T11501] task_work_run+0x145/0x1c0 [ 351.805257][T11501] exit_to_usermode_loop+0x273/0x2c0 [ 351.810577][T11501] do_syscall_64+0x58e/0x680 [ 351.815203][T11501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.821110][T11501] RIP: 0033:0x4592c9 [ 351.825019][T11501] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.844732][T11501] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 351.853180][T11501] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 351.861232][T11501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 351.869219][T11501] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:55:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) sendfile(r0, r1, 0x0, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00`\x87\x00'}, 0x45c) 04:55:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x0, 0x2000072a8069b}}, 0x8) listen(r0, 0x0) [ 351.877204][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 351.885188][T11501] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1000, 0x400000) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2040) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @local}}, 0xd53, 0x9, 0x1, 0x8, 0x20}, &(0x7f0000000240)=0x98) 04:55:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x103000, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) 04:55:23 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000180)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}, 0x200000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2080, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000100)) 04:55:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x7f\xff\xff\xff\x00'}, 0x45c) 04:55:24 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x400) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x3, @local}}, 0x1e) ioctl$TIOCSBRK(r2, 0x5427) 04:55:24 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 352.701111][T11539] FAULT_INJECTION: forcing a failure. [ 352.701111][T11539] name failslab, interval 1, probability 0, space 0, times 0 [ 352.701136][T11539] CPU: 1 PID: 11539 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 352.721872][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.731937][T11539] Call Trace: [ 352.735246][T11539] dump_stack+0x172/0x1f0 [ 352.735270][T11539] should_fail.cold+0xa/0x15 [ 352.735288][T11539] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 352.735309][T11539] ? ___might_sleep+0x163/0x280 [ 352.735333][T11539] __should_failslab+0x121/0x190 [ 352.759818][T11539] should_failslab+0x9/0x14 [ 352.764340][T11539] kmem_cache_alloc_trace+0x2ce/0x750 [ 352.769723][T11539] ? kasan_check_write+0x14/0x20 [ 352.774950][T11539] kobject_uevent_env+0x387/0x101d [ 352.774972][T11539] ? wait_for_completion+0x440/0x440 [ 352.774992][T11539] kobject_uevent+0x20/0x26 [ 352.775009][T11539] device_del+0x74b/0xc30 [ 352.775029][T11539] ? __device_links_no_driver+0x250/0x250 04:55:24 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x20000) bind$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0x19, 0x1, 0x3f, 0x80000001, 0x3, 0xff}) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz0\x00', {0x99c3, 0x5, 0x79b, 0x80}, 0x57, [0x7ff, 0x2, 0x55d3, 0x50, 0x9, 0x1, 0x6, 0xfffffffffffffffe, 0x2, 0x80000000, 0x4, 0x400, 0x1ff, 0x4, 0x7, 0x2, 0x5, 0x4, 0x4, 0x8, 0x5634, 0x4, 0x10001, 0x7fff, 0x3ff, 0x2, 0x3e5cfffb, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x800, 0x9, 0xfff, 0x7, 0x6, 0x7, 0x9, 0xc8e, 0x4, 0x6, 0xd4, 0x1, 0x8000, 0xffffffff, 0xfff, 0x2, 0x2, 0x0, 0x9, 0xfb3d, 0x1, 0x4, 0x7ff, 0x2, 0x4, 0x7ff, 0x3, 0xffffffff, 0xd99, 0x5, 0x63, 0x6, 0x5], [0x0, 0x7, 0x8, 0x5, 0xfffffffffffffff8, 0x10000, 0xffffffff, 0xfffffffffffff000, 0x6, 0x0, 0x400, 0x6, 0x1000, 0xdd2, 0xca8e, 0x3, 0xaa, 0x3, 0x100, 0x80000001, 0x4, 0x3, 0x0, 0x9853, 0xff, 0x0, 0x8001, 0x80000000, 0x6, 0x5f, 0xa9f1, 0x9, 0x5, 0x200, 0x8, 0x80000001, 0x3ff, 0x7, 0x3ff, 0x20, 0x8000, 0x0, 0x404, 0x0, 0x2, 0x3f, 0x0, 0x49d8, 0x8, 0x8000, 0x70, 0x4, 0x100000001, 0x9, 0x8, 0x6, 0x1, 0xc03, 0x310, 0x8, 0x6, 0x3, 0x1, 0xfff], [0x8, 0x6, 0x64, 0x1, 0x0, 0xb1, 0x5, 0x9, 0x0, 0x1f, 0x7fffffff, 0x6, 0x1, 0x71, 0x8, 0x10001, 0x8, 0x2, 0x6, 0x80000001, 0x101, 0x8, 0x5, 0x5, 0x8000, 0xb70, 0x8000, 0x0, 0x1, 0x7fffffff, 0x1, 0x0, 0x9, 0x5, 0x6, 0x2, 0xffff, 0x80, 0xa9c, 0x56b6, 0xff, 0x1000, 0x26205a1b, 0x4, 0x9, 0x40, 0x8000, 0x7, 0x5, 0x3fe800, 0x81, 0x3c, 0x1, 0x800, 0x3cf, 0x0, 0x0, 0x1, 0x1f5d, 0x7, 0x8, 0x6, 0x5], [0x8, 0x8, 0x9, 0x7, 0x4, 0x10000, 0x6, 0x17, 0x4, 0x7fffffff, 0xfffffffffffffff7, 0x1, 0x8, 0x4, 0xf732, 0x8000, 0x4000000000000000, 0x7fffffff, 0x7fffffff, 0xffffffffffff8001, 0x6, 0x9, 0x920, 0x3, 0x6, 0x3, 0x4, 0xffff, 0x6, 0xffffffff, 0x8, 0x586, 0x3, 0x6, 0x5, 0x0, 0x70e5, 0xa2, 0x6, 0x1, 0x3, 0x101, 0x101, 0x10000, 0x6, 0x6, 0x5, 0x6, 0x3, 0x1, 0x2, 0x3, 0x8, 0x7, 0x20, 0xfffffffffffffff8, 0x4740, 0x200, 0x9, 0x40, 0x100, 0x4, 0xfffffffffffffffe, 0x9]}, 0x45c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x10001, 0x1, 0x1, 0x800, 0x4, 0x3, 0x7, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x0, 0x1f, 0x1, r3}, &(0x7f0000000240)=0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000002c0)=0x20, 0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x471c1, 0x0, 0xfffffffffffffed7) [ 352.775054][T11539] rfkill_unregister+0xd1/0x2c0 [ 352.799989][T11539] hci_unregister_dev+0x287/0x820 [ 352.800015][T11539] vhci_release+0x76/0xf0 [ 352.800038][T11539] __fput+0x2ff/0x890 [ 352.809924][T11539] ? vhci_close_dev+0x50/0x50 [ 352.809944][T11539] ____fput+0x16/0x20 [ 352.809967][T11539] task_work_run+0x145/0x1c0 [ 352.831499][T11539] exit_to_usermode_loop+0x273/0x2c0 [ 352.831521][T11539] do_syscall_64+0x58e/0x680 [ 352.831550][T11539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.847463][T11539] RIP: 0033:0x4592c9 [ 352.847482][T11539] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.847490][T11539] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 352.847503][T11539] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 352.847512][T11539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 04:55:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\xff\xff\xff\xff\x87`\x00'}, 0x45c) [ 352.847520][T11539] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 352.847528][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 352.847536][T11539] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x82) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x121041, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) write$apparmor_exec(r3, &(0x7f0000000100)={'stack ', '/dev/vhci\x00'}, 0x10) close(r1) 04:55:24 executing program 1 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x2f0, 0xfffffffffffffff9) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000240)={@rand_addr, @empty}, &(0x7f0000000280)=0x8) flistxattr(r1, &(0x7f0000000180)=""/138, 0x8a) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffffffffffff, 0x80000000200880) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) syz_open_procfs(r2, &(0x7f0000000080)='fd\x00') 04:55:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, 0x45c) [ 353.337023][T11563] FAULT_INJECTION: forcing a failure. [ 353.337023][T11563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.350561][T11563] CPU: 0 PID: 11563 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 353.358468][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.368629][T11563] Call Trace: [ 353.371961][T11563] dump_stack+0x172/0x1f0 [ 353.376316][T11563] should_fail.cold+0xa/0x15 [ 353.380923][T11563] ? console_unlock+0x781/0xec0 [ 353.385791][T11563] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 353.391628][T11563] should_fail_alloc_page+0x50/0x60 [ 353.396843][T11563] __alloc_pages_nodemask+0x1a1/0x8d0 [ 353.402233][T11563] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 353.407981][T11563] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 353.413809][T11563] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 353.419456][T11563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.425716][T11563] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 353.431811][T11563] cache_grow_begin+0x9d/0x650 [ 353.436691][T11563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.442944][T11563] kmem_cache_alloc_trace+0x67c/0x750 [ 353.448356][T11563] ? kasan_check_write+0x14/0x20 [ 353.453327][T11563] kobject_uevent_env+0x387/0x101d [ 353.458456][T11563] ? wait_for_completion+0x440/0x440 [ 353.463764][T11563] kobject_uevent+0x20/0x26 [ 353.468291][T11563] device_del+0x74b/0xc30 [ 353.472640][T11563] ? __device_links_no_driver+0x250/0x250 [ 353.478380][T11563] rfkill_unregister+0xd1/0x2c0 [ 353.483260][T11563] hci_unregister_dev+0x287/0x820 [ 353.488306][T11563] vhci_release+0x76/0xf0 [ 353.492738][T11563] __fput+0x2ff/0x890 [ 353.496733][T11563] ? vhci_close_dev+0x50/0x50 [ 353.501424][T11563] ____fput+0x16/0x20 [ 353.505507][T11563] task_work_run+0x145/0x1c0 [ 353.510141][T11563] exit_to_usermode_loop+0x273/0x2c0 [ 353.515455][T11563] do_syscall_64+0x58e/0x680 [ 353.520062][T11563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.525959][T11563] RIP: 0033:0x4592c9 [ 353.529903][T11563] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.549521][T11563] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 353.557943][T11563] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 353.566624][T11563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 353.574609][T11563] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.574618][T11563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 353.574626][T11563] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, 0x0, 0x0) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:25 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x20000) bind$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0x19, 0x1, 0x3f, 0x80000001, 0x3, 0xff}) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz0\x00', {0x99c3, 0x5, 0x79b, 0x80}, 0x57, [0x7ff, 0x2, 0x55d3, 0x50, 0x9, 0x1, 0x6, 0xfffffffffffffffe, 0x2, 0x80000000, 0x4, 0x400, 0x1ff, 0x4, 0x7, 0x2, 0x5, 0x4, 0x4, 0x8, 0x5634, 0x4, 0x10001, 0x7fff, 0x3ff, 0x2, 0x3e5cfffb, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0x800, 0x9, 0xfff, 0x7, 0x6, 0x7, 0x9, 0xc8e, 0x4, 0x6, 0xd4, 0x1, 0x8000, 0xffffffff, 0xfff, 0x2, 0x2, 0x0, 0x9, 0xfb3d, 0x1, 0x4, 0x7ff, 0x2, 0x4, 0x7ff, 0x3, 0xffffffff, 0xd99, 0x5, 0x63, 0x6, 0x5], [0x0, 0x7, 0x8, 0x5, 0xfffffffffffffff8, 0x10000, 0xffffffff, 0xfffffffffffff000, 0x6, 0x0, 0x400, 0x6, 0x1000, 0xdd2, 0xca8e, 0x3, 0xaa, 0x3, 0x100, 0x80000001, 0x4, 0x3, 0x0, 0x9853, 0xff, 0x0, 0x8001, 0x80000000, 0x6, 0x5f, 0xa9f1, 0x9, 0x5, 0x200, 0x8, 0x80000001, 0x3ff, 0x7, 0x3ff, 0x20, 0x8000, 0x0, 0x404, 0x0, 0x2, 0x3f, 0x0, 0x49d8, 0x8, 0x8000, 0x70, 0x4, 0x100000001, 0x9, 0x8, 0x6, 0x1, 0xc03, 0x310, 0x8, 0x6, 0x3, 0x1, 0xfff], [0x8, 0x6, 0x64, 0x1, 0x0, 0xb1, 0x5, 0x9, 0x0, 0x1f, 0x7fffffff, 0x6, 0x1, 0x71, 0x8, 0x10001, 0x8, 0x2, 0x6, 0x80000001, 0x101, 0x8, 0x5, 0x5, 0x8000, 0xb70, 0x8000, 0x0, 0x1, 0x7fffffff, 0x1, 0x0, 0x9, 0x5, 0x6, 0x2, 0xffff, 0x80, 0xa9c, 0x56b6, 0xff, 0x1000, 0x26205a1b, 0x4, 0x9, 0x40, 0x8000, 0x7, 0x5, 0x3fe800, 0x81, 0x3c, 0x1, 0x800, 0x3cf, 0x0, 0x0, 0x1, 0x1f5d, 0x7, 0x8, 0x6, 0x5], [0x8, 0x8, 0x9, 0x7, 0x4, 0x10000, 0x6, 0x17, 0x4, 0x7fffffff, 0xfffffffffffffff7, 0x1, 0x8, 0x4, 0xf732, 0x8000, 0x4000000000000000, 0x7fffffff, 0x7fffffff, 0xffffffffffff8001, 0x6, 0x9, 0x920, 0x3, 0x6, 0x3, 0x4, 0xffff, 0x6, 0xffffffff, 0x8, 0x586, 0x3, 0x6, 0x5, 0x0, 0x70e5, 0xa2, 0x6, 0x1, 0x3, 0x101, 0x101, 0x10000, 0x6, 0x6, 0x5, 0x6, 0x3, 0x1, 0x2, 0x3, 0x8, 0x7, 0x20, 0xfffffffffffffff8, 0x4740, 0x200, 0x9, 0x40, 0x100, 0x4, 0xfffffffffffffffe, 0x9]}, 0x45c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x10001, 0x1, 0x1, 0x800, 0x4, 0x3, 0x7, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x0, 0x1f, 0x1, r3}, &(0x7f0000000240)=0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000002c0)=0x20, 0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x471c1, 0x0, 0xfffffffffffffed7) 04:55:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socket$alg(0x26, 0x5, 0x0) close(r1) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x8, 0x1, 0x6}}, 0x14) 04:55:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x45c) 04:55:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "21c1ff63de26144a4a3bfb756e32a0bbde42066ab113421219c74d188d8ea94b24de791d01d74e300d8259dd55e03acabff65ec42459db52c54280fcf89128a3ffc278038a970d2bbf4877796ae67dbd"}, 0x51) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:25 executing program 1 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 354.099341][T11576] FAULT_INJECTION: forcing a failure. [ 354.099341][T11576] name failslab, interval 1, probability 0, space 0, times 0 [ 354.143965][T11576] CPU: 0 PID: 11576 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 354.152113][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.162233][T11576] Call Trace: [ 354.165579][T11576] dump_stack+0x172/0x1f0 [ 354.169983][T11576] should_fail.cold+0xa/0x15 [ 354.174695][T11576] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 354.180612][T11576] ? ___might_sleep+0x163/0x280 [ 354.185490][T11576] __should_failslab+0x121/0x190 [ 354.185513][T11576] should_failslab+0x9/0x14 [ 354.185526][T11576] __kmalloc+0x2d9/0x740 [ 354.185550][T11576] ? kobject_uevent_env+0x387/0x101d [ 354.204513][T11576] ? rcu_read_lock_sched_held+0x110/0x130 [ 354.210259][T11576] ? kobject_get_path+0xc4/0x1b0 [ 354.215213][T11576] kobject_get_path+0xc4/0x1b0 [ 354.215234][T11576] kobject_uevent_env+0x3ab/0x101d [ 354.215260][T11576] ? wait_for_completion+0x440/0x440 [ 354.215283][T11576] kobject_uevent+0x20/0x26 [ 354.225884][T11576] device_del+0x74b/0xc30 04:55:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x45c) [ 354.225904][T11576] ? __device_links_no_driver+0x250/0x250 [ 354.225930][T11576] rfkill_unregister+0xd1/0x2c0 [ 354.225948][T11576] hci_unregister_dev+0x287/0x820 [ 354.225969][T11576] vhci_release+0x76/0xf0 [ 354.225986][T11576] __fput+0x2ff/0x890 [ 354.226002][T11576] ? vhci_close_dev+0x50/0x50 [ 354.226026][T11576] ____fput+0x16/0x20 [ 354.247585][T11576] task_work_run+0x145/0x1c0 [ 354.247609][T11576] exit_to_usermode_loop+0x273/0x2c0 [ 354.247636][T11576] do_syscall_64+0x58e/0x680 [ 354.265866][T11576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.265880][T11576] RIP: 0033:0x4592c9 [ 354.265897][T11576] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.265905][T11576] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 354.274579][T11576] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 354.274588][T11576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 354.274596][T11576] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.274605][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 354.274613][T11576] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:55:26 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@alg={0xf8, 0x10, 0x304, 0x70bd2b, 0x8, {{'sm3-generic\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x100000000}]}, 0xf8}, 0x1, 0x0, 0x0, 0xd0}, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x0}) 04:55:26 executing program 5: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@generic={0x1, 0xffffffffffffffff, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:26 executing program 1 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0x4, {0xf6f, 0x4, 0x400, 0x5}}) close(r1) [ 354.693556][T11597] FAULT_INJECTION: forcing a failure. [ 354.693556][T11597] name failslab, interval 1, probability 0, space 0, times 0 [ 354.738605][T11597] CPU: 1 PID: 11597 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 354.746485][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.756566][T11597] Call Trace: [ 354.759892][T11597] dump_stack+0x172/0x1f0 [ 354.764273][T11597] should_fail.cold+0xa/0x15 [ 354.769008][T11597] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 354.774922][T11597] ? ___might_sleep+0x163/0x280 [ 354.779884][T11597] __should_failslab+0x121/0x190 [ 354.784853][T11597] should_failslab+0x9/0x14 [ 354.789368][T11597] kmem_cache_alloc_node+0x261/0x710 [ 354.794667][T11597] ? find_held_lock+0x35/0x130 [ 354.794691][T11597] __alloc_skb+0xd5/0x5e0 [ 354.794705][T11597] ? skb_trim+0x190/0x190 [ 354.794724][T11597] ? rcu_read_unlock_special+0xf3/0x210 [ 354.794752][T11597] alloc_uevent_skb+0x83/0x1e2 [ 354.794772][T11597] kobject_uevent_env+0xaa3/0x101d [ 354.803882][T11597] ? wait_for_completion+0x440/0x440 [ 354.829427][T11597] kobject_uevent+0x20/0x26 [ 354.834025][T11597] device_del+0x74b/0xc30 [ 354.839162][T11597] ? __device_links_no_driver+0x250/0x250 [ 354.845055][T11597] rfkill_unregister+0xd1/0x2c0 [ 354.849921][T11597] hci_unregister_dev+0x287/0x820 [ 354.855226][T11597] vhci_release+0x76/0xf0 [ 354.859564][T11597] __fput+0x2ff/0x890 [ 354.863577][T11597] ? vhci_close_dev+0x50/0x50 [ 354.868273][T11597] ____fput+0x16/0x20 [ 354.872268][T11597] task_work_run+0x145/0x1c0 [ 354.876887][T11597] exit_to_usermode_loop+0x273/0x2c0 [ 354.882193][T11597] do_syscall_64+0x58e/0x680 [ 354.886813][T11597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.893256][T11597] RIP: 0033:0x4592c9 [ 354.897147][T11597] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.917437][T11597] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 354.926446][T11597] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 354.934515][T11597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 354.942494][T11597] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.950478][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 354.958472][T11597] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, 0x0, 0x0) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:55:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x970, 0x408200) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x40000002c, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002b008163e45ae08700000000080f0000000000bc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) 04:55:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x370, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x408}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x1a4, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff00000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc305}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd13}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e9e}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x123}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f76b5bc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63cd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff8000000000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68b5}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd45}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:26 executing program 1 (fault-call:4 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xa080) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f00000000c0)={0x1, 0xc01, 0x30}) close(r1) write$vhci(r2, &(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, "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"}, 0x1001) [ 355.237272][T11610] FAULT_INJECTION: forcing a failure. [ 355.237272][T11610] name failslab, interval 1, probability 0, space 0, times 0 [ 355.288960][T11610] CPU: 1 PID: 11610 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 355.296833][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.306893][T11610] Call Trace: [ 355.310208][T11610] dump_stack+0x172/0x1f0 [ 355.314570][T11610] should_fail.cold+0xa/0x15 [ 355.319182][T11610] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 355.325035][T11610] ? ___might_sleep+0x163/0x280 [ 355.329906][T11610] __should_failslab+0x121/0x190 [ 355.334855][T11610] should_failslab+0x9/0x14 [ 355.334872][T11610] kmem_cache_alloc_node_trace+0x26d/0x720 [ 355.334899][T11610] __kmalloc_node_track_caller+0x3d/0x70 [ 355.334919][T11610] __kmalloc_reserve.isra.0+0x40/0xf0 [ 355.334938][T11610] __alloc_skb+0x10b/0x5e0 [ 355.345249][T11610] ? skb_trim+0x190/0x190 [ 355.345269][T11610] ? kasan_check_read+0x11/0x20 [ 355.345291][T11610] alloc_uevent_skb+0x83/0x1e2 [ 355.345311][T11610] kobject_uevent_env+0xaa3/0x101d [ 355.345330][T11610] ? wait_for_completion+0x440/0x440 [ 355.345352][T11610] kobject_uevent+0x20/0x26 [ 355.389786][T11610] device_del+0x74b/0xc30 [ 355.394139][T11610] ? __device_links_no_driver+0x250/0x250 [ 355.399897][T11610] rfkill_unregister+0xd1/0x2c0 [ 355.404770][T11610] hci_unregister_dev+0x287/0x820 [ 355.409807][T11610] vhci_release+0x76/0xf0 [ 355.414147][T11610] __fput+0x2ff/0x890 [ 355.418135][T11610] ? vhci_close_dev+0x50/0x50 [ 355.422820][T11610] ____fput+0x16/0x20 [ 355.426810][T11610] task_work_run+0x145/0x1c0 [ 355.431594][T11610] exit_to_usermode_loop+0x273/0x2c0 [ 355.436895][T11610] do_syscall_64+0x58e/0x680 [ 355.441495][T11610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.447395][T11610] RIP: 0033:0x4592c9 [ 355.451296][T11610] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.470916][T11610] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 355.479359][T11610] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 04:55:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7be070") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create(0x420000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0xa0000014}) dup3(r1, r3, 0x0) 04:55:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x45c) [ 355.487350][T11610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 355.495340][T11610] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 355.503325][T11610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 355.511309][T11610] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x121001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000180)={0x7, {0x6, 0x3, 0x401}}) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000300)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0xfff}, 0x0, 0x0, 0x3, 0x3}}, {&(0x7f00000001c0)=""/229, 0xe5}, &(0x7f00000002c0), 0x54}, 0xa0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, 0xa0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000440)=0x68c3) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000400)={0x24, 0x37, 0x1, {0x2, 0xf9a3, 0x7ff, r4, 0x6, 'vmnet1'}}, 0x24) 04:55:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x45c) 04:55:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000180)=0xff) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, 0x0, 0x0) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:55:28 executing program 1 (fault-call:4 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x45c) 04:55:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x48c6, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1004) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x4, 0x6, 0x6, 0x6}, {0x6, 0x0, 0x4, 0x2f64}, {0x20, 0x3b, 0x0, 0x5}, {0x7fff, 0x39a, 0x400, 0x400}]}, 0x10) [ 356.318278][T11654] FAULT_INJECTION: forcing a failure. [ 356.318278][T11654] name failslab, interval 1, probability 0, space 0, times 0 [ 356.379608][T11654] CPU: 1 PID: 11654 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 356.387479][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.397733][T11654] Call Trace: [ 356.401059][T11654] dump_stack+0x172/0x1f0 [ 356.405414][T11654] should_fail.cold+0xa/0x15 [ 356.410044][T11654] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 356.415898][T11654] ? ___might_sleep+0x163/0x280 [ 356.420788][T11654] __should_failslab+0x121/0x190 [ 356.425769][T11654] should_failslab+0x9/0x14 [ 356.430296][T11654] kmem_cache_alloc_trace+0x2ce/0x750 [ 356.435721][T11654] ? mutex_trylock+0x1e0/0x1e0 [ 356.440502][T11654] ? kasan_check_write+0x14/0x20 [ 356.445467][T11654] kobject_uevent_env+0x387/0x101d [ 356.450603][T11654] ? wait_for_completion+0x440/0x440 [ 356.455915][T11654] ? software_node_notify+0xfd/0x2ed [ 356.461233][T11654] kobject_uevent+0x20/0x26 [ 356.465786][T11654] device_del+0x74b/0xc30 [ 356.470135][T11654] ? __device_links_no_driver+0x250/0x250 [ 356.475879][T11654] ? kobject_put+0x84/0xe0 [ 356.480320][T11654] hci_unregister_dev+0x2c6/0x820 [ 356.485374][T11654] vhci_release+0x76/0xf0 [ 356.489730][T11654] __fput+0x2ff/0x890 [ 356.493753][T11654] ? vhci_close_dev+0x50/0x50 [ 356.498454][T11654] ____fput+0x16/0x20 [ 356.502450][T11654] task_work_run+0x145/0x1c0 [ 356.507062][T11654] exit_to_usermode_loop+0x273/0x2c0 [ 356.512369][T11654] do_syscall_64+0x58e/0x680 [ 356.516986][T11654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.523015][T11654] RIP: 0033:0x4592c9 [ 356.526949][T11654] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.546577][T11654] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 356.555017][T11654] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 356.563017][T11654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 356.571017][T11654] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:55:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000000c0)={0x4, 0x2}) 04:55:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000180)=""/197, &(0x7f00000000c0)=0xc5) 04:55:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x45c) [ 356.579017][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 356.587002][T11654] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000000, 0x18000) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)="716d66b2258ac995db245ee3bdaed7291126e0361f7d060a6a1b12d01ecd420505cd46fc79b594e3aaa0e6328d305fd6319a796a69c390e829670356eea3ee8d37d37e47b3ca0609e59b845bdb322217cb3a59830441a0", 0x57) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0xffff}, &(0x7f0000000100)=0x8) memfd_create(&(0x7f0000000180)='/dev/midi#\x00', 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x1, 0x30}, 0x3c7) 04:55:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}, 0x45c) 04:55:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x0) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:29 executing program 1 (fault-call:4 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x3, 0x1000, 0x8, 0x1, 0x1}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x23) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x802) fsmount(r2, 0x1, 0x72) 04:55:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 04:55:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00`\x87\xff\xff\xff\xff\x00'}, 0x45c) 04:55:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) lseek(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x1}], 0x23e3, 0x0) 04:55:29 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xba, 0x200000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200000) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x37d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'hsr0\x00'}}, 0x1e) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x2, 0x7, @name="1426def1c50025b83240840c0490471de23460d3771c85d786f529e7871b2d7d"}) [ 357.329141][T11686] FAULT_INJECTION: forcing a failure. [ 357.329141][T11686] name failslab, interval 1, probability 0, space 0, times 0 04:55:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x02\x00'}, 0x45c) [ 357.395555][T11686] CPU: 0 PID: 11686 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 357.403429][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.413505][T11686] Call Trace: [ 357.416825][T11686] dump_stack+0x172/0x1f0 [ 357.421280][T11686] should_fail.cold+0xa/0x15 [ 357.425891][T11686] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 357.431724][T11686] ? ___might_sleep+0x163/0x280 [ 357.436616][T11686] __should_failslab+0x121/0x190 [ 357.441577][T11686] should_failslab+0x9/0x14 [ 357.446091][T11686] kmem_cache_alloc_trace+0x2ce/0x750 [ 357.451476][T11686] ? mutex_trylock+0x1e0/0x1e0 [ 357.451493][T11686] ? kasan_check_write+0x14/0x20 [ 357.451525][T11686] kobject_uevent_env+0x387/0x101d [ 357.466409][T11686] ? wait_for_completion+0x440/0x440 [ 357.471719][T11686] ? software_node_notify+0xfd/0x2ed [ 357.471742][T11686] kobject_uevent+0x20/0x26 [ 357.471771][T11686] device_del+0x74b/0xc30 [ 357.485909][T11686] ? __device_links_no_driver+0x250/0x250 [ 357.491642][T11686] ? kobject_put+0x84/0xe0 [ 357.496087][T11686] hci_unregister_dev+0x2c6/0x820 [ 357.501135][T11686] vhci_release+0x76/0xf0 [ 357.505483][T11686] __fput+0x2ff/0x890 [ 357.509486][T11686] ? vhci_close_dev+0x50/0x50 [ 357.514182][T11686] ____fput+0x16/0x20 [ 357.518179][T11686] task_work_run+0x145/0x1c0 [ 357.522796][T11686] exit_to_usermode_loop+0x273/0x2c0 [ 357.528184][T11686] do_syscall_64+0x58e/0x680 [ 357.532791][T11686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.532804][T11686] RIP: 0033:0x4592c9 04:55:29 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:55:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(&(0x7f00000000c0)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x101) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 357.532821][T11686] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.532836][T11686] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 357.570638][T11686] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 357.578625][T11686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 357.578633][T11686] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 357.578641][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 357.578650][T11686] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) 04:55:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x03\x00'}, 0x45c) 04:55:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x0) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:30 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = geteuid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x20002, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, 'selinux'}}, {@measure='measure'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000080)={r3, 0xdc7}) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0xffe) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)={0x1, 0x4, 0x80, {0x77359400}, {0x77359400}, {0x4, 0x7, 0x4}, 0x1, @canfd={{0x1, 0x7, 0x6a5, 0x8}, 0x12, 0x2, 0x0, 0x0, "dd560a3e68a8c140257b51e8eb46578f81fa430338875d67737e0c086bf7063605c2dc10376b7f7e30e5c36c162d6bffafc292c364810985d0e650b9c612a0ab"}}, 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x40040) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f0000000100)={0x0, 0x6}) close(r4) 04:55:30 executing program 1 (fault-call:4 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team0\x00', 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) fcntl$lock(r0, 0x26, &(0x7f0000000740)={0x3, 0x3, 0x6, 0x8e, r2}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x541002, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x80000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000160000,user_id=', @ANYRESDEC=r4, @ANYBLOB="2c8c166a9c81c5f7e03d", @ANYRESDEC=r5, @ANYBLOB=',allow_other,blksize=0x0000000000000000,blksize=0x0000000000001000,blksize=0x0000000000001600,seclabel,uid>', @ANYRESDEC=r6, @ANYBLOB=',fsmagic=0x0000000000000002,uid=', @ANYRESDEC=r7, @ANYBLOB=',\x00']) 04:55:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x04\x00'}, 0x45c) [ 358.392020][T11725] FAULT_INJECTION: forcing a failure. [ 358.392020][T11725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.405317][T11725] CPU: 1 PID: 11725 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 358.413220][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.423296][T11725] Call Trace: [ 358.426610][T11725] dump_stack+0x172/0x1f0 [ 358.430967][T11725] should_fail.cold+0xa/0x15 [ 358.435583][T11725] ? console_unlock+0x781/0xec0 [ 358.440472][T11725] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 358.440494][T11725] ? mark_held_locks+0xf0/0xf0 [ 358.440518][T11725] should_fail_alloc_page+0x50/0x60 [ 358.456273][T11725] __alloc_pages_nodemask+0x1a1/0x8d0 [ 358.461663][T11725] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 358.467316][T11725] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 358.473044][T11725] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 358.478686][T11725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.478711][T11725] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 358.478733][T11725] cache_grow_begin+0x9d/0x650 [ 358.495577][T11725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.501838][T11725] kmem_cache_alloc_trace+0x67c/0x750 [ 358.507217][T11725] ? mutex_trylock+0x1e0/0x1e0 [ 358.507232][T11725] ? kasan_check_write+0x14/0x20 [ 358.507267][T11725] kobject_uevent_env+0x387/0x101d [ 358.522064][T11725] ? wait_for_completion+0x440/0x440 [ 358.527369][T11725] ? software_node_notify+0xfd/0x2ed [ 358.532678][T11725] kobject_uevent+0x20/0x26 [ 358.537205][T11725] device_del+0x74b/0xc30 [ 358.541551][T11725] ? __device_links_no_driver+0x250/0x250 [ 358.547295][T11725] ? kobject_put+0x84/0xe0 [ 358.551741][T11725] hci_unregister_dev+0x2c6/0x820 [ 358.556806][T11725] vhci_release+0x76/0xf0 [ 358.561153][T11725] __fput+0x2ff/0x890 [ 358.565173][T11725] ? vhci_close_dev+0x50/0x50 [ 358.569871][T11725] ____fput+0x16/0x20 [ 358.573871][T11725] task_work_run+0x145/0x1c0 [ 358.578487][T11725] exit_to_usermode_loop+0x273/0x2c0 [ 358.583803][T11725] do_syscall_64+0x58e/0x680 [ 358.588415][T11725] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.594320][T11725] RIP: 0033:0x4592c9 [ 358.598226][T11725] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.617853][T11725] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 358.626294][T11725] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 358.634290][T11725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 04:55:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x05\x00'}, 0x45c) 04:55:30 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) tee(r0, r0, 0xfffffffffffeffff, 0x5) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@empty, @multicast1}, &(0x7f0000000200)=0xffffffffffffff18) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000002000/0x4000)=nil, 0xf05000, 0xf) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200001, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev}, &(0x7f0000000080)=0xfe1f) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x100000001, 0x200) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="696bbf0afb40"}, 0x10) 04:55:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8000) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) [ 358.642281][T11725] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 358.650273][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 358.658260][T11725] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x100) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:30 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) memfd_create(0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x6}, 0x2) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) socket$pppoe(0x18, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x73, @local, 0x4e20, 0x3, 'ovf\x00', 0x12, 0x4, 0x5}, 0x2c) 04:55:30 executing program 1 (fault-call:4 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x06\x00'}, 0x45c) [ 358.911997][T11750] FAULT_INJECTION: forcing a failure. [ 358.911997][T11750] name failslab, interval 1, probability 0, space 0, times 0 [ 358.953678][T11750] CPU: 1 PID: 11750 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 358.961571][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.971657][T11750] Call Trace: [ 358.974993][T11750] dump_stack+0x172/0x1f0 [ 358.979361][T11750] should_fail.cold+0xa/0x15 [ 358.983999][T11750] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 358.989843][T11750] ? ___might_sleep+0x163/0x280 [ 358.994716][T11750] __should_failslab+0x121/0x190 [ 358.994739][T11750] should_failslab+0x9/0x14 [ 358.995861][T11750] kmem_cache_alloc_node_trace+0x26d/0x720 [ 358.995880][T11750] __kmalloc_node_track_caller+0x3d/0x70 [ 358.995892][T11750] __kmalloc_reserve.isra.0+0x40/0xf0 [ 358.995901][T11750] __alloc_skb+0x10b/0x5e0 [ 358.995910][T11750] ? skb_trim+0x190/0x190 [ 358.995919][T11750] ? kasan_check_read+0x11/0x20 [ 358.995932][T11750] alloc_uevent_skb+0x83/0x1e2 [ 358.995942][T11750] kobject_uevent_env+0xaa3/0x101d [ 358.995953][T11750] ? wait_for_completion+0x440/0x440 [ 358.995965][T11750] kobject_uevent+0x20/0x26 [ 358.995975][T11750] device_del+0x74b/0xc30 [ 358.995986][T11750] ? __device_links_no_driver+0x250/0x250 [ 358.995993][T11750] ? kobject_put+0x84/0xe0 [ 358.996007][T11750] hci_unregister_dev+0x2c6/0x820 [ 358.996021][T11750] vhci_release+0x76/0xf0 [ 358.996031][T11750] __fput+0x2ff/0x890 [ 358.996041][T11750] ? vhci_close_dev+0x50/0x50 [ 358.996050][T11750] ____fput+0x16/0x20 [ 358.996058][T11750] task_work_run+0x145/0x1c0 [ 358.996072][T11750] exit_to_usermode_loop+0x273/0x2c0 [ 358.996082][T11750] do_syscall_64+0x58e/0x680 [ 358.996092][T11750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.996100][T11750] RIP: 0033:0x4592c9 [ 358.996111][T11750] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.996115][T11750] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 358.996124][T11750] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 358.996129][T11750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 358.996133][T11750] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 358.996138][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 358.996143][T11750] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x0) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="8cb9a7b67967f5375a73b92e8139542be5031f5f9e26137eebf25a1f8f09d4ab81ff09231afe9364e673d55c08cf8b46ad27101e301f6a83ba2b256c33e4af82201f41fb9a5cad8525a6c838b95ce746b6fd6c07623a65a50de67d37100785e8e31f03") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x1a, 0x1, 0x7, 0x5, 0xfffffffffffffffe, 0x7, 0x20, {0x0, @in6={{0xa, 0x4e20, 0x1, @empty}}, 0x2, 0x8, 0x3, 0x4, 0x1}}, &(0x7f0000000440)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000480)={0x7fff, 0x4, 0x200, 0x2, r3}, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000180)={0x4}) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000280)=0xffff, &(0x7f00000002c0)=0xffffffffffffff73) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000200)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800000050c40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106, 0xf}}, 0x20) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000240)=0x3) close(r4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000680)=@assoc_id=r2, 0x4) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000000c0)={0x4, 0x10000, 0x5}) r7 = request_key(&(0x7f00000005c0)='big_key\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='/dev/audio\x00', 0xfffffffffffffffe) add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="11a1a470dc4aac6453014ece1e64a25a0df6aafcd7d234a42e1f52e451d5763a3316f4adb14f11bf5b1277faeadd5bcf525bf063837c1b2ddca02d9580686431ea0e459e3a04c73b23eec26131fcae4ee6cc911fe219eb668fa7372628fdae19ce0aefa3402329658ff6", 0x6a, r7) 04:55:31 executing program 1 (fault-call:4 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:31 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80, 0x0) r1 = socket$kcm(0x2, 0x100000002, 0x73) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r2 = dup2(r1, r1) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/140, &(0x7f0000000000)=0x8c) recvfrom$inet(r2, 0x0, 0x0, 0x2040, 0x0, 0x0) 04:55:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\a\x00'}, 0x45c) [ 359.367839][T11759] FAULT_INJECTION: forcing a failure. [ 359.367839][T11759] name failslab, interval 1, probability 0, space 0, times 0 04:55:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x8) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x1) ioctl$TCSETXW(r2, 0x5435, &(0x7f00000000c0)={0x3, 0x2, [0x7, 0x2, 0xe4a, 0x7, 0x5], 0x1ff}) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=@newtfilter={0x298, 0x2c, 0x0, 0x70bd2b, 0x25dfdbfc, {0x0, r3, {0x0, 0x7}, {0x0, 0x7}, {0xd, 0xfff3}}, [@TCA_RATE={0x8, 0x5, {0x3, 0x40f6}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x2c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipddp0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}]}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x224, 0x2, [@TCA_RSVP_ACT={0x194, 0x6, @m_vlan={0x190, 0x13, {{0xc, 0x1, 'vlan\x00'}, {0xa4, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xc57, 0x9, 0x0, 0x6225c06e, 0x7ff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1e, 0x4, 0x2, 0x5, 0x80}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x20000004, 0x5, 0x81}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4dbb, 0xfffffffffffffe00, 0xffffffffffffffff, 0x400, 0x1f}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x89a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x2}]}, {0xd8, 0x6, "0615378faa2e79cf93554ebf6fd3bb68930ba38783dab2816aead261c6e394e69b18411b6a0fd81d8c0a2eefb05b116f64a33bf8a33ddf14a9720b951ce169f7cd8e5258dd3e35574a80923e0569aff2b8f7de418749f15c960716911804c0907bb9b3ba8180df72562f9ee28344161a237bf6a7991c7a230fd20d2dd1cf47cb77a31d53eff4603531d9bedf7a4dddaf90d488dc42611c36341d95f8c88a3d7e7728d10de62e40c4ba0ae9877c7656c4b9c246bf7e42d7344c742a492e77ea84a9165ead4402c07118b6ea894ca884a0fc0460"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x8, 0x8}, {0x0, 0x3ff, 0x7f}, 0x1, 0x3, 0x6bc}}, @TCA_RSVP_ACT={0x44, 0x6, @m_sample={0x40, 0x1ff, {{0xc, 0x1, 'sample\x00'}, {0x1c, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x10, 0x6, "f3b1107363e3fe46f8a6"}}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xc20, 0x1ff, 0x8}, {0x5, 0x6, 0x4}, 0x88, 0x81, 0x8001}}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x80000001}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) write$vhci(r2, &(0x7f0000000640)=@HCI_EVENT_PKT={0x4, "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"}, 0x1001) [ 359.413574][T11759] CPU: 1 PID: 11759 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 359.421457][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.431539][T11759] Call Trace: [ 359.431577][T11759] dump_stack+0x172/0x1f0 [ 359.431603][T11759] should_fail.cold+0xa/0x15 [ 359.431632][T11759] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 359.449673][T11759] ? ___might_sleep+0x163/0x280 [ 359.454828][T11759] __should_failslab+0x121/0x190 [ 359.459814][T11759] should_failslab+0x9/0x14 [ 359.464335][T11759] kmem_cache_alloc_node+0x261/0x710 [ 359.464355][T11759] ? find_held_lock+0x35/0x130 [ 359.464377][T11759] __alloc_skb+0xd5/0x5e0 [ 359.464392][T11759] ? skb_trim+0x190/0x190 [ 359.464409][T11759] ? kasan_check_read+0x11/0x20 [ 359.464430][T11759] alloc_uevent_skb+0x83/0x1e2 [ 359.464451][T11759] kobject_uevent_env+0xaa3/0x101d [ 359.474550][T11759] ? wait_for_completion+0x440/0x440 [ 359.503195][T11759] kobject_uevent+0x20/0x26 [ 359.507723][T11759] device_del+0x74b/0xc30 04:55:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\b\x00'}, 0x45c) [ 359.512086][T11759] ? __device_links_no_driver+0x250/0x250 [ 359.517820][T11759] ? kobject_put+0x84/0xe0 [ 359.522268][T11759] hci_unregister_dev+0x2c6/0x820 [ 359.527406][T11759] vhci_release+0x76/0xf0 [ 359.531765][T11759] __fput+0x2ff/0x890 [ 359.535779][T11759] ? vhci_close_dev+0x50/0x50 [ 359.540480][T11759] ____fput+0x16/0x20 [ 359.544577][T11759] task_work_run+0x145/0x1c0 [ 359.549189][T11759] exit_to_usermode_loop+0x273/0x2c0 [ 359.549210][T11759] do_syscall_64+0x58e/0x680 [ 359.549235][T11759] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.565000][T11759] RIP: 0033:0x4592c9 [ 359.568939][T11759] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.568949][T11759] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 359.568963][T11759] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 359.568971][T11759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 04:55:31 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000240)={0x0, @aes256, 0x2, "25ee20813d4e6991"}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x400080) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24008805) 04:55:31 executing program 2: poll(&(0x7f0000000100)=[{}], 0x1, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) write$ppp(r0, &(0x7f0000000240)="df01759f6a2fd86bfe681b0e1d1c1cb0c2583046fb40f15462f99c37c5fddf3d907948bca1db8cf5180acbc098f6b6b80787d82a4df0e128fcbb496b283139ab49addf8bb2815f826021d1e4cc37f3448888ed92e3f4b8e045ef2c2a3bf91920d6289f5d219346632ce52986c22a14c82c1a04eb6751c356d69c9d8ff51e059ee06f908cb10a85404eee0fba8efaa19711148cdd", 0x94) gettid() syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000140)="0f01c90f01dfba4200b8a200ef3e0f01d13e0fc79d410bba2100ed260f01cbd9f9b80d008ed0263e660fe453df", 0x2d}], 0x1, 0xa, &(0x7f0000000340)=[@efer={0x2, 0xa901}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x3f, 0x0, 0x4, 0x0, 0x60000000}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x1, 0x7, 0x100000000, 0x0, 0xf}) connect(r2, &(0x7f00000001c0)=@nl=@unspec, 0x80) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) [ 359.568989][T11759] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 359.620973][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 359.628961][T11759] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:31 executing program 1 (fault-call:4 fault-nth:12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x03\x00'}, 0x45c) [ 359.874092][T11786] FAULT_INJECTION: forcing a failure. [ 359.874092][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 359.923102][T11786] CPU: 0 PID: 11786 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #1 [ 359.930987][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.941172][T11786] Call Trace: [ 359.944502][T11786] dump_stack+0x172/0x1f0 [ 359.948863][T11786] should_fail.cold+0xa/0x15 [ 359.953482][T11786] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 359.959317][T11786] ? ___might_sleep+0x163/0x280 [ 359.964193][T11786] __should_failslab+0x121/0x190 [ 359.969157][T11786] should_failslab+0x9/0x14 [ 359.973766][T11786] kmem_cache_alloc_node_trace+0x26d/0x720 [ 359.979612][T11786] __kmalloc_node_track_caller+0x3d/0x70 [ 359.985281][T11786] __kmalloc_reserve.isra.0+0x40/0xf0 [ 359.990708][T11786] __alloc_skb+0x10b/0x5e0 [ 359.995231][T11786] ? skb_trim+0x190/0x190 [ 359.995260][T11786] ? kasan_check_read+0x11/0x20 [ 359.995284][T11786] alloc_uevent_skb+0x83/0x1e2 [ 360.004468][T11786] kobject_uevent_env+0xaa3/0x101d [ 360.004489][T11786] ? wait_for_completion+0x440/0x440 [ 360.004508][T11786] kobject_uevent+0x20/0x26 [ 360.004525][T11786] device_del+0x74b/0xc30 [ 360.004543][T11786] ? __device_links_no_driver+0x250/0x250 [ 360.004555][T11786] ? kobject_put+0x84/0xe0 [ 360.004578][T11786] hci_unregister_dev+0x2c6/0x820 [ 360.004599][T11786] vhci_release+0x76/0xf0 [ 360.004621][T11786] __fput+0x2ff/0x890 [ 360.014519][T11786] ? vhci_close_dev+0x50/0x50 [ 360.056748][T11786] ____fput+0x16/0x20 [ 360.060747][T11786] task_work_run+0x145/0x1c0 [ 360.065360][T11786] exit_to_usermode_loop+0x273/0x2c0 [ 360.070751][T11786] do_syscall_64+0x58e/0x680 [ 360.075456][T11786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.081386][T11786] RIP: 0033:0x4592c9 [ 360.085344][T11786] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.106396][T11786] RSP: 002b:00007f4a84317c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 360.114810][T11786] RAX: 0000000000000000 RBX: 00007f4a84317c90 RCX: 00000000004592c9 [ 360.122805][T11786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 360.130857][T11786] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.138816][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a843186d4 [ 360.146801][T11786] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000005 04:55:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:32 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x84e9, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, {0x7ff, 0x3ff, 0x9, 0x10001, 0x3, 0x80000001}}, 0x8) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, "d2dad38f470f154326c3923d7b5d74406dd930dac00f04d36cdccb806431730e7c8fd451cb0421f1cc06dde1f9a7eff3b1b64a4e0b8ddeb5c475c0d28839983ab5aa3e43967401ba3aa6e4137b5fb4ab2eb046f1715c283f7881d7355b6b5a0a0c7b090a4dd0a8553da191a2f065a8507ae8afedd7c008c9e7b7f72cb820a47bf30a9bdebaf66df8bdb4fee89f0483dc8b52"}, 0x93) close(r2) 04:55:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003180)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000031c0), &(0x7f0000003200)=0x4) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000030c0)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000003100)=0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x48000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6, 0x9a}}, 0x30) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000003140)={r4, 0x0, 0x6, 0xa3c, 0x7}) close(r1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003080)='/dev/video35\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000002f40)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xe9, @mcast2, 0x3}, 0x1c, &(0x7f0000001240)=[{&(0x7f00000001c0)="3cf3986de12bf078a4f78db5b2cc27969efca0dbeb2efb9a60396bb5a3500ebf8d52d2ddd5d43afd35b9df995d6e912cd23f47ab21f961ce5dd41736c74b80a243c32a638ac6dbf780789a3726dde79294cb853ac1e0bf6271acf0382e938aa5a60f8e0ed7d73b3b470269c624d0c89db1", 0x71}, {&(0x7f0000000240)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001280)="8d521670d8ff458038df9e50f8088f6fe3d5dd74d5400c65c0c9166ca47ba9bdee60cc713dbb34d4fd82257e36dad25fb8b97eb80f22c679ff96b8beca00ec08f74f156d4128947ad5ff49a9925debf3581c4a1d5deb41ac9992822158ccff63f929f0148df6aac91c1f638a8a1fa4a9191ec83eb4caaaa2947e9f2100f1f73bf9", 0x81}, {&(0x7f0000001340)="aff8b64dcd98ff6ec1e842b761c4c1f56b719074801e839fd35956f7678d760fccfea750f6eed08ab177eb15872e602cdfe4e383c46a0e1e9620f5eacd8ed40511e4c36e24d29cf44cd465948808f974e279a2564790e2a32bf9fed92635e425a0ffbe5c948cbd0a7b68f615c416aa8a43e74cc791e73abb5b59ac51de938388455d", 0x82}, {&(0x7f0000001400)="f6f55592bc3d5db33e84cbb304124aa51b00", 0x12}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="e21d2cd54f5918ecc676f8a9682ec0a45d1618db618886fc7669f803a4a7ff687b8c76dddc06521a26b24e492f5c29271a97496960d3f6d2f7c124206d00b0b9de4449e303cb241472ebc7c81220e2fa746c67e0bf0de0fe67ae75909065e6c9127902453b7d75c31d789f5989da70be054e287f43b835f668ddd11c3c76fc08fd6194b311c3168bcb6d35088ffe028c7b3fea687f69fc5b9f6c260dcd21a239af3799362dc73affe9da9e048260e485660e0cd5ba0adeb745bc21cb322b765456126d0e1d8197332b9c91c50639e285079759fbf79e0899", 0xd8}, {&(0x7f0000002540)="9bab475b7f7d", 0x6}], 0x6, &(0x7f0000002600)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x6c, 0xf, [], [@jumbo={0xc2, 0x4, 0x81}, @jumbo={0xc2, 0x4, 0xfffffffffffffffc}, @calipso={0x7, 0x28, {0x4, 0x8, 0x98f, 0x9, [0x2, 0x3, 0x9, 0xe7a]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0x9, [0x8, 0x10000, 0xff, 0x592, 0x7ff, 0x5458, 0x1]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffffffffffb}}, @hopopts={{0x20, 0x29, 0x36, {0xbe, 0x0, [], [@ra={0x5, 0x2, 0x1ff}, @pad1]}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x3ff}]}}}], 0xf0}}, {{&(0x7f0000002700)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1d}, 0x15d2}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000002740)="824b18f4dfaa84f6990f35042a7b3c7ad0e7f6ea8b3b3e2b57ba941fbc51abca51a792e6e7d28eb47e22f8361138c3f88d577da97368c5e0914e4b14907135906a22b1a53a1eb9ae7e29bff9415ee79de62d5eed1f3dcabbd2c68a332c08a7ef7214c139c6c1e5899229ae16342727ab9f9896f694b7ab1587a88e5eb085da45dbd023a2620866d31fd4c0cbae726a02ee479afdbe819226d30bc294a0a04b16eb183315d40589856b7fa0b1400d2f119d905c71be09a67037882155d466174fcd87ef34f4bc8cb823da21471a50fb", 0xcf}], 0x1}}, {{&(0x7f0000002880)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c, &(0x7f0000002d00)=[{&(0x7f00000028c0)="f726cffe0412724a6dc3c15467b4ff762af1f5755c6b1e3e8ce479efed82a1a821beec9ee50b8bcde9f98d85700f6ac0ac89384a66f9b23eed6096431415aee95d08bd9fff0ae1c1b985640223488bbd7b848de923fbd98458c5b3b10266c76c0c8e367c0fda31ec098fd7b307405ce82e6059306f26229dcf07fcf2a19dae4038d49609e61386a6b7d0e304f8ed5cdde93b1b2452a9bedeca3528bc9af18e9a8f40e759a723e3de7d27293d0e4fc2529cc1c79932e2d719f9c41685c969f5b3efbfd4105d21529336d2ab44b3fdd3d8f8f3081bdfe298554a1cd91c8a76fc7c45b2bb", 0xe3}, {&(0x7f00000029c0)="e2ec8456e27957833a7b642f08b7d9142d07ca7fef7c517a77b728716db4d4f717ee60ea40065a142d38f281c02d3ea6d25c0b9cb47daec65a039e2808b3ac3d2c9779d838d7e86dffadd85fae5fbc204936b25a0210d16f59e836de0b1cd7e1da7c16bd6737e2d1f23d6ff2adfc1c777fe45eee7e1751e09437690edd2de34c15d1", 0x82}, {&(0x7f0000002a80)="1571b01319f0cab33427df5c7c04fe6e8238fed96c1d338bd46deaf60994ba923830ccf569d55890e7b4b1642e399eb8b593ac6b7ed61f4d53e74a36155c74a890817b82dde6a4d0588e388e058f236148f7bcceeb1296032681cfc90578e7e3544f843cbb3e23ecddb84d9367556f986d293c8ffc860e2730438a8231eb41b090c89ffea50aa36241ed8d5eb30f26b9eae02ba20e3c2fde7b22dc0274a1c73e71", 0xa1}, {&(0x7f0000002b40)="827abd120d00eae2302176bf458fe080acd9a4c2ce5c504462b97c5bbe231efde224f4fc6ecafb0bb486aeccf464a190dacf1f79fe5b6058fd4a8fcfae3a1cd81df123ed6a06b676e2f83cd69d34", 0x4e}, {&(0x7f0000002bc0)="633ef1b10e8ec2eca71f43e5cc5056be285f843998018aa2b6af6f8f98125934d8dd689940b2ad46769284de92a3bf86f6567df1ce1f28e46a2afda74ddfb6527192f88ff296721eb39da0dbfe1e6ae7036409704ec1cf8fda0f25abf748e78f6b1c21df32c024989467d6698854a4fc4b6bc6724ca46d980c75d985f2fec5758fd42cd3f13ef34b383874905a851a7938a23379d901694c6713fd4a81573a8ee6f1fd0965d06cdbda3964c739a27e3fd003c9105dfaf5fc39b84d08da042c3e424fcd6f2f527e1902cdba724262b8789fe1c0a1b1f5a58e7e9299e534209a4294e00744f1ade78f0a", 0xe9}, {&(0x7f0000002cc0)="779e1df50ad8d752138868227d3a0c2028b2d4008e5ed8c1621ea5d7cc384330b261e3a7", 0x24}], 0x6, &(0x7f0000002d80)=[@rthdr={{0x18, 0x29, 0x39, {0x7f, 0x0, 0x0, 0x20}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3f, 0x0, [], [@pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x2, 0x5, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x20}, @generic={0xffffffffffffffed, 0x7, "717ad00c31b5f1"}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x9}]}}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002e40)="49bf8f3d299703ea0e6862c0c22fd740345c42ad01539fad0a51e7679acd20bce084556c2de9f0ee073dc604f09886f61bc41017c6c00fa47ec503342032b6498b41f3d6fcfe3c815b83078e90d6d3294b", 0x51}], 0x1, &(0x7f0000002f00)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x2e, 0x4, [], [@hao={0xc9, 0x10, @remote}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @pad1, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x1f}]}}}], 0x40}}], 0x5, 0x40004) 04:55:32 executing program 1 (fault-call:4 fault-nth:13): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:55:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xfff}) 04:55:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:55:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0xae, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:32 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4000, 0x0) r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = socket$inet(0x10, 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x8000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="240000001a0007041dfffd946f6105000200000a1f0000020028080008001d0004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 04:55:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 360.755245][T11818] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 360.835666][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.259506][T11828] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 361.275661][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:55:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\a\x00'}, 0x45c) 04:55:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) io_setup(0x8, &(0x7f0000000080)=0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x4000) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0xb, 0xfffffffffffff800, r1, &(0x7f0000000180)="470649b57e0bbda9b53f3ab5c2b991fc6cd6b4bb1be27cb128e8b718acc80e548527172c5047fbe9073ad92cc5b0ae76f77420ca8acbec25a7ae0855a1f744dc939ff2d6e6ba9bc6ad92a03d54967c4b668b6b63d4a60ab02804dafc9c4676ef4dbf0ce3bda1ff9b528b4f3e8d021ec4b00ef10cfd2b956ac94c98e2ba40eb0495808ea4cc79a4b9bfc1ac96e30086c63d2b3b301a8b8caccd5a7c5deff9b0f4241236c237c48520c5b4789e8b119c2b2b5e519408fdc035c9abae9e0ccfa4bd262bc237e2ca50e1abeb9e58f127918914118588db6b5a8916827c672960981fee34046efc914f90472797dbf113", 0xee, 0x1f, 0x0, 0x0, r3}]) 04:55:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, "2068988bdbec48c2a7becd4e7c3651b4a88b2d38d250dac04e2a265c05f434f36e73d98ce86d1f813a9c88d441b2af69691cd159ee279734cd3b89f47ecbe9fcc48f43d318c65215153b355162ad86772d3e19c4e4942d13a9ee657cfc3b53e4c7aac18270e344ddda7051024013ca3c0c23eb961a5649c6136b881ee48ced8d1eb038426ffb05dcccaef8512a9934ea636b9172776b446fbe583effc6a6c5907f11972f01f3ba1df25dec58"}, 0x61) r2 = fcntl$dupfd(r1, 0x406, r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400000000101000, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0xffffffffffffffe1, 0x400, 0x2, 0xd2, 0x11, 0x7f, 0x1, 0x9, 0x5, 0x9}) close(r0) 04:55:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:55:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{0x6, 0x7}, {0x3, 0x131ee83}, 0x4d, 0x6}) 04:55:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x201, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2931}}}, 0xb8}}, 0x0) 04:55:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x6, 0x8, 0x10001}, &(0x7f00000002c0)=0x88f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r3, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @multicast1, 0x0}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', r4}) close(r1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000001c0)=0x4) 04:55:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00@\x00'}, 0x45c) 04:55:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x7ff, 0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x2000) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:33 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x209b, 0xa8802) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:34 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x480101) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2}) semget$private(0x0, 0x2, 0x120) 04:55:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="dd502f683667e4039e1cde5e37ce40851ce33a0f740347829c68e3542f27d5e52ab11ea98253ce2e3ce26029f7ed9b2e3b1370044cf086f613a916df47922048b43b8aa8e8176b925a3765b7849d12710d0b2f9f5e18b13741c9ff0c9ed7c97861b9ec3e644ccdfa4a1235f488e4") ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) 04:55:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x87`\x00'}, 0x45c) 04:55:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x100004, 0x1000, 0x10, 0x602, 0x1000, 0x101, 0x0, 0xfffffffffffffffc, 0x29cb, 0x2, 0x7fff, 0x6}, {0x1f000, 0x7000, 0xc, 0x41, 0x800, 0x1ff, 0x1, 0xc9a7, 0x5, 0x401, 0xfffffffffffffffe, 0x7}, {0xf000, 0xf000, 0x0, 0x80000000, 0xa600, 0x20, 0x4, 0x6, 0x0, 0x100000001, 0x1, 0x81}, {0x2, 0x5002, 0xe, 0x5, 0x0, 0x1000, 0xfffffffffffffff7, 0xf127, 0x6, 0x9, 0x4, 0x31f}, {0xf000, 0xf002, 0xa, 0x7fff, 0x1, 0xcd6, 0x5, 0x100000000, 0x2, 0x1, 0x1, 0x2}, {0x100000, 0xf000, 0x4, 0xfffffffffffffffd, 0x5, 0xffffffffffffdf64, 0x37c, 0x0, 0x3, 0x800, 0x401, 0x8}, {0x0, 0x2, 0xf, 0x101, 0x7, 0x80000001, 0x5, 0x9394, 0x78, 0xff, 0x5, 0x100000000}, {0x3000, 0x37a273f208d09f4f, 0xc, 0x10001, 0x6, 0x40, 0x3, 0x1, 0x8, 0x8, 0x3, 0x4}, {0x2000, 0xd000}, {0x3001}, 0x2000002c, 0x0, 0x1000, 0x200, 0x0, 0x3400, 0x2, [0x7f, 0x5, 0x81, 0xffff]}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000080)=0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000000c0)={0x1}) close(r1) 04:55:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x80000001, 0x204080) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000200)=0xc) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000084}, 0x8010) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) 04:55:34 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00\x00\xff\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 04:55:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x01\x00'}, 0x45c) 04:55:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) sync_file_range(r1, 0x6, 0x730, 0x3) 04:55:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="110900000000000000e070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x94, 0x4) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x2, [@multicast1, @multicast1]}, 0x18) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) write$vhci(r1, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x80, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x4, 0x9, 0x4, 0x80, 0x51b, 0x401, 0x1, 0xfff]}) read$alg(r4, &(0x7f0000000180)=""/206, 0xb4) close(r0) 04:55:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) socketpair(0x5, 0xa, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)=0x1024) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="30c44cc4c2bb9630ed9811a412aaa6ecef38b8c724d77a4b71379cef57e4fccae8ff0354d139430d47b8a58a2ad53c171e91e500811843dbea5b25dc648da05c8c322b783d8d133bc4eb73c407e56dd74e29e5e1cc3ac395f8ee390abef0e9e857bfa91c87d18ec753d668a2d0a26a91c06440ddf473088434757b9d8fa3d02454e7bfc5f906b7963ef7332c9263985c639620fc15a4ab6cab47fa0ab2d415d58aec9b68b90370de9a4a41bee491daa28a8e410694ecfc439a2becf82e50a12f3fb95a9e2c", 0xc5, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000100)=@builtin='builtin_trusted\x00') r4 = syz_open_dev$sndpcmc(&(0x7f0000001340)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000001380)={{0x6, 0x7fffffff}, 'port0\x00', 0x4, 0x800, 0xe, 0x401, 0x4, 0x3, 0x8, 0x0, 0x1, 0x6}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 362.847997][T11882] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.856286][T11882] bridge0: port 1(bridge_slave_0) entered disabled state 04:55:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x45c) [ 363.194239][T11887] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.201422][T11887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.208943][T11887] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.216099][T11887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.237423][T11887] device bridge0 entered promiscuous mode [ 363.301386][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.308678][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.409214][T11905] device bridge0 left promiscuous mode 04:55:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x0, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x45c) 04:55:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) close(r1) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="1d3440de32bcd210d7a395df4a8321e3faae2c41b556e61fe1837d22aa06dadd6b50ab7ea743a98a45a5ac19f48ffd2e86544b871aa28315fec58152a31f483f3c39630bcec5fb740837ec0b35407e3f58d94abf4683eef7548d1aacee244a89df59b60417c81e5fee5034306644a46bb946b124930b9c5093241a49f6e3fdda7f43bdef4daafff1a946c96f8ff819d3550f42071e6c4ce384b68585da8470d50e6b820037348f7fd48f43b9175656e169962b8f21c92315108add527aedf79d1777de065a7f1d3507", 0xc9}, {&(0x7f0000000080)="d6de9c51a5f285b8e48122c7e26754b22ee053a56e0d153fa77283", 0x1b}, {&(0x7f0000000280)="d05b88fa4543d544e4c3f398d6095cde95e966d0412442750441a4e0a3c569ac24359aaad2570a8dd5bda131c56fbbe0cf5eb3ecd320737f71c4a8f35566edb5930670ff76da07d36a4dfc421b8f62b092c988b48c852c0f3b9abd8a428c7a3972a905e9dc93ce031098fa465053797f96fe026c2face309be4ab60a6b1b5cee79eda672d73864c354da450982e81fc0821c6fc87c7c80efacaa1c7bd18f810b08eb680fc33149571e1578e8264e6f94facf51467cb16a65ec5dd94467ebd59871dc93da6f4bc02886868f534fc7eeb2e072214ebd3ae507b20aed5997639b2d6d1761eff13e1fb3e0c15b8aa6f31b327c8a", 0x30f}], 0x3, 0x0) 04:55:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x80) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x9, 0x5}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:35 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00\x00\xff\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 363.903235][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.910394][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.917886][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.925052][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.963710][T11915] device bridge0 entered promiscuous mode 04:55:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, "76ac691039ea12636350c9ace18596c29d60b5e8b343b011279a3edc40f087427abd0a8f6a74ea5801f000fbea4ed9507638541040ce188109e8553d7dd35608cc60d2e3b05ebf58463d641e0573c1013ce616903cfa066d39889919ad25764b91316f0076771997e755531f6fc478d87aa8ce1bf78f1a7176c556760fca0fc9ff7071fbf61910d3c8b730bf3009c4c2345ca936903cfbe940a4f3c390c2cff7fe36d3f6c015636f56b9acb5108a235e246faac4929f098a96b078e4a7d538524e6c1e55080502b66c35109d38483e0b5e4cc03b495f6e07081a12b4a2678ffa7459b4213ac7f6"}, 0xe8) close(r1) prctl$PR_GET_KEEPCAPS(0x7) 04:55:35 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000340)={'ipddp0\x00', 0x2, 0x40008000000}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="35761a9b1973ede516115d3fcbc1ebfb35aef444f66b43b8efb1500e795337bd734b3114c9e4437a411a033742177354c2a53c046543b3fac70fe24355cd5728f60e5fe08124", 0x46}, {&(0x7f0000000180)="104a73a19c294d9ed91024f4805042891042fc1eee93c88ecbda76ac6cf602d0cc76c74da091d054025dac0ab14f006bac63eddb735d2e865b9f300fcf86d48bb42532e0c83cbc79ef446001dd644fa4772d9d4eadb33d1722e2", 0x5a}, {&(0x7f0000000200)="ba7681962b461589a92b88b57663fb5fc97182dda32d6c5a7b503ae5a10b82de2d8779c1e9f3522dbff3757ba355482751df451e82ef5fad6ed9333bbf45b15a527b4700bf9d139f8d467357bd64b28062006a3a8a99836c78bf38aae63cf0104f9d93d70d858bd4f2f8ae8928497c6d185bf32c5004b14e703dee050a7d3e3bae19fcd47444a6505c949c083597e50b0986f0465ca818e6dddd00e6dad6af379abe889ccc84741a3d1308c56d12cc5545c3aaccd4f366f702160331e081246a5a5715f35d", 0xc5}], 0x3, 0x0) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:55:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1004) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) fstatfs(r1, &(0x7f0000000640)=""/237) r2 = accept(r0, &(0x7f0000000080)=@un=@abs, &(0x7f0000000100)=0x80) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000280)=0x5, &(0x7f00000002c0)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)=0x6, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x100, 0x0) close(r1) 04:55:35 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getrandom(&(0x7f0000000100)=""/112, 0x70, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @loopback}, &(0x7f00000001c0)=0xc) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 364.193587][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:55:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2100, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000180)={"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"}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0)=0x4, 0x4) 04:55:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x0, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x33, "413a662e4148c2e7182a3691a0df73be9113c8a1f21b1592a8ebe434b4f252ff9098ec651ec338ba19958ce6583730b8731108"}, &(0x7f0000000100)=0x3b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={r3, 0x43, "af745c8b14aee1936f953882fa0aacf6ab032873e16f1f54a4be82b44afce5232a5f94f1b535ab96227acf8067beee61fb93e817294edfc54d47b5ddaa576ef3b6f368"}, &(0x7f0000000200)=0x4b) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000240)={0xa2a, 0x10000, 0x1, 0x4, 0x604, 0x40}) close(r1) 04:55:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xc38, 0xffffffff}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x7, @loopback, 0x7}}, 0x5, 0xc801, 0x0, 0x8, 0x2}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r3, 0x5, 0x3, 0xffffffff, 0x4, 0xfffffffffffffeff, 0x5, 0x6, {r4, @in={{0x2, 0x4e20, @empty}}, 0x6, 0x3, 0x8642, 0x1, 0x4}}, &(0x7f00000003c0)=0xb0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:36 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x70}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x26e}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x421}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc6}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffc00000000000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x21, 0x10400) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x5) 04:55:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:55:36 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x80) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000000c0)={0x9, 0x23}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:36 executing program 2: prctl$PR_SET_MM_AUXV(0x59616d61, 0xc, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x88081) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 04:55:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f0000000180)="11dca5055e0bcfec7be07065703d52a1a96d3452948fe511a3762c53cf605807a254126bfa868ab4f70d6c656dfc5c528579e008000000000000009c0f827d56b31b8dce8fad789308e72090d943b1a1db2ae3f84e02beba00c10f6cefcbfffccef3be2441fa0968d24d14c98428776d0ec717790f1cc57b9464c90ec1a83997aa2c030033e54efd4cf54c44779514d446b245427fb395fd7338fee2dd7ef9c236cd89800b120d562eca9d0be711f0f229") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x200, 0x400800) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x100000000, 0x4, 0x10001, 'queue0\x00', 0x3d}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:55:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0xfffffffffffffd9b) close(r1) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x3c, 0x2, 0x3, "39c7e5abacc9b286f52d5fff3015b36c", "1175f996604f6e1db9e71a2e7d27bab284b23e73a6d756c49685eb3588429334052cef74cc07e7"}, 0x3c, 0x2) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}}, 0x2, 0x5}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x7fffffff}, &(0x7f0000000100)=0x8) 04:55:37 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0xca) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000040)="11eaa5200800007859e809") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xda) close(r1) 04:55:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x0, 0x7f) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x0, 0xfff, 0x81, 0x5, 0x16, 0x0, 0x80, 0x936, 0x1, 0x4}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1ff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x20}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x800) fsetxattr$security_smack_entry(r0, &(0x7f00000003c0)='security.SMACK64MMAP\x00', &(0x7f0000000400)='9p\x00', 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc163a3d58351c4c5f47caff122167180f17b63167d69a3a7f7d6f4c8ea824eee1e21541470a41952cb38873dcc32b159c000"/78, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) pipe2$9p(&(0x7f0000000200), 0x800) 04:55:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\a\x00'}, 0x45c) 04:55:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x80) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4003, 0x1, 0x81, 0x6}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:37 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffb, 0x5, 0x9, 0x3, 0x2, 0x3f, 0x56, 0x8, 0x5, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x101, 0xa000}) close(r2) 04:55:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fdatasync(r0) close(r1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40000005, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f00000000c0)={0x9, 0x1, 0xffff, 0x81, 'syz1\x00', 0x9}) [ 365.973986][T11996] 9pnet: Insufficient options for proto=fd 04:55:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xcef, 0x101000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x1009, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}], [{@smackfshat={'smackfshat'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x34, 0x31, 0x3e, 0x37, 0x64, 0x39, 0x77], 0x2d, [0x71, 0x65, 0x65, 0x3f], 0x2d, [0x77, 0x36, 0x7f, 0x75], 0x2d, [0x75, 0x77, 0x32, 0x35], 0x2d, [0x0, 0x31, 0x77, 0x77, 0x77, 0x37, 0x32, 0x76]}}}, {@obj_user={'obj_user', 0x3d, '/dev/vhci\x00'}}]}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x10000) ioctl$NBD_CLEAR_QUE(r5, 0xab05) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) [ 366.064121][T12004] 9pnet: Insufficient options for proto=fd 04:55:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") uselib(&(0x7f00000001c0)='./file0\x00') r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x80800) get_thread_area(&(0x7f0000000180)={0x1, 0x1000, 0x400, 0x4, 0x1000, 0x8001, 0x4, 0x8001, 0x4, 0x1d9}) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x4b, 0x8080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffff9c}) r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xfff, 0xc040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000002c0)={r3, 0x80000, r4}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r5 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x401, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000100)={0x9, 0x40, 0x59be26a0}) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x0) close(r1) 04:55:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\b\x00'}, 0x45c) 04:55:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x46d81) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0x4, 0x2a6084c2}) 04:55:38 executing program 2: socketpair(0x11, 0x18366dfb161f3ebf, 0x3, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'lapb0\x00', 0x1002}) r1 = socket$inet6(0xa, 0x80006, 0x0) listen(r1, 0x20) recvmmsg(r1, &(0x7f00000031c0), 0x2a0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0x2, 0x3ff, 0x8, 0x1, 0xb1b}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @broadcast}}, [0x0, 0x200, 0x2, 0x4, 0xcd, 0x0, 0x7fffffff, 0x9, 0xcccc, 0xffffffffffffff8a, 0x7e, 0x8000, 0x6, 0x4, 0x3]}, &(0x7f0000000200)=0x100) 04:55:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x560000000000, 0x8002) getsockname$ax25(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@default, @rose, @rose, @rose, @remote, @bcast, @default, @bcast]}, &(0x7f0000000180)=0x48) 04:55:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235000100000f3048b8568b929eb42e3b020f23c00f21f835010003000f23f8440f01ca66b858008ec00f20d835200000000f22d866bad004ec650f01cf66baf80cb8bb6e038fef66bafc0cec363e450f3066b85e008ed8"}], 0x8b, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f, 0x2200) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f0000000080)=""/113, &(0x7f0000000140)=0x71) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000480)=""/158) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000004, 0x0, 0x0, 0x0, 0x4cc]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:55:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x24000, 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x4800) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r1], 0x1) close(r1) 04:55:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00@\x00'}, 0x45c) 04:55:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1004) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) close(r1) 04:55:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x80800) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00`\x87\x00'}, 0x45c) 04:55:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x20000) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000100)=""/52) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = semget(0x3, 0x3, 0x4) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x2, 0x5, 0x7]) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) 04:55:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x100) ioctl$RTC_AIE_ON(r2, 0x7001) close(r1) 04:55:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000080)="11dca5055e0bcfec7be070698a348ab5b253f18eb3bac7f91bb20f3ed5fc46d859a64b0a0561d34348192df1aed1f538b863e22788826c6b0d97d268ec1b32959735573976a934821862c40cf1cc") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x7f\xff\xff\xff\x00'}, 0x45c) 04:55:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000000)=0x54) listen(r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x1, 0x8200) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000980)=0xe8) sendmsg$inet6(r2, &(0x7f0000000d80)={&(0x7f00000002c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x10}, 0x80000}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000300)="a644643fb0515d964bb1c2a5b7371f7fc7acc7b5542709b3159ef9fbd20c72c2e2aced1b94", 0x25}, {&(0x7f0000000340)="20636adf88ce5372c64aff4f817e4a9985996b315ddd87aa9f2f70acc66e9d5f1ebc488228a021d2db466ecd355b25af234fdab3237cd39c2a95b1c8bd386d628d2f52e6af237f9dde806b75848da8de42d1f9d3aebfbd7a797e0fa329e6831dcb6a0ce9fdd484e66a54968ed0e3ce9d613b42ee", 0x74}, {&(0x7f00000003c0)="111dcf4d60e184d3eabee3477e234da4b50ad8949e92b56933e732342770d580f1d256469ff9b9ea1ad2d9300dddc88542dd64f25743d6787ce7129e1306bc0f3edc4a30c76d56d579f88b2aa10f32046cdcb4af130d2851290bcf2e6748a9d1d9e1d243ff1d7a12abb705820692ac7283f7f9dd4c27118f98b612a49173921fc6527c671cb56100ebb1d2c68ee5a68168454bf3d75b0f0927625eca014865308db5adc96273098ccdc4bb19d193d22a0add53221b1f8bc03e8d5a6eb4ef46afc6b667522675027aaa6d1ed5d5bf3a642b1b4ebf0a07aac1ae53a484", 0xdc}, {&(0x7f00000004c0)="1f101a898564c4136ddf761fdb906271825b02ed9d53cf48afbc1e3dcf8696cc77abbd81a91c5754e5b55828169fbf68879cdac785ec4be8b3b59c0952f8eddbbe9df0664f4e0ad469ecacc4062558b1d6270cf9d90777e41005cae1dfcbfde7439daebd14537fadc7dca64877f16aa97239c542252119fbecc897f666cc9f57f1d838d56a1da0f9bfbb4d6950d2951efa6c81573c3a0c662576a16369a21f768dcf26470ed9d6e3f51e989bcd141032901edfa4239ed4cceb43715427e145afc715d10d6f5148cfc0e0152891f984339081e619e95c353caaee1b", 0xdb}, {&(0x7f00000005c0)="0429f7d14e4293d26d7c220bf0500025eb0ec676727d1ca74d7eb59049661aa7e132fc46d7086954e5361fe111be840c2c274de55a1ad907e30eadf378e150396ee91b218b729a64c16da7cd7966bff726b89f52f22b4fde777d04090432dc3a1b9205b1328c8f4325b94a41e5efef021b6d789d1d5cdcd3dcb3b3acbea598b5e4162c4fa61c9d02edfa01dc6fd6cbdda082ceaef2444ce4374e4b2817e937776247bb900813a307a6ede5ababdf758a1a440dfbb0cc74fcd2092da6ed8290c0a81610cdc2c8f636f3f680f750d171476aa5b96b34189f", 0xd7}, {&(0x7f00000006c0)="5fdc3037afd3d01f716d680f6c90f4a946e3cf9bf636134a1ca3c980207c7a9af9ccaf448fd9a2550d7254291806d647e861f39e2e0b8476aceecb2b8ebae3fc15d81d95e173b80ad418f3da99d208", 0x4f}, {&(0x7f0000000740)="630ff5ff4e639b4292cbe0c563ee5d813fdcbfcd725cb50293237d4d1070dc72af92b3e40b99f4f875ad8eb9f081ab3527e71aae3ed67e56ba4551c4e0f2287228da089b747fbe2000f29696eee6679ee5694dc3dd3a7d9227a2c1a0e749932acc9936fa2666", 0x66}, {&(0x7f00000007c0)="446f6c4b9db71f193e5c62aa172e8b309b61a4391c03a3512e88f6dfe9e495578e00eeef5aa282b4fed86265d9e1fd62ff1b7ed13cf6d96bf4a7e9727e", 0x3d}], 0x8, &(0x7f00000009c0)=[@rthdr={{0x58, 0x29, 0x39, {0x4, 0x8, 0x2, 0x1d5, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x18}, @local, @dev={0xfe, 0x80, [], 0xe}]}}}, @hopopts={{0xa0, 0x29, 0x36, {0x1, 0x10, [], [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x8000}, @pad1, @generic={0x7fffffff, 0x5d, "404e811246d336d905659ed91aae74eaa9f2a64929b4bd16796e9ef491dabb8af03aaf16786c4f011d299424ce73aad1d5430003de9b1c7c80b289ba5ef79a276ab70d036b423b097ffb36128d9c85280d06bd044cf1d3d6ec9e429582"}, @pad1, @pad1]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x6, 0x14, 0x1, 0x200, 0x0, [@remote, @loopback, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts={{0xa0, 0x29, 0x37, {0x2, 0x10, [], [@jumbo={0xc2, 0x4, 0x4}, @generic={0x7ff, 0x68, "1ce16b21a50d3ef1fd5c35ac762da46d4aa044ef5c1f8a6137d3614b5396d773718c1dbd4fc082da9c00d221ed3070cba3e043c8c6bfbf3b086b8456bfc7571bedf30e5b36a4aaf33a7d7aebd52bb5b5feb64be624be7a1218b691c329a76e18e4d86075b2c10385"}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @local}]}}}, @hopopts_2292={{0x108, 0x29, 0x36, {0x2c, 0x1d, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xb}}, @jumbo={0xc2, 0x4, 0x401}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xc}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @calipso={0x7, 0x50, {0x7, 0x12, 0x73, 0x4, [0x8, 0x4, 0x1000, 0x6, 0x6, 0x10001, 0x8, 0xc00000000, 0xf1]}}, @ra={0x5, 0x2, 0x80000001}, @pad1, @calipso={0x7, 0x50, {0x90, 0x12, 0xfff, 0x8, [0x9, 0x1000, 0x4, 0x8, 0xe8ea, 0x8000, 0x1, 0x4, 0x1000]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x398}, 0x4001) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000240)={0x10f000, 0x6000, 0x2, 0x8, 0x4}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000dc0)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) accept4(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x80, 0x800) times(&(0x7f00000001c0)) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0xfff) 04:55:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$vhci(r1, &(0x7f0000000180)=@HCI_EVENT_PKT={0x4, "27b366ed5b407cd196d7be3fee55dba9a6c603b69fb8535e63d0159e602cb96aaa22f7add3e386dfa57537c025b611c6e12ebc3080531ea709673656b198cbe95bf770ab331083ed63117ebccfecdf2998b7861e56ec34092cf1e27658172033b7e3367ee2eff118279167904527132d5ce44dc098b0170780121e1fa88467a0d04ea8e39beb1b9e2438395c9721c7be3015217e406ed016c7bb9a833a3292ab95bb57d92aa3c5e57addbea202fbaebce98118543c17dfc18beb23dd7f7634f8d993f7bda62e552f8ad217a8bef4c626a1876a0fac31feb064ae431916a1c81c7287fae52d516f1a330fab587277d8ba3cd9a496308228ae58afedd3ff20f99253974e4c2c2cc8cfc62213a2a618f1a6a2976e913e33869fcfc2b9535575db2d1b110d278ee1d0db29a0ff9b96be2315843a3024dfa8055c8abc18ea811c68f5a12b3003ada32366f25a1b9971df08ef019e8efabf7c9615f0208085692b193a14a06c229adaaf7daf0cf66812a4e77278c7070bff1ef7a6f6113cf980f67c6d7fe7018ec6fe22af07307920d533ef02be6b67498be74dea0b1786a317bbd41c28d84ba8c9ccb49b0b571f6757e135541b55e3ba051f3dfa458a322183fd67ad5e367c80588ca45497fbd6bbbcba416f3766b58fe268327545283520baf15fa8352610e8018c4b82c44e3977388a68ce675a01d0c551ca1311f166fb3d7cd964a431178b603fa1ebaa24b96b7198a91f6c58556273de8fe034eb2ec9f525e3224d1abfb45a6655a2ade3ab6ba6a5e07b702b979100535647a1c991aef0902bf3812b501502da6ceed04b6d21637febd65a17989c97bcd9c7b8f562557d37d12fa2688ce93a3c4d2decae5f6eda44d4bf0118560bdaed39124ec5aa5695cb0f91957074dbee86fd9c1b2dd261af92bc5e9b3b1782e2e5a52b173e872ab9a01d4af92f169b590fd5b1fc89d3558ff6e46dd4aef7a195fed5e18deece787f7814ed3852d4c6a9f637658bac1b7749972bc392abf614316f932566b51b7f3f245a12bde049507afe0756ae7e84cd4282b08fbe56a55057d2a2123d5fd273a9cb35fd8abe332c748b3745f0cf9468f6ec38c2e6bc8653a340012cd7ce0238e2a59082b26315fc91c90d1ab24c93edbebc4c84a9b82a6ce55916b951f0fdc20d6ec253036b10c5e3706d8a574c210325c94a67cd25c181982b88c49ebe1f6d425d123f6da963c5c9608ba0e9cb97096e6ede73c710f9ca1dc0db1df0a501b5e4b671efd10e3fe5edaac963b34e604114b8e193ccc5955483f4e288583417547e17875e89cc3fc525064b988632d7f809c1901fe88729d617f024c5d17c0e3c80a831f90d40d1917c447b85ed8357e01c66ea8db5405dd4e4a09c2d76c8a69b6ec504aaab943abd13531f9a55dfd6f0b32e26197e252ad538c8e9126e34229c89169ed9680aff6e1d0b6dae6a5dc72955df2051536d79384bb1857ccf23f117665e9a97f8633ddfdf47949828ae8abef32314c8e968f2f864c43f5242e76d4edf1e6581abbaa02bf930dbdb088b68364c753c29ad053bd617ad837f7bbd485f7ffe2eef99e4b121c0391733e857299005eb7c7e97c30bd6a35940c08b17958d2e51902c8e87c55431726388019c11a75bc532e21b68a0403844f26a2c44fc51d140ab62be1cdb972ff0e2b3d4c5567bd36aeee2762268d681ffcd038de9885530daf1338774716412651e107331ebe98055683212644cab7fb657ca4a98daecac2bf87ffd291b4c5ae23db85b4929552d2b23a0e5c2161da2b87f36d9dc0a8f91d0791f4994c083e50d79e59c418ab2926e8373875fac946cf2edfb9d39d546a16acc59a32834232f83171129eb9b3aaf91212d43ef776f4e736cfb4e432ec9e24e36d2a833b86df76c1bedd1c7b5b0d18fae24d8500bf7fd9b43193adafe11018273c6e8e131af624ef3744f0f263e4cb8c114ab20375462c266ee02ea900b35956e2fe1adbf9da0b173f20c1f04544a7ad53ae4b9f3aaae472cb479fe5e1f161d18364d2c2d84b0a6ce49b74e48211b1ba77987809e74c3b8b58072f33398d8e6a95c8bd9e732360d9fb7cf25f2f6c40e4eb943813f8e25ed830eb675e6cfa0f2453941524a3a5648190a18abdaefa58dbec545927e9f403d6b95ec739da86db589ad6c24883c23ed510668b1d4145121f062a7736bd77409d34b61ab7e0b5bc46891b458f128d9e877db7ff41af1ad8cf7819900fc19c4ccb18ed9d08609ffb43ccdc17dad8bc36d0ec2db2433e1f80968b4f7d208f035e07e8922f3633ec67068162ed7bf28036b4aad77010454f122d4c634611a7d61e8cbc29840278d9de64fba77e9ff179bf75b8e9c8ca9842f4a5e5797d4a62461df03b6da7a6de372affc81f485e4ecdb8a22343fe135ab945347c63b8802443234254a07ffadc820490a405d38a25eaddaeb9ed89c8338845564411f96b08b8b77ce2bcf65b22147553bdd4009d67001887684abc71d4194d3d460a2e192837e49b2464f14fdab2f51ef7de2212aad9023f03f5b42ee71125c97ffcfd5fb093bf1f1deeff00605ef435477d718d77d3d931a477c4d94ff60c4f67af6010470df30b2c2735ae1c61da60bf5abb54d57fc01840cd70326b43423542290d79b4f4443a4e79fe6b4c5b27128b148b756edfeafc51acbada6f6ac4ae3f075da6c2b1af166e7e64c48a6bebe7b78ef6984490078f9f5ae337ad61fbe1392aaef594d8a08f3a9d2ca568cd2651c078a4f419d907cccd57d8f2a3f7320d4d4d1ff7de2881fa35d0f3ef3362e081a30a76d38659325a8745a2e3df980e25db661948d042114c8ee8969a8b8cef28446efdf34503cff6ada4ad4b9fd9b1d8f209633b384b82d3cf08309e6335fad09218cd06643294c936994973618c7d7ca77fd8095ed6545a462328edbc758bcb822d9b6083217dba9c103e1e7ca143efc98f916a7fd6bc0a1d0bc621d35f2a5fd37cc403b5bb9f93bcb6d4d498653db6b50882a548d946796717f75ac936abed0c1471813be3d95490c9874fa06e7a2d4cf24b38fcbf7d1fa27c649b801ba14dc97496703451492cce6dc003ef532b53f1478eb834815b207d3c5343c7a8b5c8cd510577a1cbb99cacfce06ac4f953a1a13da9340777e0f06efc9e0cef1afdc3702ac9027814dd2cc1b5f1492e45802cf4f91c2ea9a4d5ee840b581bcdae0d09cd4a060ac28fb7ca2657b32edd7022c4a1b1b950496303fb54455b8b72cad989e84a57b208f0eda627cd1b8b47b87a67345aa8f1598774f969b6842605761d21827b09fdf43c751e47dffb5c75f1cbdfed8b98a4194a9e5067826b6022e1f4f1b3ca1cf87a885e2444d98daa4b108c706a0195ec3b9a56c3f8adf6af979d743594d71b3d7e5b185a6f2b46ee7bfef01bd9f9742224fb02f7438fd9f79e9493c1aabe8fc31cc5e111976745b4919c5b18ed2984ed8e376c6543f40bdc75b9b3eabebcac6427f4a9abeded7ebe9719ddf7e1cadaca7be5f5f8069b583cb5ec1bdec63ca30813f26442ad19c6fd77a3b92ccaddd18bc4272b4bab367a7bb50a2d37abeb8160ceb13465396742f58db99f46347c4f9ad3731ef267430d1bec03d1e33d56b5d339413fc1433d47ff72b4c816c7083235da8afb23872bac5efe284a1d71bb2e3f4a8bd20c4f1c9a63be039be8979bc3da30057903f6ee6a76d9551a104edb7eddb7e9314c0504ce0b49e4caf6fb27055543fd6c2d2c8567e0e035f12e993707fa2ec0638d6d4221682c150a1bb56cd07a13d2b55e8d8818f353f7ba82397569f75392a59f07719e4698d2746d413c28ff99d8d00e2d5d991903bbfc3e85a12d4aa91dcb191c28d89431b37068f33151f54d7e6e00b3d54837f532f6ea1c534c16ae554a86c19deb089b201958d10165afc7911206bf01a5470918e182a1614e15ed0d53e9a96b4a69ded06e2e8f3a93b5f229d1a1a18cbb0aae33826c9739e3e1669d0fbbef57bdc2054fb57310d69acd4b1a419ebde14a270a60783841901aba4ab7b7ccd97864da947e553f068dd9d7d4106a561797386811bb0d6932ad968669f7dfaf6bba0d47f70c29cbd1f82bb840bbd49591509040c6136ea33142d90e5621a393ea4800afa95aad25793238518193c9dd33f16826de49368c86cf5ac4a698e0fd2e78d48ee52fc7a80dd2298331f1f30d2172e1c1389dc438376e349387e7fd14d7ab07e439902c56302b9d68d4ffe1c3b712d87031a5f915401e6ed04055c8cd3c0ab3b436e55ed0e390857101b14c8e16ab95799d3ee1b41750c48265a8a2a97e04b636d35421deac364ecc4d4972a7edb537b01382cb2ceb2b9ecbaa9bc5cf9f204b42148c3b642761f46fd75c951657379463be111e7bafc3eeaebfbf5cfea884deb1cac39d3306131bdee1660352f353e419d4c1b6011a97fea8890885a3bd5a9cb621b0f131d5723879f978fa36f268d5f94bc8ef671297cb5509708d27c2d95002f58e2a35bb7378b39941452abf9696fed7e3681ed0a76182ed63a008e9de55263a7a31de184aa99aca2f9ce7db98efadd40f3006737cbfd16c733e0811ef7e3ba5f384bf5f3cc37890e40529aa3f9be81a2abeb59d4825cc39387d4f05e88b04853bc1ae72108882a2f5b4464544fe17bbf16798464d87d913a750540fb4f23e4c119c32f030505e5b35b6dff7172dc9e2cf92b78fd970e7ea18529ec0b659797393fbbe5e4d20ec3a08ac8994d76830851b6657c77378a2b511e356a432402f93c779ff7d1563b64fc1c61bf04dcbd7dabc463e945438f8ec455facce4dbdb2fa42f0453bbe5df0c26aba373068653af9a41d987bc9639f070934d99ea03adb38f14c004dbd55167f5b0f4b090d006a736dc66bc5c63dc36b410e2e9324613b7d3d127eacba7f45a347b9b790123676d147d3647bbed10392a9cef891e8d0d6ba0dcb120e9f34f09d4108cf58a220344f14a6b602384b19aa4487ff61aaef4532c75037f7c5a9a76ff305a1306e1f694dcbc8487ddce53f1b93e2e2bf19c3d3378399756a6fd0c9cb06a471c6e1763acc0059c39124d3d836485a9e7b0efb675a1f25c2e32d3245d7dbdc19a1a9268b2f6ca94bcccd2d6131f2d5e884589b9f15e3ec49e84ce48a64019009f249bbdd6e758b815041a7d96ee26b3420b684af3c0c8af264e32086425eed3d62060dd145c56feb70da7a089c982a49577bba89b73508450a70293afb9c1f9c112303f8fc577cfbd42c6c14c5dc49b7cfe7bedb3e00a0dc8ee1a51f296ea40172874e460d333e3d06ab63085e38fb77122cd85827d279b8e6b428da8c8ce0b16167e22caf9964eda9d9f44e711a78cba8b8b525c2694a52398aebd46aff6f379608a9c7289ad630ef6958870b0ffbff8f958449d37f99d0931777bf5ea88bce7baec7a7d2779a0cf21a413d3cf90ec651352d2c2e50cfa90064ad74cc4b71f4de16e7159218d4b31b08e96b8e551ad2023cadbbb6e11b2b6c454fc056e6491b2d727057808d7c22977015f821b4559fbef477f7fefaa87bb1a09ff30f15b2625b5e70776ecec40acbd5db0a9e94fdbde3bb7f71654173ce2891b6b4114911cf10cfac4f951d9ccfb88322ee4ceef2c3de515297b07656ea1137e2abd68bf84a059bbf8987843f4530b7da8154791b724f204a4888fd7869eb549c256308602bef7757c1fc457af5724a533fd3b1667f51ac432b2dfba9a29afef07399706581c8a913289388d51028674e4725791e026bf73416f44b1982fb5eaefbdec4c78c01b60c6591b6e4059f7"}, 0x1001) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vhci\x00', 0x8001001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001200)=""/252, &(0x7f00000000c0)=0xfc) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x800000, &(0x7f00000013c0)={[{@mode={'mode', 0x3d, 0x1f}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x450}}, {@mode={'mode', 0x3d, 0x30000}}, {@mode={'mode', 0x3d, 0x7}}], [{@dont_measure='dont_measure'}, {@subj_user={'subj_user', 0x3d, '/dev/ubi_ctrl\x00'}}, {@smackfsroot={'smackfsroot'}}, {@appraise_type='appraise_type=imasig'}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@permit_directio='permit_directio'}]}) close(r2) 04:55:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x240040, 0x0) connect$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4000000010000007, 0x213, 0x1, "672154da985095cdc61751c7b4bfa68a07a8e3c75baac5e6a9c30ad6f4bab3c0747e35ccff441edc50e39086cc9a3e0a4e067f2c98692743dc1b9de49a9cc0", 0x4}, 0x60) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) r3 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000380)={{0x2, 0x5, 0x8cf, 0xffffffffffffff3b, 'syz0\x00', 0x1f}, 0x3, 0x100, 0x81, r3, 0x2, 0x2, 'syz0\x00', &(0x7f0000000340)=[']#{\x00', '/dev/vga_arbiter\x00'], 0x15, [], [0x6, 0x1, 0x9, 0x8]}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000300)={r4, 0x6, &(0x7f0000000200)=[0x3, 0x7ff, 0xfffffffffffffffd, 0x4, 0x100000001, 0x2], &(0x7f0000000240)=[0x10000, 0xfffffffffffffe00, 0x5, 0x9, 0x9, 0xff, 0x2], 0x21, 0x3, 0x7fff, &(0x7f0000000280)=[0x10001, 0x8, 0x40], &(0x7f00000002c0)=[0x101, 0x6, 0x8]}) 04:55:39 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r1, 0x5}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) wait4(r3, 0x0, 0x4, &(0x7f0000000240)) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) 04:55:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\xff\xff\xff\xff\x87`\x00'}, 0x45c) 04:55:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x10100) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x9, 0x1, 0x5, 0x8000, 0x1a, 0x5, 0x8000, 0x4, 0x9d13, 0x1}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @rand_addr=0xffffffff00000001}}, 0x1e) 04:55:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, 0x45c) 04:55:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="76413150a986663cd0ec5e54be8a81dde2bdc305e2687b5652876ab0c8d11d77ce94f1345d3c855b0fd846a7d9d5bab5a64350857a6aac87104ccad0ce39a8d3d6ca1d51e04d475aa57891bda6162b2b3df02625ba3ac162d897b6f9e2b9d4d1bc0451ed6fc270345bc85a324c4f7f7143c36591e5d535bd0d12300c4880ad6219e94d232f0770a4a71590adcae03c2205dfc1c20d8d702aa4db004ac7ce30b5a1ebf81c7410179b2d6994081febf062f08e89881698834b72d73b422fd52bf3df0fe30aaa3f06f72f7ec444e1869b439652a667636d116a51cd", 0xda, 0xfffffffffffffff9) keyctl$setperm(0x5, r2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000280)=""/24, &(0x7f00000002c0)=0x18) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xb, 0x19, 0x10, "9b8da0e34480b6fcac9b84ea79739cf12959979251b1a8b237290758bf8f70161101db73bd58b37405ccd2fe937188bd0ec498484b4b3233035d14bbb595a838", "b697b116fdca07000d303e01844a6fca9382f7516f4f0d3a566ea1d9c7751ae515d94d7f1beae4e0a3521bd5e7244486c47e36b47aca00169ba07f15ca0dc04d", "939f985db1659eefff25f289803df5f9fa3fee522952f3b457ca7e975822dabc", [0x4, 0x4]}) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@int=0xdfd9, 0x4) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a00000004000000000000000000000003000000000000001f0000000000743e8e62c93c000002000000"], 0x2a) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000340)={r4, r5/1000+10000}, 0x10) 04:55:40 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000180)="ffb4c6e3ad13bf7b643926962cdf1d90219231eb7f56af876d0e4133a1c349330c2874312ffbea8454d5c4003e48a1b8b6f5864cb64408aa55612aace467970fb946a02103b447ecbf21f12ab03e43ed04fe30896ec7bf325ed56eda0ceb85160d40ee94e9025e8fecd8f7a8baf58ad40a910580553914750f9a1bd2e2f5175ee263eb5889870fb366f01a733ce08f6a86983a2750722da098661d21bae340be7f09a69dee17a4107e9d982200860e6a40974992379c9d36e597c5ecd94aea430bd59f59cb11835b8007b307ac", 0xcd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0xba, 0x5, &(0x7f0000000480)=[{&(0x7f0000000180)="7d4de48dc47ff5e03abc09cecb1609eff7b52f7534d365cfdd45e79bf4c2dad548afdcbcfae37c1af8875a13b3526df5dd69694a430363012f72e74b364036cf5f872c8125789bcc188c48d0f7942fede549023d1f91d24bc6618b3908e219d0b53107f09e29457b1b7f9e2342966ccbd9d791b8c51e4c18646cd1e930c09690e5489406c90f01377fee5a13483c253dbff197c8e360390e611de1e369d53e4545a1eeeee95315ea4100db1597db3b7f1ffb9a13b8adaaf6b837ec1acc0b179b743282d5ff15b6be594f0bc11e1f4cf0cfc11b0bbe5a919937e5ac5471bd", 0xde, 0x1}, {&(0x7f0000000280)="7af0badc23e67fcfca82584b97cf77e1e4135e5cf8333cb362052fec00985cf45bd66fce2df13e3794ebf2c1fe6a1c2996e0dbd1e251710d7e28d06db4cb3e953a3e9084be0c18f6d523c5bfa80dcafa44e0a3f276cf70caec4337a6b6dc33f8364b2ab841be8186376d0810061678ff33373d3ecf81aca2c809123043fed9cc4e33adc10893dbe28e4956a1a1905cae28aa235dd943a406ab12c31e60424281973bc4e6f85d05476c46f1a0bd8e3be09ecab7dec33fdf8db3e8ac4d0cbc68971c080ce42b3b33c3b61d99ebbd32ab95007f4127322600cfd29c9d58b6b293f672827bb2bd89d98a8f7c4cf73d8cb5224e9427011cb59da6f45409fde1f228", 0xff, 0x1}, {&(0x7f0000000100)="cf84792e1c0a1fe7d5c7dfb613bfbce4a98d5d3badfd26981a3eb014c8ff47f050b0c47aa05c5695a07ce04b38605db77955cf", 0x33, 0x73d4}, {&(0x7f0000000380)="e1c65c1c4d841f00eb79101f1cd68226d665747b63e68d168c88fc95510ddf4dd36c12aece424585947f9d6fdb6c3a50f338d1b81316eb56f493dbf7f51372f9489e4dc2acb800c75fb832ac321e11f2a9a3889ebc6491057d5d8a3f2b42a3abb8edf6f673a1ef2c87ab8646e4996b36ce4494467d3ba579cc3fb4b47b6ae24326933673bca0cdf55049dcf96967cf6e70654315dc87d2caf2aed0d5da7b9bc1c65669973c9d7675e96f78b2428ae6e784a6b99a202061958c4456", 0xbb, 0xfe000000000}, {&(0x7f0000000440)="14fb95aad5888d4c691295059ca5c3bf74bdf80dd029dccaf8149bd17b85c8dc5aa9973a51c8e8a7cd00eb62bd5bc860ef", 0x31, 0x4}], 0x2000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f696b6565702c6e6f61747472322c696e6f646533322c62696f73697a653d30303030303030303030303030303030303030372c736d61636b66737472616e736d7574653d2c646f6e745f686173682c66736e616d653d2f6465762f76686369002c736d61636b66736861743d47504c2c736d61636b66736465663d7b25212c686173682c646f6e745f61707072616973652c003c23a99162fb61cfb69a2c43823d72d5a8583d3f24d9d0"]) r2 = syz_open_dev$audion(&(0x7f0000000840)='/dev/audio#\x00', 0x1, 0x101) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000008c0)={0xfffffffffffffffb, 0x0, 0x4, 0x40020000, {}, {0x7, 0xc, 0xdde9, 0x80000000, 0x10000, 0xffff, "a9dc001d"}, 0x1, 0x3, @planes=&(0x7f0000000880)={0x3f, 0x2, @fd=r2, 0xffffffffffffffc1}, 0x4}) add_key(&(0x7f00000005c0)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="cceb7c25b4939e4e6debc2a2cffec29a5dc182233a134758ce20cf35197a28b7e33aaa47a609bba3bc910e51acf44fcbccb3864bab90453fe7ebb8a9b2c5d236fe7ccfd011f329162a2d1629d8024c48d25e3328745a4f5df980fed975046a5c15aaffbbd7b72cf00fed0671df4589ed25e012c01f24c824f48fdb65d7553bbcb1c1787f20b8fd41f1919a31954dc8c853c25caa32f0a4a2d0a91df12b3b9ca14d226534115b2b30c34a64", 0xab, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000780)='pkcs7_test\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)='\x00', 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x101b4, 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000500)={@loopback, @initdev, 0x0}, &(0x7f0000000540)=0xc) bind$xdp(r2, &(0x7f0000000580)={0x2c, 0x6, r3, 0xb, r2}, 0x10) close(r1) 04:55:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x45c) 04:55:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40, 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) sync_file_range(r1, 0x3ff, 0x0, 0x2) close(r1) 04:55:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, "868278e4e22089db7d70bc6db2bb2f268c233a373141053bac6ed45551920ec82bc3c4719a13852d8844df263ab070739f"}, 0xde2d855397af7b51) close(r1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000, 0x0) 04:55:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x11, [@generic="802f"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 04:55:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101040, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000000c0)={0x3, 0xfffffffffffffff7, 0xfffffffffffffff9}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) close(r2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) 04:55:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x45c) 04:55:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:55:40 executing program 2: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r0, 0x12, &(0x7f00000000c0)={0x3c}) rt_sigsuspend(&(0x7f0000000080), 0x5) 04:55:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f0000000180)='./file0\x00', 0x9bb, 0x7, &(0x7f0000000540)=[{&(0x7f00000001c0)="85e0e5c9cc261f04d7cc972323b1a268aa3b7f837507e4fdef9527636571f13a4055171fded08b98a766a1f585ec092077a0b8e15722d4b983e5bf14530a5b64257608d56b46f969c856ec232678df3c055a385840ee6161d078418d0e0061f79af26b3a4a607b61a91bd80a0d1b6f3212c12511db7ec14a72e4c0cc1e769f94f1ca74eb416b273e0bf27bbe0c8d2034167476c9dc5422fb2fef448767d9a6bb405a6756b864428473218329", 0xac, 0x81}, {&(0x7f0000000280)="19e747f9f2a0e8d1d2e12ca2eecd5b4820561babb57ee647cf5e1f1e4bbfa9f6f4a21920", 0x24, 0x3}, {&(0x7f00000002c0)="1a3bfc793692a51997950cc80638187ab2aae13a522bff6e01d69ebf6a02a15ccdc054d7d47c42516fc6d746da1ad1ba412d", 0x32, 0x6}, {&(0x7f0000000300)="edc9612b24bed3a6abbfc9f33f9a66f4410476719fc85fdc1a1d8c39c3e564e527828cd965905b3c4d88dc25dee753ef37608a1569a5fce43b411595b9a5d2685cf58581d7dd7d2b04802ae1c02b575bcab82fe0385354abf1bde9d2a283561d04966d86c9dd75a71d04dc88ec985def14b7e86d55346ab2d1c4167abd5195562663946ebe2408520c399e3e1bed84c46c337410ef75ca972acc24e6083a9ee20b730e85dc0107b9c0f62450b62aa49e828c02a597", 0xb5, 0x2}, {&(0x7f00000003c0)="864dba07d57cb632f00bfe796eae74ba01b349b5509623efd9f91cc2f5ce0867c1dc1825e3686fee37790840993782dd8690abb8aa8b99391c47f781206ed25ada85cf4e5227c03527ec79bc4f976d02abb2afbca75cbe6ee4ca5ddef787badcba2587c1851d36372c", 0x69, 0x1}, {&(0x7f0000000440)="ea6c088f9fc5b22ea2c1c8f2055d6cd62c027af733b4669f1b", 0x19, 0xffff}, {&(0x7f0000000480)="7d9f00801936234087b8aa87f531c6be1bec832d1da1d17293aac2109bb95d3b2abcbefa1b5a90ea54165ffe5bff5da51c43af290bf3c8b95ae1baa6305d74271aec424a890c4dfa29628a647a8ca07dbdfd05f9427571e60fbc026517856169e3b9ba16802af40f13c9ded1d2a211009c885f4fab79442bb15cada1ecd390c558ad8393894352242272ef388bc9dcfce339fad7fdfc95943a772a4c876da9464f3aa90d2a4251ccb72b88d75c9bc5ce899e59935d6b1b49e9e54e7bb6", 0xbd, 0x7}], 0x200000, &(0x7f0000000600)='\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0x4) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000000c0)) [ 369.407099][T12151] ceph: device name is missing path (no : separator in /dev/loop1) [ 369.485415][T12155] ceph: device name is missing path (no : separator in /dev/loop1) 04:55:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x4000) r3 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000800)='/dev/vhci\x00'}, 0x30) r6 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001d80)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001e80)=0xe8) getresgid(&(0x7f0000001ec0)=0x0, &(0x7f0000001f00), &(0x7f0000001f40)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001f80)=0x0) lstat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002080)=0x0, &(0x7f00000020c0), &(0x7f0000002100)) r12 = fcntl$getown(r1, 0x9) stat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() r15 = getpid() getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000025c0)={'icmp6\x00'}, &(0x7f0000002600)=0x1e) r16 = getuid() stat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000022c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000023c0)=0xe8) getresgid(&(0x7f0000002400)=0x0, &(0x7f0000002440), &(0x7f0000002480)) sendmsg$netlink(r2, &(0x7f0000002580)={&(0x7f00000000c0), 0xc, &(0x7f0000001d40)=[{&(0x7f0000000180)={0x1ac, 0x42, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x19c, 0x3a, [@typed={0x8, 0x34, @ipv4=@broadcast}, @typed={0x10, 0x28, @str='/dev/vhci\x00'}, @generic="25bae323ddb9dddda770924a71e3cb7abf1091681f6940202c59ceab95aaea4ed035c637adeda4097a225f4fb4b1c220b40d31aae9dc9eda1aee5d565dffcfa9156573cde2525e12a3e6b17cc2d212901d4efb6000d1059d9b0c86cfff54bdf991aa441f7cbf42d3bd2fbd920f51840ba2495229b7040919638de1", @generic, @typed={0x8, 0x4, @ipv4=@empty}, @typed={0x8, 0x12, @ipv4=@multicast1}, @typed={0x8, 0x5a, @ipv4=@remote}, @generic="e2ef75fd535cfd96a9874d2cac0cacb911c191a7cda383f4318bdbee60ce8d84d731f464437ad3132cfc210bee5ccad390af757bc4b091a0051baad967db29a623d0433febf897cd8823cfec6f880ed2bbc40bfa75f8f48441a9df546b87cfc80762ca56b595d9489a2e11a9da677bc5f71d24b61cdf84ad6f780aebf3d0bd468c23b7ff356b388acac5acb9b8a62835095d6d5ca151e6274033774a8cf3465f0a23295608c2898fb63301b8ce1ed0da4c1488cde71700c03ef6edc167855a362043dcfb7f3fc00d3e3f477f7d3c2a72be1b6a8d9a7f020dba447a0fa37cc395d4fdef846adb053575c5871648"]}]}, 0x1ac}, {&(0x7f0000000340)={0x2dc, 0x1c, 0x408, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x10, 0x8d, [@typed={0x8, 0x61, @pid=r3}, @typed={0x4, 0x64}]}, @generic="11cea270a1bf1d4e4f2cd68714946bb31b255ae1f8a6007a9a708804e4b6412444b143ab6d3d6c6623d89b", @generic="71d875e31edb0a23841b92d4f271d1eccb7e86d0f4595d97051b2b1d695a487136bf20286db93fea19cac12b8629ea8f2411bd7c76f6c88b56668f8e118152bb42dc127063d5d8430cb26b208e5d35444b26c668ba3c83a40bd9c95571cf6cf1c4d1de9ee5667f0bd86825b0e0546e639ea8002d6a98152b12e614c08e5130c4486da6173567d95f582d85b6890a212f54b8a40f90b3e56ca61098df390f9dd58bf646710ee6", @nested={0xfc, 0x71, [@generic="f6a3ff6bde8ce989653d", @generic="3aac3008f2f8533e18c9511906f2b2897aae5b256d07019eef2291086d4e9d36e297e5ab56fa4170a322b767364634ce27856ef6a5fa05338304dfee5c8ae6855741b3d8ceccff6f587aea2577e4694344ab2a650a00be0c3bd9b009f3c3c857b54cc0dfaa82f2ff48ba62d9acdb92e51ff902d7c5", @generic="201a14c0ee916ec615e227f199e04c6366509a282254990cf64bafc71dbb50b8406013d5bacdeae512cb1e94c0f4796417eb20d1d1e77a28eb4c75724057a8d05a4fc81ff44968", @typed={0x4, 0x83}, @generic="eaf281aa6fadda8e7ff3cda6b738a9e0df13e4b9e36ed7114882033c805cad6807f6b5d64b343d5ed04d759c5933"]}, @generic="7aa3c31834e246eb5cc813fb24583cfe10baaf3ec3377263e2958de7ee04e237f456b4919b33", @nested={0xc8, 0x85, [@generic="804416563907d0e46cda74e2afd6d84c23d0c578ff1ebd9584b8cd28807339a0f1d86edd2737b11ffcd035b80beee7651017031b0f3ff443d60ccfc308b38a6377d1ad4cf394bf6508b2058362a77a8aac1efc1f1dcbed2095ae307696537c57066ba3dd8cb9a0d3b6bd01becba1b3682424aa3b965adbc47ca5a9ad3fbcd2dd49a465b54ed7", @generic="4bee3a41c39922", @typed={0x8, 0x36, @fd=r1}, @typed={0x1c, 0x14, @str='\\ppp1vmnet0mime_type(\x00'}, @generic="d7c70715245f0b7f4c291494ed8edd06d6"]}]}, 0x2dc}, {&(0x7f0000000740)={0x8c, 0x2d, 0x800, 0x70bd26, 0x25dfdbff, "", [@nested={0x18, 0x71, [@typed={0x10, 0x5b, @str='/dev/vhci\x00'}, @typed={0x4, 0x58}]}, @generic="84a76627177c6a7cc6b5253d2a49f3", @typed={0x8, 0x11, @uid=r4}, @generic="8b7e1e05bafe61864c435b6dfaeb4b6f0ececcefbc96b777cc3ef93a518a2ce88052180153a0d0cd0ff13917fcee942f2fd437a34ce4348bf82ea26a010f4dddcd2e25", @typed={0x8, 0x3d, @ipv4=@rand_addr=0xffff}]}, 0x8c}, {&(0x7f0000000880)={0x1494, 0x25, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x37c, 0x65, [@typed={0xc, 0x1f, @u64=0x3}, @typed={0xc, 0x80, @u64=0x2df1}, @generic="216e2ec70c91eafe2da446d30a73f37ed92643be8b20c4cb176ab6a09aea9e9cee6dc8d530e378911a69f1fbbc7e5722e81f2c7d30b2746977c10e6b310f6e1ecc52b5b00414f58a9fe54d2b691ec558b79dfc78a9151cb3541b421f1ac83cae76cea86c1b4325fe", @generic="2807a51e36dc51d426b1ad1ca1fd4d4d795bd513d971cbb4252505f68d7a23514121a8112ad74fb846ca172011355486dc19b98a358e85089db25edafe04305c2de6ae59e8755df5d14934a83c150a999d3372268e587f646a4019ec75fc9a11fb3689289aeb69b9f6f0f038e351977d647fb10cbedf3c024362c6acedf7a908d0030311c152f17aa7b70f8aa5b5447b7fe81e7e7ef729e75a81c39e8948875a4ee92f148f8a2c05c9751c79a472472e904e7dc5632dc480e9a748c374723a4d8ca28e6c44d14d29a8e6e04b3b919a7ac9c3c3937c82f39f79a6454662f755c7e439aee567da52089fc9", @generic="b07da6583f5e1d4f7102614318247132210344ffd3c335ff079e24fd64b990e73897a188a016a8857febab75529821a02f0dd1f5e082ec9044ed926a4a62303f8172ece0e0febbeb0e1a15887721a328583016121bb775aa9f376ad95fce9edc013d341f152834f62b00dc14d603330ac2624ef50a2d5d72fe674e3059fcb0a3ecc9d80a36881454826bbbd2f8449009b16089b67c7b9fa1ed0e1139e7afaae078f0d7aa3b04135e9f201fa010ffe1be3283b4e5f2ec138711b41d0eb2375a30e83e3a81cf0990d02b84fdd7366b4c7b73", @generic="4a9005fbf9cd4abadcf36cb5bf417f85fcb1793999cec8a2d9b0d0131167d55a8b6fdd73bf76bf143f3471c7705703b5352f1706d6081a1430b4a71f76f750b1cb33ddf776b4c0ec64dc", @typed={0x10, 0x4c, @str='/dev/vhci\x00'}, @generic="dd4baa5129935e06f73990a5ac68db27c70299613d7903054ea1b8e2fa9e967e40edcf24ce9e56ffa55672880a92bf9e93d4f7449b5030da5866ec7947a3851d85cc736aeb663bc4335e114800278dc1f3a5315710dbaaca1e07cf3db38c733650892bc73e0afab247b2eba43bb186e91855c65d373da37006b12e27f6acc398c2adae10d41ebe5894ed88bc94f269d4b93cf7c9cb20e857187b6b07751e5d289fac57caf93a710bf8a47b39e47aedc76f4f9e13f10bd0fb574fe537fb10ad8088e1645fc81282890d73cc2a147580b1635685578de6bd780aeed49da7d041d7dd"]}, @typed={0x4, 0x10}, @generic="1967a4879f2e91960abcf69e6835275162c2ea64466c56b5317196795b352c19dd45ccf356219a74bb8444250f216e29faee2922b3b2eab67b0beb99683f70119e4dcb27deb51df5c875ea4eaae30fc6f6fb889a23f40f57", @typed={0x8, 0x94, @pid=r5}, @typed={0x4, 0x2a}, @generic="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", @generic="70454e3144fa74616f23b49f70e9ab012823d20e6f5be0dfd4a1e37312999ebcf3e6520f310bcfb8ff8f93c8c39e7c037471e485d9579abc91a50653f9752b300c55b9e9d760d42d0384b2e1357465c57135525135a423360dc9d40e6ff5c5d281583e8c596c7d484f3ace801ab9909f69b1a8c0bdd4ebbc03e2ad17ac011eb559013237f7bff46ea3eda28cce233424f474b13c6bcf3b751495dd0bacc8ebdc"]}, 0x1494}], 0x4, &(0x7f00000024c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0xa0, 0x810}, 0x4081) 04:55:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:55:41 executing program 2: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) r0 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)=')^\x00', 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="09760fe3aa1b75072a2ac7ac4022adba26a74579", 0x14, 0xfffffffffffffff8) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x70, 0x2c5aeda9, 0x4, 0x4, 0x2, 0x0, 0x7fff, 0x128, 0x2, 0x401, 0xfffffffffffffffe, 0x1, 0x5, 0xffff, 0x9, 0x7, 0xffffffff, 0x0, 0x5, 0x2, 0xffff, 0x5, 0x8, 0x1, 0x0, 0x56, 0x200, 0x0, 0xc9c, 0x6, 0x3ff, 0x7fff, 0x100000001, 0x7fff, 0x4, 0x7f, 0x7, 0x0, 0x100, 0x6, @perf_bp={&(0x7f0000000380), 0x9}, 0x210, 0x417, 0x6, 0x3, 0x1ff, 0x2, 0x8}, r2, 0x4, 0xffffffffffffff9c, 0x2) keyctl$search(0xa, r0, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, r1) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x20000, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000340)=0xe874, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x200000e) 04:55:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x3d, "f4f7e63378747a35cc2cb35cf1f99fbd6a314eaec84f4a5f9fc221513e4ad381ebec26a29e3c2439e6b09554a3393f7599c49d9622cf3ce903479076e2"}, &(0x7f0000000180)=0x45) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0xfffffffffffffeff, 0x1, 0x200, 0x6, 0x8000, 0x1000, 0x81, 0x7, r2}, 0x20) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) 04:55:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x80000000, 0x400002) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000580)="9830e4354d6a779a02f9e4850f018f83", 0x10) close(r1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x1, 0xfffffffffffffffa, @mcast2, 0x8000}}, 0x20000000200, 0xd2a}, &(0x7f0000000680)=0x90) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='+selinux}wlan0\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x40080, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r3, 0x3, 0xffc, 0xffffffffffffffff}, &(0x7f0000000480)=0xfffffffffffffe18) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000003c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)={0x204b, 0x8, 0x0, [{0x0, 0x1, 0x7cdda165, 0x1, 0x7f, 0x4, 0xffffffff}, {0x9, 0x9, 0x1, 0xe64, 0x7ff, 0x8, 0x6}, {0x4, 0xd63e, 0xff, 0x25, 0x80000001, 0x2, 0x4}, {0x3, 0x6, 0x6, 0x1, 0x9, 0x8, 0x1}, {0x80000000, 0x325, 0x6, 0x3, 0x1, 0x1, 0x6}, {0x6, 0x9, 0x3, 0xfffffffffffffff9, 0x3, 0x7, 0x5}, {0x7, 0xc43b, 0x9, 0x9, 0xfffffffffffffff7, 0x8, 0x61}, {0x7, 0x0, 0x9, 0x0, 0x8, 0x4, 0x100}]}) 04:55:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfec7be070ead418794662ab0af18b745515bdb6abbc5fa3a8c8e0662b6780f068c8e496be5e7d6014c7fc588cef7ee04f48b04bb1f7b4d460fa85954f87e0f7a855a06d01b8672ddd4b37be82fd1b3854fb") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0xfff, &(0x7f00000000c0)=0x2) 04:55:41 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x43, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:locale_t:s0\x00', 0x1e, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bc0}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) 04:55:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000080)=""/107, 0x93}) close(r1) 04:55:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:55:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8b3, &(0x7f0000000000)="11dca5055e0bcf496be070") semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f00000000c0)) 04:55:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 04:55:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9d, 0x203) getpeername$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x1c) 04:55:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x181080) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) sendmsg(r4, &(0x7f0000004600)={&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000000200)="0c2a5c38f42aac829f90b7e43d406bfd0601836b609b91bf7873f0b38f15ef7b23cee235403081d9da67e3d87f289afaa0863d3c5ae858e80ee58d1b4429c4111869c7994cfcc780aff719370d6fe8cdc4688fafb66dea91a6f0631088d3c9281bc827d0900851d6debb3250", 0x6c}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000100)}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="54bcbe974cb7a6dd2f273d49212a02e10731602b42a8fc43bb72cd48ff982580c86bc43c767fc03f9aabf7bcfe3e7740e1347f119c2833c30070ea5c2a9c4ae37cf816e6516d24974eb061f602f8f79610f2e5e1966e6b1f2c824a0dd648911b2c66abafdf8ee3e875b0eb00084a152cb968c58c61b65d2a9e3921deb617a71f", 0x80}, {&(0x7f0000003300)="fec5134b9d36327b55bcd66b46154b6b23ada76d0e5ae9d3daa7f5335a0e1e9ca4b56b036b24c55666fb22d37d7041058d077195620de613e91ef1eb08b57be3f626cf480affc64a382828b82de91f4b1148beca98d335eb16d3d4490ebd7e02c4fe64ddb0cb0357ae57b742fcaaa648a5f0873bb99928e29d2a7c", 0x7b}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="1f32b4a323d6c2c3dfb4401ca65e9964b8c4d79972a86d9914eb0124dbd4bc6529ebdf2454d8683f80532222c9bc0cda771395d14b363bd8fe76882069811f20a865d5ee762692acf3e450dbb105c112d66c449db92e425af11270479db6e648a61ce000cd0e0c0a20ea55018d03c89de2e25f5bddb77874008942f8d15dde4f2ea72d7e8f9c49b6d72614b985e4e85fcaa77c5adfccbbe18f5a3de36c11c85a98aab7cebe4e1e9bbd7bfdf28883887afcb487c697dc96f9e5d73fefa8680e865ffe", 0xc2}, {&(0x7f0000004480)="ac8609e1d0db8ec683636651446b51d81187bd4c86eab20cc47d152cf16c7c8e3ea96029b30f00374d0ff5cd5fb1bd90a5bdb0cec0d3dd5d79", 0x39}], 0xa, &(0x7f0000004780)=ANY=[@ANYBLOB="4801000000000000070100000000008081c587eb4307bc4d5a136836b4444fe35cc2a7f032053e79927de55a094b16f66fd3561ec9a1f1de8771a1ecf56b5b4055da35c831e40000000000000b000000651614e272ff43ae32e3071095b78bf82abb8b6d3bc49b45353d103c051ffc4a7f9d171e25a5fc4697c6bce9f76be19704b07f74ce57e928d65ea294994959e9a8ba604e263ac03ffaef"], 0x48}, 0x800) 04:55:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x45c) 04:55:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb6, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x41, {}, {0x4, 0xe, 0x4, 0xfff, 0x1, 0x401, "fef1fd6e"}, 0xfffffffffffffffd, 0x4, @userptr=0x7fffffff, 0x4}) 04:55:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x70ac, 0x4a6a00) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000180)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200080, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_mtu(r1, 0x0, 0x32, &(0x7f0000000200), 0x4) 04:55:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4080, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x7f) close(r1) 04:55:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x45c) 04:55:42 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x101000, 0x0) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000100)=0x68) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x840, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:42 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x0) accept$inet(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x31c, @local, 0xfff}, r2}}, 0x30) 04:55:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x45c) 04:55:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x210400, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) rt_sigsuspend(&(0x7f0000000200)={0x4000000000010001}, 0xfffffffffffffe55) write$vhci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="021ba3b2e8fc31fd7be85a387bc1b98fb45887998b9b475d9f2c421601930900d17c6cb680ba2bf4ec054359acdeb3f162e64eb8610d28f9248660a344d7fc7eb7f733041ef5fc85a7c355965f3a37e38828"], 0x4c) close(r2) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delrng={0x10, 0x14, 0x0, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4005}, 0x800) 04:55:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000001c0)=ANY=[@ANYBLOB="080008000025d82e6f31982f00ef0488a851d1064ae9343a9d0000fdaae411bdf67390ae3b"]) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000180)=0x3) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) close(r1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) 04:55:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) fsmount(r2, 0x1, 0x6) 04:55:43 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x0) accept$inet(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x31c, @local, 0xfff}, r2}}, 0x30) 04:55:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="11dca5055ef0c15383367f230bcfec7be070") write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 04:55:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x1004, 0xffffffffffffffff, 0x4, r2, 0x4}) 04:55:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x10000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r1) 04:55:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x45c) 04:55:43 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x0) accept$inet(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x31c, @local, 0xfff}, r2}}, 0x30) 04:55:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfffffffffffffffd, 0x200000) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x4, 0x401, 0x4, 0x0, 0x0, [{r2, 0x0, 0x9}, {r0, 0x0, 0x5}, {r2, 0x0, 0x80000001}, {r1, 0x0, 0x8}]}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000f2040100c60c"], &(0x7f00000000c0)=0xa) iopl(0x9) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}, 0x45c) 04:55:44 executing program 5: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000080)=@raw=[@exit, @alu={0x7, 0x9, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffffff0}, @jmp={0x5, 0x7ff, 0x0, 0x2, 0xf94037eff822007c, 0x0, 0xfffffffffffffff1}, @generic={0x3f, 0x2, 0x1, 0xa17, 0x80200}, @jmp={0x5, 0x2, 0x0, 0x0, 0x2, 0x8, 0x8}, @ldst={0x1, 0xbc60bf67b66dae66, 0x6, 0xa, 0xa, 0x6, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0xf, 0xffffffffffffff9c, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x40, 0x8}, 0x10}, 0x70) syncfs(r3) 04:55:44 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) capset(&(0x7f0000000180)={0x39980732, r0}, &(0x7f00000001c0)={0x6, 0x80000001, 0x6, 0x2, 0x46}) mkdir(&(0x7f0000000040)='./file0\x00', 0x40) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000080)) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00') umount2(&(0x7f0000000380)='./file0/file0\x00', 0x8) r3 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x5, 0x210002) chown(&(0x7f0000000400)='./file0\x00', r1, r2) accept4$ax25(r3, &(0x7f0000000440)={{0x3, @netrom}, [@bcast, @default, @netrom, @null, @null, @default, @remote, @bcast]}, &(0x7f00000002c0)=0x48, 0x80800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x3, 0x2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00002abd7000fbdbdf2585f1f4c2bf27773b4eb016f401000000000000000b000000000c001473797a3100000000c77196aeba2661024bd4eb50af579f265d9165e92244c0716f6bc5baa5c8697bc47b66e799f88242840a86317f3899f986830a6b3f54e2af7a51ae2a5d195b446b933c0b13d8f8b0a4240761a760f4e7a9ed13dfb1ac6fc16c418e5b6f616a613555a8319de59f32f5fd53daaccdc92ac787e4c8a8d55e01d4dc921764acdc5603f2fdf48a8d542b92678cf7c49d2df571e0f1f733b16a3a76a4503b490156150c55d1ec3e7df88c2a42e483c9"], 0x28}}, 0x40000c4) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x5) 04:55:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x2000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) [ 372.748014][T12276] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 04:55:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000080)) 04:55:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x00`\x87\xff\xff\xff\xff\x00'}, 0x45c) 04:55:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x1001) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r3, 0xb, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) ftruncate(r0, 0x2) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000180)=@dstopts={0x3e, 0x1, [], [@enc_lim={0x4, 0x1, 0x7}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x18) 04:55:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000180)={0x29, ""/41}) write(r0, &(0x7f0000000080)="f69ee68b82f4a774e89ad9685f74251dbcd64ccf912354d92fb405f672be38e1c2a7e8eba17703aa025316f61f4d2d5e102838cf41d3f7c9b2586c1d68c6c786c2e16e692ca579d1975b72aa05a8b675ce0e564b04ec66bd1f9f74e40b5d6e6d72c660", 0x63) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x11d) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1803, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x103, &(0x7f0000001f80), 0x11a, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 04:55:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) pipe2(&(0x7f0000000080), 0x80000) 04:55:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:45 executing program 2: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xff63, 0x0, 0x0, 0xfffffffffffffe93) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0x20) 04:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x6196ebda, 0x6, 0x100000001, 0x9, 0x0, 0x9, 0x10, 0x0, 0xffffffff7fffffff, 0x38, 0x742, 0x5, 0xca83, 0x5, 0x49d5, 0x7f, 0xffffffffffffffff, 0x800, 0xfffffffffffffffa, 0x7fffffff, 0x80000001, 0x2, 0x1, 0x5, 0x401, 0x80000001, 0x6, 0xffffffffffffed15, 0x4a6, 0x9, 0x1, 0xd62e, 0x3, 0x10001, 0x200, 0x3, 0x0, 0xcb, 0x4, @perf_bp={&(0x7f0000000100)}, 0x80, 0x1, 0x5, 0x6, 0xff, 0x9, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x2, 0x70, 0x200, 0x6, 0x7f, 0x5, 0x0, 0x100, 0x40, 0x8, 0x0, 0x6, 0x4, 0x2, 0x0, 0x2, 0xffffffffafac26f0, 0x5, 0x3, 0x0, 0x60, 0x35, 0x9, 0x0, 0x7, 0x34e3, 0x9, 0x9, 0x7e, 0x6, 0x10000, 0x6, 0x80000001, 0x3, 0x7, 0xfffffffffffffc00, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x3, @perf_config_ext={0xc7, 0x1ff}, 0x20, 0x8, 0x1d, 0xf, 0x8, 0x80000000, 0x2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000000c0)) 04:55:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x02\x00'}, 0x45c) 04:55:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x10000) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x8, 0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="4f9625a2850ca60a10446094ad51ea2e403b40bf8de76c6e91b7a2dd1fc9eb13a2235f0a5fe36c32455995ee81a1cb06e65fe1d65646a7531f525e2300ecce92aa087bc82cbc6b42f32a1ceb8627264434dc27a2ccc7a6120b2eb120ec9565f205aa6ec2ff821228331879a910f1f5a276c498e0d10f2828911446abede035a5d153db6b0eb8947d2cff2f4b7ed8e99735682a596534d7517683a2ac74fd08badf9cc207e2c87bd012", 0xa9, 0xfffffffffffffff9) r4 = add_key(&(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="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", 0x1000, 0xffffffffffffffff) keyctl$negate(0xd, r3, 0x1ff, r4) 04:55:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr="3627229cfe08836c2e0b3717649e8834", 0x9, 0x0, 0x3, 0x4, 0x8001, 0x82ab}, 0x20) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) bind(r0, &(0x7f0000000080)=@ethernet={0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10000008d) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x51b3c1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180)=0x7, 0x4) close(r1) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000200)=0x401) 04:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xd, 0x8000) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000000c0)=0x7) ioctl$TCFLSH(r2, 0x540b, 0x88ef) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="adc66e346bccf70ac98c1544410a5ea4655f898cade7fe8428acca8fdb4ca75f1e92d367d6a03c4b3dee53fbbc232249e3c4fae45ec91fbd02e6060620d36e744fea6e125d47828f7447033e6a4f39cd7903b18dfa7aeea400"/99], 0x63) close(r1) 04:55:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000180)={0x13, "1ef77e06f479c2327c5f60b0074cbb77e0c30daebdd97e3462af10e5955c0eb5c0619a135d3319d49d97a86caf33eded121a9c38ac78864bf6d6e4a60c5b9b25d2d0b556960d29aa80c5df6eed37491eb85613b61103a17593d5a15e1a1faf2e23ef1d817dc65abc9e1d0f9cf40a55c33b2298389831126c2d14a3a4833d442f"}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) accept$alg(r2, 0x0, 0x0) 04:55:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x03\x00'}, 0x45c) 04:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "2457e039b862ed2524552b3ccd2f958558"}, 0x12) close(r1) 04:55:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) close(r2) 04:55:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff7c) mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r4, 0x0, 0x2110008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0xffffffffffffff09, @rand_addr="8f1435e2e5ab4afd05c2850a04dcc66f", 0x2}, 0x80000001, [0x0, 0x0, 0x100, 0x1ff, 0x7, 0x9e, 0x3f, 0xf9c]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") 04:55:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x04\x00'}, 0x45c) 04:55:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x14047) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt6_stats\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)={0x1000, 0x2, 0x4, 0x400100, {0x77359400}, {0x2, 0x8, 0xd2e, 0x5, 0x7ff, 0x2000000, "7ccc235a"}, 0xffffffffffffffff, 0x3, @fd=r3, 0x4}) 04:55:46 executing program 2: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xff63, 0x0, 0x0, 0xfffffffffffffe93) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0x20) 04:55:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa2) close(r1) 04:55:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'ifb0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000018c0)={@remote, 0x8, r3}) close(r1) 04:55:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00\x00\x00\x00\x05\x00'}, 0x45c) 04:55:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$binfmt_aout(r0, &(0x7f0000000180)={{0x1cc, 0x0, 0x3, 0x2ef, 0x141, 0x2, 0x27a, 0x7}, "4f715ff45e7290067af4198121bd8638acf76d0a8cbb6dba3e3ecc72893ace8eab5f2c8b904902b61500c8ec71d525cac6a7edc044136eaa6c9dc62d70ef729fb4ccda36d528f7d9727d1184187b227cf95e636890986c5a9b85957ed1d3629a6183ddb644f1dc6f16104bf303db87ef367830109bba0088218a922fcdae18a48cc205cfc1832647566af66c2991106f69a71b5615e62e1c6fb5958d610c06fedcea3421650f38211751a6c81f5bfc5664d0582c987809994696c79dbdac7e", [[], [], [], [], [], [], [], [], []]}, 0x9df) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 04:55:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5414, &(0x7f0000000140)=0xd) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 04:55:46 executing program 2: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xff63, 0x0, 0x0, 0xfffffffffffffe93) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0x20) 04:55:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1001) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) prctl$PR_SVE_GET_VL(0x33, 0xd124) close(r1) [ 375.347891][T12382] ------------[ cut here ]------------ [ 375.363870][T12382] refcount_t: increment on 0; use-after-free. [ 375.370646][T12382] WARNING: CPU: 1 PID: 12382 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 375.379862][T12382] Kernel panic - not syncing: panic_on_warn set ... [ 375.386470][T12382] CPU: 1 PID: 12382 Comm: syz-executor.5 Not tainted 5.2.0-rc5 #1 [ 375.394294][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.404365][T12382] Call Trace: [ 375.407692][T12382] dump_stack+0x172/0x1f0 [ 375.412045][T12382] ? refcount_inc_not_zero_checked+0x1e0/0x200 [ 375.418224][T12382] panic+0x2cb/0x744 [ 375.422152][T12382] ? __warn_printk+0xf3/0xf3 [ 375.426773][T12382] ? refcount_inc_checked+0x61/0x70 [ 375.431990][T12382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.438248][T12382] ? __warn.cold+0x5/0x4d [ 375.442607][T12382] ? refcount_inc_checked+0x61/0x70 [ 375.447825][T12382] __warn.cold+0x20/0x4d [ 375.452086][T12382] ? refcount_inc_checked+0x61/0x70 [ 375.457337][T12382] report_bug+0x263/0x2b0 [ 375.461692][T12382] do_error_trap+0x11b/0x200 [ 375.466301][T12382] do_invalid_op+0x37/0x50 [ 375.470730][T12382] ? refcount_inc_checked+0x61/0x70 [ 375.476298][T12382] invalid_op+0x14/0x20 [ 375.480477][T12382] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 375.486299][T12382] Code: 1d 6d 68 48 06 31 ff 89 de e8 3b 68 3c fe 84 db 75 dd e8 f2 66 3c fe 48 c7 c7 60 9c a4 87 c6 05 4d 68 48 06 01 e8 8d 9f 0e fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 375.505926][T12382] RSP: 0018:ffff88805d52f8f8 EFLAGS: 00010286 [ 375.512004][T12382] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 375.519991][T12382] RDX: 000000000001181d RSI: ffffffff815ad956 RDI: ffffed100baa5f11 [ 375.527976][T12382] RBP: ffff88805d52f908 R08: ffff88808dfdc0c0 R09: ffffed1015d240f1 [ 375.535960][T12382] R10: ffffed1015d240f0 R11: ffff8880ae920787 R12: ffff88821ae319b8 [ 375.543950][T12382] R13: ffff88808d5785a0 R14: ffff88808d578598 R15: ffff88821ae31938 [ 375.551973][T12382] ? vprintk_func+0x86/0x189 [ 375.556583][T12382] ? refcount_inc_checked+0x61/0x70 [ 375.561795][T12382] kobject_get+0x66/0xc0 [ 375.566049][T12382] kobject_add_internal+0x14f/0x380 [ 375.571348][T12382] ? kfree_const+0x5e/0x70 [ 375.575864][T12382] kobject_add+0x150/0x1c0 [ 375.580291][T12382] ? kset_create_and_add+0x1a0/0x1a0 [ 375.585592][T12382] ? get_device_parent.isra.0+0x34c/0x560 [ 375.591327][T12382] ? rcu_read_lock_sched_held+0x110/0x130 [ 375.597063][T12382] ? kmem_cache_alloc_trace+0x351/0x750 [ 375.602636][T12382] get_device_parent.isra.0+0x413/0x560 [ 375.608207][T12382] device_add+0x2df/0x17a0 [ 375.612643][T12382] ? get_device_parent.isra.0+0x560/0x560 [ 375.618368][T12382] ? up_write+0xbe/0x1e0 [ 375.622632][T12382] hci_register_dev+0x2e8/0x860 [ 375.627503][T12382] __vhci_create_device+0x2d0/0x5a0 [ 375.632715][T12382] vhci_write+0x2d0/0x470 [ 375.637060][T12382] new_sync_write+0x4d3/0x770 [ 375.641751][T12382] ? new_sync_read+0x800/0x800 [ 375.646538][T12382] ? __fget+0x381/0x550 [ 375.650709][T12382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.656960][T12382] ? security_file_permission+0x8f/0x380 [ 375.662602][T12382] __vfs_write+0xe1/0x110 [ 375.666945][T12382] vfs_write+0x20c/0x580 [ 375.671210][T12382] ksys_write+0x14f/0x290 [ 375.675549][T12382] ? __ia32_sys_read+0xb0/0xb0 [ 375.680321][T12382] ? do_syscall_64+0x26/0x680 [ 375.685091][T12382] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.691172][T12382] ? do_syscall_64+0x26/0x680 [ 375.695868][T12382] __x64_sys_write+0x73/0xb0 [ 375.700472][T12382] do_syscall_64+0xfd/0x680 [ 375.704992][T12382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.710907][T12382] RIP: 0033:0x4592c9 [ 375.714827][T12382] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.734445][T12382] RSP: 002b:00007f4ce0f76c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.742875][T12382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 375.750860][T12382] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000006 [ 375.758845][T12382] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 375.766829][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ce0f776d4 [ 375.774815][T12382] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 00000000ffffffff [ 375.784416][T12382] Kernel Offset: disabled [ 375.799604][T12382] Rebooting in 86400 seconds..