[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.711872][ T26] audit: type=1800 audit(1561463596.766:25): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.749400][ T26] audit: type=1800 audit(1561463596.766:26): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.779884][ T26] audit: type=1800 audit(1561463596.766:27): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.66' (ECDSA) to the list of known hosts. 2019/06/25 11:53:27 fuzzer started 2019/06/25 11:53:30 dialing manager at 10.128.0.26:33199 2019/06/25 11:53:30 syscalls: 2465 2019/06/25 11:53:30 code coverage: enabled 2019/06/25 11:53:30 comparison tracing: enabled 2019/06/25 11:53:30 extra coverage: extra coverage is not supported by the kernel 2019/06/25 11:53:30 setuid sandbox: enabled 2019/06/25 11:53:30 namespace sandbox: enabled 2019/06/25 11:53:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/25 11:53:30 fault injection: enabled 2019/06/25 11:53:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/25 11:53:30 net packet injection: enabled 2019/06/25 11:53:30 net device setup: enabled 11:55:09 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) syzkaller login: [ 168.185072][ T8293] IPVS: ftp: loaded support on port[0] = 21 11:55:09 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x101200, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000500)=""/187) [ 168.288455][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 168.350858][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.358486][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.368687][ T8293] device bridge_slave_0 entered promiscuous mode [ 168.377417][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.385665][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.395137][ T8293] device bridge_slave_1 entered promiscuous mode [ 168.417005][ T8293] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 168.431552][ T8293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.481435][ T8293] team0: Port device team_slave_0 added [ 168.496672][ T8293] team0: Port device team_slave_1 added 11:55:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffff9c, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r2 = semget(0x0, 0x3, 0x80) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000100)=0xffffffffffff7fff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x0, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000580)={0x1f, {0x1, 0x0, 0x10001, 0x3ff, 0x0, 0x5}, 0x7ff}, 0xa) syz_mount_image$hfsplus(&(0x7f00000002c0)='hfsplus\x00', &(0x7f0000000300)='./file0\x00', 0xfffffffffffffeff, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) clone(0x2102001f76, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000680)='./file0\x00', 0x101, 0xa) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000004c0)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) r5 = gettid() clone(0x2e828903, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='teql0\x00', 0x10) pread64(r1, &(0x7f0000000440)=""/88, 0x58, 0x0) sync_file_range(r1, 0x100000005, 0x0, 0x4) ptrace(0x10, r5) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x201, 0x0) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000007c0)={0x5e58}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xf, [], 0x10000000000001a4, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=""/15}, &(0x7f0000000740)=0x78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 168.562875][ T8293] device hsr_slave_0 entered promiscuous mode [ 168.599612][ T8293] device hsr_slave_1 entered promiscuous mode [ 168.673936][ T8296] IPVS: ftp: loaded support on port[0] = 21 [ 168.679975][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.687128][ T8293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.694798][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.701927][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.718607][ T8298] IPVS: ftp: loaded support on port[0] = 21 [ 168.804575][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 11:55:09 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc4c85512, &(0x7f0000000240)=ANY=[@ANYBLOB="036eb2df226f3e7a7af3f377f1e67413dad1116aecadfa27dcd60a086d895b6f4704a6ac8595a44110fe99e9d81849ba24422ecdd8889ed9adbaed2870d06590f6e7da1b50e3d46514600f135a5b"]) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x66, "4232f0680c9c96bfce75a20b27708af31fa24fd03a4854241c3630ca1cc5074562e0e86ddc10413c81a113e3eca1c12d4aed7c201dc308bbd226d0cb2c1ed0650eb3fa666aa8c89938bacd1fea1f9261937c43b2727c7b9ba3db2f9b58f4b02b82398e8f196b"}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000480)={0x800, 0x8000, 0x0, 0x5, 0x85f4, 0x7, 0x0, 0x66dd, r3}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x18) getsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f00000004c0), &(0x7f0000000500)=0x4) [ 168.894105][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.907159][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.926430][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.941851][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 168.964520][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.007245][ T8303] IPVS: ftp: loaded support on port[0] = 21 [ 169.040435][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.048936][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.056062][ T8299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.064964][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.073620][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.080731][ T8299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.127450][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.138546][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.159878][ T8296] chnl_net:caif_netlink_parms(): no params data found [ 169.178143][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.186291][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.194696][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.214044][ T8298] chnl_net:caif_netlink_parms(): no params data found 11:55:10 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) [ 169.225194][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.363460][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.371636][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.381238][ T8296] device bridge_slave_0 entered promiscuous mode [ 169.402488][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.412275][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.421422][ T8296] device bridge_slave_1 entered promiscuous mode [ 169.431140][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.438227][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.449548][ T8298] device bridge_slave_0 entered promiscuous mode [ 169.457642][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.467166][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.475410][ T8298] device bridge_slave_1 entered promiscuous mode [ 169.503135][ T8306] IPVS: ftp: loaded support on port[0] = 21 [ 169.535263][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.588961][ T8296] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.616535][ T8298] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.627408][ T8298] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:55:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="f563961040d0", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x700, 0x5], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x8200}, @mcast2}}}}}}}, 0x0) [ 169.638105][ T8296] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.647994][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 169.698772][ T8298] team0: Port device team_slave_0 added [ 169.756482][ T8298] team0: Port device team_slave_1 added [ 169.798835][ T8296] team0: Port device team_slave_0 added [ 169.824476][ T8296] team0: Port device team_slave_1 added 11:55:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400, 0x0) r2 = getuid() r3 = getgid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f00000001c0)={0x7c, 0x7d, 0x1, {{0x0, 0x52, 0xc30, 0x1, {0x0, 0x1, 0x3}, 0x1000000, 0x7, 0x9, 0xfffffffffffffffb, 0x12, '^f:wlan0\\,selinux{', 0xd, 'vboxnet1(-em1'}, 0x15, 'vmnet1security/ppp1+#', r2, r3, r4}}, 0x7c) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="23000000260007031dfffd946fa2830020200a0009000300741d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 169.882453][ T8298] device hsr_slave_0 entered promiscuous mode [ 169.909700][ T8298] device hsr_slave_1 entered promiscuous mode [ 169.993920][ T8296] device hsr_slave_0 entered promiscuous mode [ 170.039801][ T8296] device hsr_slave_1 entered promiscuous mode [ 170.079616][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.086767][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.095213][ T8303] device bridge_slave_0 entered promiscuous mode [ 170.103594][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.110727][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.118592][ T8303] device bridge_slave_1 entered promiscuous mode [ 170.137829][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.164693][ T8303] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.195654][ T8306] chnl_net:caif_netlink_parms(): no params data found [ 170.215855][ T8303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.233371][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 11:55:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 170.250031][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.257140][ T8298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.258075][ T8316] IPVS: ftp: loaded support on port[0] = 21 [ 170.264583][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.277532][ T8298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.310059][ T8329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:55:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 170.384649][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.418313][ T22] bridge0: port 2(bridge_slave_1) entered disabled state 11:55:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"337060c063f244b06ad1f0dcd6922471d4b019e6d3c29f916be4002827442145e4323be555b7cc5748d5168765a9caab313e7016927468cc59ce6e15e5a6cc41d12bef106b4063c5d865249f6ce65f0db3fb70bf80c52676236b5e51ad9bcdc4121622d83e1151d1712df78ea8f99855fcc077d23dbb1e094f0bcb212ad7274cba081659ad6bcd3d6755fe9669e2b101c4e321059b9eafba76b7e7852b47e7635e6a45e6ea1bec4031ed806194b3baf66368b8019bdb93e0fb0abb75aad3c176f976965f3fe1ceae81915a6a427a41dd25d9ce64c2e4268ae2633d9bbaf380fccd1001dc4a12931dab21b17c8a2a0d2a1f5b2a2b926e02441cc4d494224fa537bc9133d49a9f99814efea2bed513f1f7d9b25bc35c6cb8609ed8db434daaf01280fe9b2a4ba10b4dffcef6038238e0e12061b7884d359c0f7ca933ef465981c90923a4ff4d4fec6c7c78732340d0aaa28340e907891a59e8ad50060ef8dc038789f4dcfe2d676376a5ff86760b33d333fecbc4837ca3d0b8c017af902e989c728a3c278064f40cf6da637b525fad5686158dc9950750678c2d2ce23c9d13f959bba76b4f27c595905c1e6a03c5fbbe8a736b16373b1cc5f79b648c5d9fcd99ae897ab2102ad6d43171d5f85d35cfea180e8d47332904b30bf7bf7cf60ae2d1170ecbe6b1cd0b64cfb24834b329f6587fb2727b8e5c04450684a97aa0381217ee6c6cbe97a46f7b07d4dbc70d96d5d7890349e354a0191e543361ea792f7d1c097929de0ab6113861f28fdc67dbb52de5ef98fcf6ea85d2d23e3b2dc2a27de9545d2e750442772e2db00ad8dfc074b6beedb4d1f7ba1fc3bde83b3e45a8f8a0dd13e4014dfacdcac3ba9e2cdca01d4dd737a3dab0c1cdf8cf5aa627adba2c78b86539b0193b49fa188dd79f1539f843ceb1fa52baf4ccc166c5497960f92bee27b1059d34d66b153ff251cc4f23fc20ad552b67eb154d3cb8fbbb70179f93bfd0a1954455498cee372593f234573823966e004cefcb48df243c3cf623345d1ba42124e7f49ef7421a60f655e6d9bce395fa30d1814f7dc6db8699cd5ffb105ab7e9f75965a9494476f4050a0e54f3087b56256d5a73374f7712905071e1574cd0ff99a823366fc79fe58dcb2cf4705a42e2488da1efdc9b1bc42f2b975b5bb1faf6f07546087ea27df3f0b7b7edb0a808af885a087345bb4bf2849ffb2e66ac735020886c9754a012bc8bf914589af079906ea75dbab22d689c95e17a869130ced6d3cd2551cc1af89d51a9aae69b0d981a1cc2fd4fd75877c2c0c7e56ebac24df255f9a009e1383dde386cb930a3ce72689b0c274e2f54c38ff85fc42b2683a9a13129955379c3e1b882317b4a72c6be9b6519c1f81945af4ed42320cdf3abadd29680b1e3d73eba88b78f55d18ae33032eabaef4505846f464332f3fad2159e"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 170.511035][ T8303] team0: Port device team_slave_0 added [ 170.528159][ T8303] team0: Port device team_slave_1 added [ 170.579506][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.586641][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.605533][ T8306] device bridge_slave_0 entered promiscuous mode 11:55:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 170.651361][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.658473][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.670233][ T8306] device bridge_slave_1 entered promiscuous mode 11:55:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 170.752345][ T8303] device hsr_slave_0 entered promiscuous mode [ 170.769758][ T8303] device hsr_slave_1 entered promiscuous mode 11:55:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"337060c063f244b06ad1f0dcd6922471d4b019e6d3c29f916be4002827442145e4323be555b7cc5748d5168765a9caab313e7016927468cc59ce6e15e5a6cc41d12bef106b4063c5d865249f6ce65f0db3fb70bf80c52676236b5e51ad9bcdc4121622d83e1151d1712df78ea8f99855fcc077d23dbb1e094f0bcb212ad7274cba081659ad6bcd3d6755fe9669e2b101c4e321059b9eafba76b7e7852b47e7635e6a45e6ea1bec4031ed806194b3baf66368b8019bdb93e0fb0abb75aad3c176f976965f3fe1ceae81915a6a427a41dd25d9ce64c2e4268ae2633d9bbaf380fccd1001dc4a12931dab21b17c8a2a0d2a1f5b2a2b926e02441cc4d494224fa537bc9133d49a9f99814efea2bed513f1f7d9b25bc35c6cb8609ed8db434daaf01280fe9b2a4ba10b4dffcef6038238e0e12061b7884d359c0f7ca933ef465981c90923a4ff4d4fec6c7c78732340d0aaa28340e907891a59e8ad50060ef8dc038789f4dcfe2d676376a5ff86760b33d333fecbc4837ca3d0b8c017af902e989c728a3c278064f40cf6da637b525fad5686158dc9950750678c2d2ce23c9d13f959bba76b4f27c595905c1e6a03c5fbbe8a736b16373b1cc5f79b648c5d9fcd99ae897ab2102ad6d43171d5f85d35cfea180e8d47332904b30bf7bf7cf60ae2d1170ecbe6b1cd0b64cfb24834b329f6587fb2727b8e5c04450684a97aa0381217ee6c6cbe97a46f7b07d4dbc70d96d5d7890349e354a0191e543361ea792f7d1c097929de0ab6113861f28fdc67dbb52de5ef98fcf6ea85d2d23e3b2dc2a27de9545d2e750442772e2db00ad8dfc074b6beedb4d1f7ba1fc3bde83b3e45a8f8a0dd13e4014dfacdcac3ba9e2cdca01d4dd737a3dab0c1cdf8cf5aa627adba2c78b86539b0193b49fa188dd79f1539f843ceb1fa52baf4ccc166c5497960f92bee27b1059d34d66b153ff251cc4f23fc20ad552b67eb154d3cb8fbbb70179f93bfd0a1954455498cee372593f234573823966e004cefcb48df243c3cf623345d1ba42124e7f49ef7421a60f655e6d9bce395fa30d1814f7dc6db8699cd5ffb105ab7e9f75965a9494476f4050a0e54f3087b56256d5a73374f7712905071e1574cd0ff99a823366fc79fe58dcb2cf4705a42e2488da1efdc9b1bc42f2b975b5bb1faf6f07546087ea27df3f0b7b7edb0a808af885a087345bb4bf2849ffb2e66ac735020886c9754a012bc8bf914589af079906ea75dbab22d689c95e17a869130ced6d3cd2551cc1af89d51a9aae69b0d981a1cc2fd4fd75877c2c0c7e56ebac24df255f9a009e1383dde386cb930a3ce72689b0c274e2f54c38ff85fc42b2683a9a13129955379c3e1b882317b4a72c6be9b6519c1f81945af4ed42320cdf3abadd29680b1e3d73eba88b78f55d18ae33032eabaef4505846f464332f3fad2159e"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 170.858454][ T8298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.890574][ T8306] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.978651][ T8306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.002700][ T8296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.036913][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.050893][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.061947][ T8298] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.077889][ T8306] team0: Port device team_slave_0 added [ 171.087797][ T8306] team0: Port device team_slave_1 added [ 171.113091][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 171.124347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.132290][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.140097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.148857][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.157346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.164425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.174464][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.221332][ T8306] device hsr_slave_0 entered promiscuous mode [ 171.259766][ T8306] device hsr_slave_1 entered promiscuous mode [ 171.332378][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.341167][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.349695][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.357077][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.374435][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.383806][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.392326][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.399404][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.408014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.433576][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.440580][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.447645][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.456559][ T8316] device bridge_slave_0 entered promiscuous mode [ 171.465409][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.472633][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.480927][ T8316] device bridge_slave_1 entered promiscuous mode [ 171.488104][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.497161][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.508953][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.517654][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.526590][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.535573][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.544117][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.552534][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.560775][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.568970][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.577270][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.586383][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.618986][ T8316] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.627692][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.636833][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.645281][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.652375][ T8299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.660551][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.676918][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.701839][ T8316] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.712146][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.720631][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.728350][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.737157][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.746035][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.763973][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.773267][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.782061][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.789175][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.796841][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.805678][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.814096][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.821198][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.828743][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.849044][ T8298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.867419][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.881922][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.894821][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.904140][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.912761][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.921530][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.930581][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.961564][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.972971][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.981558][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.990371][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.998887][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.014500][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.029692][ T8316] team0: Port device team_slave_0 added [ 172.044605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.060419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.071239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.080087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.095676][ T8303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.107756][ T8303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.118984][ T8316] team0: Port device team_slave_1 added [ 172.140227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.148600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.202205][ T8316] device hsr_slave_0 entered promiscuous mode [ 172.229733][ T8316] device hsr_slave_1 entered promiscuous mode [ 172.272538][ T8356] hfsplus: unable to parse mount options [ 172.296288][ T8296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.349198][ T8306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.369236][ C0] hrtimer: interrupt took 26395 ns [ 172.378458][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.413204][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.431639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.448654][ T8306] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.526566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.536874][ T8359] hfsplus: unable to parse mount options [ 172.546710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.570971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.578130][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.608379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.635318][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.679728][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.695658][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.726209][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.733407][ T8323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.776795][ T8316] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.798151][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.814788][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.832414][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.855736][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.865064][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.873559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.893589][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.901751][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.911109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.919614][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.928168][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.936748][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.943844][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.951944][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.960864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.969153][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.976269][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.984772][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.011017][ T8316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.022161][ T8316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.034296][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.045692][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.054367][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.066093][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.074720][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.083722][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.092207][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.101443][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.109887][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.118097][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.126449][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.135048][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.147551][ T8306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.160334][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.183044][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.191386][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.198973][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.209138][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.223516][ T8306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.242810][ T8316] 8021q: adding VLAN 0 to HW filter on device batadv0 11:55:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_msfilter(r0, 0x0, 0x5, &(0x7f0000000100)={@multicast2, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="0803135e55db", 0x6, 0x40, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0xaf}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x100000000, 0x100) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x4, 0x5, 0x1, 0x2, 0xfffffffffffffffa, 0x26, 0xffff, 0x0, 0xfff, 0xfffffffffffffffe, 0x5, 0x9, 0x5012, 0x0, 0x8, 0x9}}) 11:55:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"337060c063f244b06ad1f0dcd6922471d4b019e6d3c29f916be4002827442145e4323be555b7cc5748d5168765a9caab313e7016927468cc59ce6e15e5a6cc41d12bef106b4063c5d865249f6ce65f0db3fb70bf80c52676236b5e51ad9bcdc4121622d83e1151d1712df78ea8f99855fcc077d23dbb1e094f0bcb212ad7274cba081659ad6bcd3d6755fe9669e2b101c4e321059b9eafba76b7e7852b47e7635e6a45e6ea1bec4031ed806194b3baf66368b8019bdb93e0fb0abb75aad3c176f976965f3fe1ceae81915a6a427a41dd25d9ce64c2e4268ae2633d9bbaf380fccd1001dc4a12931dab21b17c8a2a0d2a1f5b2a2b926e02441cc4d494224fa537bc9133d49a9f99814efea2bed513f1f7d9b25bc35c6cb8609ed8db434daaf01280fe9b2a4ba10b4dffcef6038238e0e12061b7884d359c0f7ca933ef465981c90923a4ff4d4fec6c7c78732340d0aaa28340e907891a59e8ad50060ef8dc038789f4dcfe2d676376a5ff86760b33d333fecbc4837ca3d0b8c017af902e989c728a3c278064f40cf6da637b525fad5686158dc9950750678c2d2ce23c9d13f959bba76b4f27c595905c1e6a03c5fbbe8a736b16373b1cc5f79b648c5d9fcd99ae897ab2102ad6d43171d5f85d35cfea180e8d47332904b30bf7bf7cf60ae2d1170ecbe6b1cd0b64cfb24834b329f6587fb2727b8e5c04450684a97aa0381217ee6c6cbe97a46f7b07d4dbc70d96d5d7890349e354a0191e543361ea792f7d1c097929de0ab6113861f28fdc67dbb52de5ef98fcf6ea85d2d23e3b2dc2a27de9545d2e750442772e2db00ad8dfc074b6beedb4d1f7ba1fc3bde83b3e45a8f8a0dd13e4014dfacdcac3ba9e2cdca01d4dd737a3dab0c1cdf8cf5aa627adba2c78b86539b0193b49fa188dd79f1539f843ceb1fa52baf4ccc166c5497960f92bee27b1059d34d66b153ff251cc4f23fc20ad552b67eb154d3cb8fbbb70179f93bfd0a1954455498cee372593f234573823966e004cefcb48df243c3cf623345d1ba42124e7f49ef7421a60f655e6d9bce395fa30d1814f7dc6db8699cd5ffb105ab7e9f75965a9494476f4050a0e54f3087b56256d5a73374f7712905071e1574cd0ff99a823366fc79fe58dcb2cf4705a42e2488da1efdc9b1bc42f2b975b5bb1faf6f07546087ea27df3f0b7b7edb0a808af885a087345bb4bf2849ffb2e66ac735020886c9754a012bc8bf914589af079906ea75dbab22d689c95e17a869130ced6d3cd2551cc1af89d51a9aae69b0d981a1cc2fd4fd75877c2c0c7e56ebac24df255f9a009e1383dde386cb930a3ce72689b0c274e2f54c38ff85fc42b2683a9a13129955379c3e1b882317b4a72c6be9b6519c1f81945af4ed42320cdf3abadd29680b1e3d73eba88b78f55d18ae33032eabaef4505846f464332f3fad2159e"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:14 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000080)=""/89, 0x59}, &(0x7f0000000100), 0x10}, 0x20) close(r0) setxattr$security_selinux(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)='security.selinux\x00', &(0x7f0000002580)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11:55:14 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 11:55:14 executing program 5: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) accept4(r1, 0x0, &(0x7f0000000040), 0x80000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{r2, r3/1000+10000}, {0x77359400}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) 11:55:14 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(r1, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r3, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$radio(&(0x7f00000011c0)='/dev/radio#\x00', 0x0, 0x2) r5 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000000)={0x1, 0x81, 0x1ff, 0x827}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001200)=ANY=[@ANYBLOB="0900400003d953d3a7f348128b5a572d26de575d22370afbe44917d978b6c5f2683bd0009d80542cd5215ef35102829d8083a4164a85b240059041c354ff58b9c3499e819f9cc4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x28) ptrace$getregs(0xe, r1, 0x80000001, &(0x7f00000001c0)=""/4096) 11:55:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:14 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 11:55:14 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+30000}, {0x0, 0x7530}}, 0x100) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0x20, 0x3e}, 'port0\x00', 0x40, 0x20000, 0x2d, 0x9, 0x90, 0x3, 0x81, 0x0, 0x6, 0x2}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x5, 0x0, &(0x7f0000000080)) 11:55:14 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffffcf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) write$FUSE_LSEEK(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x5, {0x1}}, 0x18) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7fffffff, 0xb4b, &(0x7f0000000140)="3419d78eedbe5458e3e9ddc5300fcaa556ce3a7272f63cca22f7cea2b542bad58134b299657b16937f6056e57cebdd385510d3a90ce22a4510871f0038fd0f6b9c6c71fefee321767c8fd72b7eb626b08b5c52c041a9", &(0x7f00000001c0), 0x56}) personality(0x440000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 11:55:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:14 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = msgget(0x0, 0xc0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000280)) msgctl$IPC_RMID(r1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\xfd\x81\x00', 0x1}, 0x18) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x200281, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000200)={0x3, 0x4}) ioctl(r0, 0x80000000008936, &(0x7f0000000000)) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000480)={0x2d, 0x16, 0x7fffffff, 0x6, "f1a4e52d4397f6054095e17282f867f149f162c60c3d5e8209b6987f1e47e4ab"}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000080)={0x100000001, 0x7ff, 0x7, 0x1f, [], [], [], 0x96, 0x36, 0x8000, 0x0, "7e1ccbdfa97f479c372108b484a8eeb6"}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000002c0)={0x8, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000380)={0xc0000000, 0x3, "504e7b71b1a5fb29631572e860c2a7affa3a59a3eac30e8efc9b82fd1b9939da", 0x7, 0x6, 0x1, 0x8000, 0x1000, 0x6, 0xfffffffffffffffd, 0x539, [0x1000000000000, 0x9, 0x2, 0x9]}) [ 173.898747][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:55:15 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000300)=0x4) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@null, @bcast, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140)=""/112, 0x70, 0x6, 0x4, 0xfa3b, 0x100, 0xe1}, 0x120) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000080)=0x100000359) 11:55:15 executing program 5: r0 = socket(0x1e, 0x2, 0x0) r1 = gettid() recvfrom$inet(r0, &(0x7f0000000180)=""/1, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000680)='/dev/dmmidi#\x00', 0x2, 0x800) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000006c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="ab8208e21bf7db41c564f6f3f20334e5530c8c311230e5e1745d50562fe93fae4bef7b73b1e6e9b179554a7b5b863f6256f7648778409762fa67ef30d6842306fe14ec0e555eed11810b885c220550fb128dcc8e4ce31d3a0255a4ccdb55ce22eeaae9d8d49209fa6668b5f2030d60368eb15d0149f148ebca63c7d6551de68a7a5685d8d51dafb31175126ad17633b8d6ad9a4a79c906d10866f21f41f76a03c594a3b673eba4", 0xa7}, {&(0x7f00000001c0)="71b0c579c11e56ceb2ccf47afa89af025047a00dff8f94927c65772f752153c5c6f8e915b5b50c329a3c56beb0517d64372cf1f8052895699a53dbe997fc0f18718d114031a9ee21335835f1d3b48463b615a4dac816a16cc31666d427b831cfed787e3f", 0x64}, {&(0x7f0000000240)="d692e1ec808e1c2c4b5e8190dcfc616ff78091089d087e8da1a51e10ef890c6604affd70c08e03129e3c7a201c9c181ff36ad4b1b6673ab81574fabc4e2e9c1e177a39b4defa5483707fab87549a235f766530a368cd5a8e71df7041dbebee05ca850b646599fe6bfbda89742d284a", 0x6f}, {&(0x7f00000002c0)="39a98e087a0ca7ab027685eb6a5e3adba767f22d13cc278e10ee30c00d29fd8c1016c2872a33140bcad6ef32fdb51861946e482a03ef53c8276e68054aeca0a845c5cafbce9740f64363d9d26a1a8de39de9d27872172483ad33eede256961c265c6b071c4b4f46741a730b28faf347a2128", 0x72}, {&(0x7f0000000340)="c4c3c2f317cbb7be312c27e9f0cb0395ec12f9ed1352e7455e46af69c2b108f8dc67d496926c4e2a27531ac5d271840ecd05d8d3393a54c9f5d2fe8fdc6b5bda476135dd11d9f10ffd6497c88c4026735b94eb564f9cdc9b3d2a8da12bf0a64412e7d2f9cb17f5d91e27f996319020c0b9796372afbb39ee30eba87761884941b8dec7", 0x83}, {&(0x7f0000000400)="8937de803e37f24e171354b6773610b4907f42ef62ea7940f102e1fbd782869a8cea7f4a4831055404af1f5483b1153e2cd39bf58cd9f433fd8980d8e1e720a41220a79ef136267843916ba546cb34cf9e93fb49a2f2360eb6c6325e164b614a634cc1a065b8ba99858ae82a8e552366a7b4d304ac3c2fcd82792ba714a9381234", 0x81}, {&(0x7f00000004c0)="ebee0ccd08f4e83673876dd9e90e8de4f81c64ea55b3973d5a9afb13e27bd8dbac279937d25bbea360bdab47215a5cc18f718382c301730431c9cb3e62e9339025da7873676bf2b9ef471e4383e03130bdcd", 0x52}], 0x7, &(0x7f00000005c0)="d611aa903017b27e080140f37553a8d81400605138731665b0b108e617bfac4d0b17fbf34fab1da9e5b07db0146907d7e35dfdd7fee38df03b8e7eaff7805129b191309752accdaf72adc414a0e17ba91856f593d0b536ab01fa83fd1000a987209e000b06b0628b4a00262f41c18e8bfa5f4822c20b9217eb2daa569bc077ae8c452ebbf95d192a6f6d824b813e88c26dde618dd14db5c2869d47ccabe8ac51b1773a7d85e474d0b260", 0xaa, 0x48800}, 0x0) tkill(r1, 0x13) 11:55:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x600) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x43c001) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 11:55:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000380)={"337060c063f244b06ad1f0dcd6922471d4b019e6d3c29f916be4002827442145e4323be555b7cc5748d5168765a9caab313e7016927468cc59ce6e15e5a6cc41d12bef106b4063c5d865249f6ce65f0db3fb70bf80c52676236b5e51ad9bcdc4121622d83e1151d1712df78ea8f99855fcc077d23dbb1e094f0bcb212ad7274cba081659ad6bcd3d6755fe9669e2b101c4e321059b9eafba76b7e7852b47e7635e6a45e6ea1bec4031ed806194b3baf66368b8019bdb93e0fb0abb75aad3c176f976965f3fe1ceae81915a6a427a41dd25d9ce64c2e4268ae2633d9bbaf380fccd1001dc4a12931dab21b17c8a2a0d2a1f5b2a2b926e02441cc4d494224fa537bc9133d49a9f99814efea2bed513f1f7d9b25bc35c6cb8609ed8db434daaf01280fe9b2a4ba10b4dffcef6038238e0e12061b7884d359c0f7ca933ef465981c90923a4ff4d4fec6c7c78732340d0aaa28340e907891a59e8ad50060ef8dc038789f4dcfe2d676376a5ff86760b33d333fecbc4837ca3d0b8c017af902e989c728a3c278064f40cf6da637b525fad5686158dc9950750678c2d2ce23c9d13f959bba76b4f27c595905c1e6a03c5fbbe8a736b16373b1cc5f79b648c5d9fcd99ae897ab2102ad6d43171d5f85d35cfea180e8d47332904b30bf7bf7cf60ae2d1170ecbe6b1cd0b64cfb24834b329f6587fb2727b8e5c04450684a97aa0381217ee6c6cbe97a46f7b07d4dbc70d96d5d7890349e354a0191e543361ea792f7d1c097929de0ab6113861f28fdc67dbb52de5ef98fcf6ea85d2d23e3b2dc2a27de9545d2e750442772e2db00ad8dfc074b6beedb4d1f7ba1fc3bde83b3e45a8f8a0dd13e4014dfacdcac3ba9e2cdca01d4dd737a3dab0c1cdf8cf5aa627adba2c78b86539b0193b49fa188dd79f1539f843ceb1fa52baf4ccc166c5497960f92bee27b1059d34d66b153ff251cc4f23fc20ad552b67eb154d3cb8fbbb70179f93bfd0a1954455498cee372593f234573823966e004cefcb48df243c3cf623345d1ba42124e7f49ef7421a60f655e6d9bce395fa30d1814f7dc6db8699cd5ffb105ab7e9f75965a9494476f4050a0e54f3087b56256d5a73374f7712905071e1574cd0ff99a823366fc79fe58dcb2cf4705a42e2488da1efdc9b1bc42f2b975b5bb1faf6f07546087ea27df3f0b7b7edb0a808af885a087345bb4bf2849ffb2e66ac735020886c9754a012bc8bf914589af079906ea75dbab22d689c95e17a869130ced6d3cd2551cc1af89d51a9aae69b0d981a1cc2fd4fd75877c2c0c7e56ebac24df255f9a009e1383dde386cb930a3ce72689b0c274e2f54c38ff85fc42b2683a9a13129955379c3e1b882317b4a72c6be9b6519c1f81945af4ed42320cdf3abadd29680b1e3d73eba88b78f55d18ae33032eabaef4505846f464332f3fad2159e"}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x90801, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x3) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) [ 174.530957][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:55:15 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(r1, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r3, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$radio(&(0x7f00000011c0)='/dev/radio#\x00', 0x0, 0x2) r5 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000000)={0x1, 0x81, 0x1ff, 0x827}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001200)=ANY=[@ANYBLOB="0900400003d953d3a7f348128b5a572d26de575d22370afbe44917d978b6c5f2683bd0009d80542cd5215ef35102829d8083a4164a85b240059041c354ff58b9c3499e819f9cc4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x28) ptrace$getregs(0xe, r1, 0x80000001, &(0x7f00000001c0)=""/4096) 11:55:15 executing program 2: syz_emit_ethernet(0x300b00, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000087dd60b4090000303aff02024300600000000000ffff000000000000000000000001880090780007040060b680fa0000000000000000fff600000203ffffffffffff0000000000387f19de75fdcd97887d0000f2fffffeffac14ffbb"], 0x0) 11:55:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:15 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r2, 0x9, 0x8}, 0xc) openat(r0, &(0x7f0000000240)='./file0\x00', 0x2, 0x140) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000140)=""/1}, 0x18) 11:55:15 executing program 1: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xa0, 0x4) lseek(r0, 0x0, 0x3) sendto$inet(r0, &(0x7f0000000000), 0x11528767ca1ebb5, 0xc0, 0x0, 0xfeffffff00000000) 11:55:15 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@barrier_flush='barrier=,lush'}]}) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) dup3(r0, r0, 0x80000) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000003c0)={0x4000000000035, "8700279060ab44e162cd2bce0200bac40324617dd4747b0bc1dd873a54575217da7d0cbbd95732135e366b551baae4d917ce35f1151ac98339737269a5d40a7688982bdb83e5c06463e0b3313657a1a27d934736d8b48768488c3c523615182eda580137ce5aa5bacdac6fd348da00"}) 11:55:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x10001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002a000500d25a80648c000000020000001000094002376ee6735e000000053582c137153e370900018200", 0x2e}], 0x1}, 0x0) [ 174.907881][ T8499] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "barrier" [ 174.907881][ T8499] [ 174.955457][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 175.020797][ T8513] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 175.034927][ T8513] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 11:55:16 executing program 5: r0 = socket(0x1e, 0x2, 0x0) r1 = gettid() recvfrom$inet(r0, &(0x7f0000000180)=""/1, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000680)='/dev/dmmidi#\x00', 0x2, 0x800) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000006c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="ab8208e21bf7db41c564f6f3f20334e5530c8c311230e5e1745d50562fe93fae4bef7b73b1e6e9b179554a7b5b863f6256f7648778409762fa67ef30d6842306fe14ec0e555eed11810b885c220550fb128dcc8e4ce31d3a0255a4ccdb55ce22eeaae9d8d49209fa6668b5f2030d60368eb15d0149f148ebca63c7d6551de68a7a5685d8d51dafb31175126ad17633b8d6ad9a4a79c906d10866f21f41f76a03c594a3b673eba4", 0xa7}, {&(0x7f00000001c0)="71b0c579c11e56ceb2ccf47afa89af025047a00dff8f94927c65772f752153c5c6f8e915b5b50c329a3c56beb0517d64372cf1f8052895699a53dbe997fc0f18718d114031a9ee21335835f1d3b48463b615a4dac816a16cc31666d427b831cfed787e3f", 0x64}, {&(0x7f0000000240)="d692e1ec808e1c2c4b5e8190dcfc616ff78091089d087e8da1a51e10ef890c6604affd70c08e03129e3c7a201c9c181ff36ad4b1b6673ab81574fabc4e2e9c1e177a39b4defa5483707fab87549a235f766530a368cd5a8e71df7041dbebee05ca850b646599fe6bfbda89742d284a", 0x6f}, {&(0x7f00000002c0)="39a98e087a0ca7ab027685eb6a5e3adba767f22d13cc278e10ee30c00d29fd8c1016c2872a33140bcad6ef32fdb51861946e482a03ef53c8276e68054aeca0a845c5cafbce9740f64363d9d26a1a8de39de9d27872172483ad33eede256961c265c6b071c4b4f46741a730b28faf347a2128", 0x72}, {&(0x7f0000000340)="c4c3c2f317cbb7be312c27e9f0cb0395ec12f9ed1352e7455e46af69c2b108f8dc67d496926c4e2a27531ac5d271840ecd05d8d3393a54c9f5d2fe8fdc6b5bda476135dd11d9f10ffd6497c88c4026735b94eb564f9cdc9b3d2a8da12bf0a64412e7d2f9cb17f5d91e27f996319020c0b9796372afbb39ee30eba87761884941b8dec7", 0x83}, {&(0x7f0000000400)="8937de803e37f24e171354b6773610b4907f42ef62ea7940f102e1fbd782869a8cea7f4a4831055404af1f5483b1153e2cd39bf58cd9f433fd8980d8e1e720a41220a79ef136267843916ba546cb34cf9e93fb49a2f2360eb6c6325e164b614a634cc1a065b8ba99858ae82a8e552366a7b4d304ac3c2fcd82792ba714a9381234", 0x81}, {&(0x7f00000004c0)="ebee0ccd08f4e83673876dd9e90e8de4f81c64ea55b3973d5a9afb13e27bd8dbac279937d25bbea360bdab47215a5cc18f718382c301730431c9cb3e62e9339025da7873676bf2b9ef471e4383e03130bdcd", 0x52}], 0x7, &(0x7f00000005c0)="d611aa903017b27e080140f37553a8d81400605138731665b0b108e617bfac4d0b17fbf34fab1da9e5b07db0146907d7e35dfdd7fee38df03b8e7eaff7805129b191309752accdaf72adc414a0e17ba91856f593d0b536ab01fa83fd1000a987209e000b06b0628b4a00262f41c18e8bfa5f4822c20b9217eb2daa569bc077ae8c452ebbf95d192a6f6d824b813e88c26dde618dd14db5c2869d47ccabe8ac51b1773a7d85e474d0b260", 0xaa, 0x48800}, 0x0) tkill(r1, 0x13) 11:55:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 175.063991][ T8515] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 175.073977][ T8515] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 11:55:16 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 175.157140][ T8499] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "barrier" [ 175.157140][ T8499] 11:55:16 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000001c0)="5a40cdc7975f78dcc02c98c908d55f63ea0ef4a3ecbb046caaa98c13e78f94fc51c88d54de261e49df87cff0492f8814238d0e0eb16b59ae3c9365c4c79f0e6b93f243b078c831cd86ad87c1f5bc6d230cb029ec5f2d2558879ad44d40d2db5d463666b420835f66b248833f6851584f6c7e5410a1f2f9ddf857750cdb2dda36", &(0x7f0000000240)="6fd7955514803d985e356e02b12bd43a7f7392f81e471f690af3f26507c10022b6506ee6f6ca9ba66a994b4470f3576cff9f445776d78d51f259848f573fef137d23bdf62c62b242172837638d0e702db661676f57b26f70b074"}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/217, 0xd9}], 0x1, 0x0) 11:55:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x4a, 0x4, 0x400}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x111) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c) write$binfmt_aout(r0, &(0x7f0000000180)={{0x107, 0x7ff, 0x8, 0x1c8, 0x44, 0x4, 0x3aa, 0x7}, "99aa87c23d6f7c0a340d0a5852fcd7f9ed964d8a1dc3ac67b60b47024b4442c6d2c8a8cef1528b405adf0879cfeeb00e0b9a9c4a7039392d02545034b75dbbcee1bb3975eda993aa", [[]]}, 0x168) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) recvmmsg(r1, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0) 11:55:16 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfffffcbe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x1ff, @local, 0x5}}, 0x2, 0x200}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={r3, 0x3f, "3f3d44546cca6d6e182d4aeb1f531ee5ab059e6477db5f46625c514c14dec2b8065894345d09b233e3b9e453bdab6c416f4e8e397afa75621be6b87a239e99"}, &(0x7f00000003c0)=0x47) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000400)={0x0, r1, 0x3ff, 0x5, 0x4, 0x2}) read(r1, &(0x7f0000000000)=""/81, 0xffffffd5) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040029d57000ffdbdf25150000002400060004000200040002000800010007000000080001003001d30008000100ff0f0000300001002c0004001400010002004e217f00000100000000000000001400020002004e23ac1e01010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x40) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000440)={0x6, 0x6, 0x5a, 0x7, 0x5}) [ 175.704692][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 175.704703][ T26] audit: type=1804 audit(1561463716.756:31): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir117560464/syzkaller.5xM7ox/8/memory.events" dev="sda1" ino=16537 res=1 11:55:16 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 175.797890][ T26] audit: type=1800 audit(1561463716.756:32): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16537 res=0 11:55:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bind$llc(r1, &(0x7f0000000040), 0x10) sendmmsg(r1, &(0x7f00000001c0), 0x0, 0x80000000) fstat(0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) [ 175.855041][ T26] audit: type=1804 audit(1561463716.766:33): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir117560464/syzkaller.5xM7ox/8/memory.events" dev="sda1" ino=16537 res=1 11:55:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x10) connect$tipc(r2, &(0x7f0000000240)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10) accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80800) clock_gettime(0x6, &(0x7f0000000540)={0x0, 0x0}) io_uring_setup(0x8a8, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x0, 0x5b}) sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="06000000a80900000200000000000000", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="030000c0010000000300004034010000d2d424d49cead08b8fe1cd7a59eb31e0b24771597efbaf2a82fa76da559f111cd7ecb45f1ab5e0cd74fa3e403f8d837fb1c42dc523aed3fac55c000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000380)=0x7, 0x4) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000500)={r2, 0x0, 0x8000, 0x3ff9}) close(r0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="24000000280007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100fffdba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3", 0x44}], 0x1}, 0x0) [ 176.096872][ T26] audit: type=1800 audit(1561463717.146:34): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16537 res=0 11:55:17 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1, 0x20, 0x5, 0x9}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e23, 0x3f7, @rand_addr="01b50c581aad99bdf5e2bdd0ffbee318", 0xffff}}}, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x4) [ 176.215704][ T26] audit: type=1804 audit(1561463717.186:35): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir117560464/syzkaller.5xM7ox/8/memory.events" dev="sda1" ino=16537 res=1 [ 177.289883][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 177.290551][ T8299] Bluetooth: hci0: command 0xfc11 tx timeout 11:55:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:20 executing program 4: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 11:55:20 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:20 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x1) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/116, &(0x7f0000000240)=0x74) r2 = dup2(r1, r1) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x8000) accept$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x7, 0x7ff}) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000140)={@local, r4}, 0x14) 11:55:20 executing program 3: r0 = socket(0x12, 0x2, 0x8001) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x2}, 0x28, 0x2) close(r0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x4) 11:55:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) io_setup(0xb55, &(0x7f0000000000)=0x0) io_submit(r3, 0xa9, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x124}]) [ 179.369481][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 179.369488][ T17] Bluetooth: hci0: command 0xfc11 tx timeout 11:55:20 executing program 4: socket$unix(0x1, 0x5, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) read(r0, &(0x7f0000000140)=""/64, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r2, 0x0, 0x40) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8c0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000180)={0x1, 0x7f6, [{0x3, 0x0, 0x5}]}) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2d) 11:55:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:20 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x6, 0x4) sendmsg$tipc(r0, &(0x7f0000003600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1, &(0x7f0000000040)=""/20, 0x14}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote, 0x4}}, 0x101, 0x800}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x40, 0x8000, 0x8, 0x400, r1}, 0x10) r2 = msgget$private(0x0, 0x11) msgctl$IPC_RMID(r2, 0x0) 11:55:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:20 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5f, 0x400400) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, [], 0x12}, @in6=@mcast1, 0x4e22, 0x2, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, r3}, {0xffffffff, 0x2, 0x5, 0x80000001, 0x3f, 0x7fffffff, 0x9, 0x37c3}, {0x1, 0x0, 0x1000, 0x9}, 0x1, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x5, 0x0, 0x0, 0xf3, 0x7, 0x5e40255e}}, 0xe8) r4 = memfd_create(&(0x7f0000000a80)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.redirect\x00') getpgrp(0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) io_setup(0x801, &(0x7f0000000ac0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="660fec6ebe0f01c90f01c867660f382aa30800000064660fede60fc72966b9800000c00f326635008000000f300fb2ac0f20f3f2d8a40000baf80c66b846f6188166efbafc0cec", 0x47}], 0x1, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000480)=""/110) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r4, r2, 0x0, 0x2000005) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'hsr0\x00', 0x1f}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 11:55:20 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00)='TIPCv2\x00') r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x0, @win={{0x3, 0x7, 0x7, 0xffffffffffffff48}, 0xd, 0x7, &(0x7f0000000080)={{0x20, 0x8, 0x0, 0x8}, &(0x7f0000000040)={{0x7, 0x400, 0x2dbd, 0x5}}}, 0x0, &(0x7f00000000c0)="dae2a874397d", 0x7fff}}) kexec_load(0x0, 0x274, 0x0, 0x320001) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = semget(0x0, 0x1, 0x29) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000bc0)={&(0x7f00000006c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5f0b00006bc4a61c8cf3f31975032e87e6a482b8683dd05a18b42f6349572ad8724ac38a6b1686a2f88e951dee5914c51d05133f226514ed36308b9369374636eb2b0ff90c509562dbf86b7c", @ANYRES16=r6, @ANYBLOB="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"], 0x408}, 0x1, 0x0, 0x0, 0x90}, 0x48001) getgroups(0x2, &(0x7f0000000600)=[0xee01, 0x0]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000640)={{0x81, r3, r4, r5, r7, 0x40, 0x9}, 0x7, 0x8, 0xbb}) [ 179.859767][ T8616] print_req_error: I/O error, dev loop0, sector 520 flags 80700 [ 179.940853][ T8616] print_req_error: I/O error, dev loop0, sector 256 flags 80700 11:55:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:22 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800da5a67086f2bc95fc3da770df50000000000000c0000220c0000000000040200"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0xba, &(0x7f00000001c0)=""/186, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2}, 0x2}, 0x70) fchdir(r0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1f, 0x200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) 11:55:22 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="38c183773816ea39be73820d7e001c665246b21b0dab1fd81d3423f154985709e4205abf7dd45c0ea184f602d7052a56bd960e4e45bb7f660d8c38567c87593dae0e5a6212029d1527ce8826925ab1faf6217defd347fd163254d1b2151e3c10a029f5d75fefabb6b02a2a6e2700000000000000000000000000902d2e335bc51fd4e40000000000000000282773e3e047e8"], 0x1}}, 0x44801) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff0001, 0x200200) ioctl$RTC_AIE_OFF(r2, 0x7002) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0x0, 0x0, 0x142800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000300), 0x4) 11:55:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:22 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5f, 0x400400) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, [], 0x12}, @in6=@mcast1, 0x4e22, 0x2, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, r3}, {0xffffffff, 0x2, 0x5, 0x80000001, 0x3f, 0x7fffffff, 0x9, 0x37c3}, {0x1, 0x0, 0x1000, 0x9}, 0x1, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x5, 0x0, 0x0, 0xf3, 0x7, 0x5e40255e}}, 0xe8) r4 = memfd_create(&(0x7f0000000a80)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.redirect\x00') getpgrp(0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) io_setup(0x801, &(0x7f0000000ac0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="660fec6ebe0f01c90f01c867660f382aa30800000064660fede60fc72966b9800000c00f326635008000000f300fb2ac0f20f3f2d8a40000baf80c66b846f6188166efbafc0cec", 0x47}], 0x1, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000480)=""/110) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r4, r2, 0x0, 0x2000005) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'hsr0\x00', 0x1f}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 11:55:22 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf7, r1, 0x1, 0xfe1e, 0x6, @local}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = accept(r2, &(0x7f0000000080)=@in, &(0x7f0000000000)=0x80) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000100)={0x80000001, 0x7, 0xfffffffffffffffd, 0x800}, 0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x4, 0x0, 0x0) [ 181.609385][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 181.609392][ T22] Bluetooth: hci0: command 0xfc11 tx timeout 11:55:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 181.681308][ T8642] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 181.740333][ T8654] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 11:55:22 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x2, 0xffffffffffff8000, 0x2, 0x5, 0xfffffffffffffffe}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x0, 0x1f, 0x0, 0x2, 0x100000001, 0x3, 0x81, 0xaf, 0x5, 0x0, 0x37d, 0x0, 0x1ff, 0x8, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00\x00\xff\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3ffd) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000280)) 11:55:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:22 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1200400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0xc00, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0xf, 0x100000001, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0x1fd, 0x3}], 0x0, 0x0) [ 181.783509][ T2599] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.832468][ T8640] print_req_error: I/O error, dev loop0, sector 256 flags 80700 11:55:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 181.924086][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.932016][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state 11:55:23 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5f, 0x400400) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, [], 0x12}, @in6=@mcast1, 0x4e22, 0x2, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, r3}, {0xffffffff, 0x2, 0x5, 0x80000001, 0x3f, 0x7fffffff, 0x9, 0x37c3}, {0x1, 0x0, 0x1000, 0x9}, 0x1, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x5, 0x0, 0x0, 0xf3, 0x7, 0x5e40255e}}, 0xe8) r4 = memfd_create(&(0x7f0000000a80)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.redirect\x00') getpgrp(0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) io_setup(0x801, &(0x7f0000000ac0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="660fec6ebe0f01c90f01c867660f382aa30800000064660fede60fc72966b9800000c00f326635008000000f300fb2ac0f20f3f2d8a40000baf80c66b846f6188166efbafc0cec", 0x47}], 0x1, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000480)=""/110) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r4, r2, 0x0, 0x2000005) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'hsr0\x00', 0x1f}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) [ 182.068253][ T8665] XFS (loop3): Invalid superblock magic number [ 182.342918][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.350199][ T8672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.358130][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.365741][ T8672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.451139][ T8672] device bridge0 entered promiscuous mode [ 182.527338][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.534741][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.559632][ T8672] device bridge0 left promiscuous mode [ 182.667513][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.674713][ T8663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.682156][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.689329][ T8663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.697163][ T8663] device bridge0 entered promiscuous mode [ 183.369671][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:55:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:24 executing program 2: creat(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:55:24 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7}) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xc2, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00') 11:55:24 executing program 4: r0 = socket(0xa, 0x1, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20040010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000f3e8d1c25dff01000000020000000000000000000002"], 0x44}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 11:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/29) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x6, 0xc758, 0x8000, 0x58, 0x0, 0x7, 0x0, 0x8, 0x101, 0x101, 0x4, 0x1, 0x8, 0x95, 0x6, 0x9, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x89, 0x2, 0x4, 0xce6, 0x65e, 0xbe39, 0x9, 0xd2e5, 0x2, 0x876, 0x5, 0x1, 0x2, 0x1000, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x100, 0xfff, 0x0, 0x7, 0x9, 0x7fff}, r2, 0x6, r1, 0xa) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) timerfd_create(0x7, 0x80000) ioctl$UI_DEV_DESTROY(r3, 0x5502) [ 183.849470][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 183.849663][ T22] Bluetooth: hci0: command 0xfc11 tx timeout [ 183.917774][ T8704] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 183.937292][ T8709] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.975157][ T8705] input: syz1 as /devices/virtual/input/input5 11:55:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 184.031903][ T8709] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.098382][ T2599] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.123269][ T2599] Bluetooth: hci0: Frame reassembly failed (-84) 11:55:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7, 0x2000002000}, 0xfffffffffffffff1) 11:55:25 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000001c0)=""/11, 0xb}, 0x11c) readv(r0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000000), 0xfcce) write$UHID_DESTROY(r0, &(0x7f0000000280)={0x3}, 0xfed0) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x189800) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240)=0x9, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x105000, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x800, 0x81}, 'port1\x00', 0x80, 0x80030, 0x401, 0x6, 0x7, 0x0, 0xc16, 0x0, 0x4, 0x6}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCSTI(r3, 0x5412, 0x5) 11:55:25 executing program 4: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x81, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x20000000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ptrace$getregs(0xe, r3, 0xca, &(0x7f0000002580)=""/4096) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000480)=ANY=[], 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x8, &(0x7f0000000880)=[{&(0x7f0000000380)="0727a9483c3d8322ab7030f299e7d9c7851dc9612d1a372979744babd0d7802ae1b93a39586301e05332d850434cc2be4247a24afa3553541072020d0d21c0557d4da835d5691ab19b9334b69f485f9852606acd9ff9a391c67e6577d1f76759c38bba3ab72e7e7995901cdb347d5c1d459e92868c3a7fa7db60755b5446a1b0bdfbfd131be7cf98d632e8a69dedae9efc0e927a348950a4553f9dc2c1b55e68c858eb8e77559b7184bb26ce4eb880832b5e11ecd905c8", 0xb7, 0x4}, {&(0x7f0000000480)="d63cb35db4eaa487293048fc4e786d269fbfaa7387f30eb7a49c7d8219aec95cce82da890e98a849e4c778555f816645267edadcce5735d811553455bbb4ca7af5557f98106b80f09ecbe96de85ead60640cc5d96ad02630b141d064135fa8c2c2f30a86110a20d6b55aab6ccfc0d2582c01da1b57e2515a3afe3b0209b96549db2f80e81d3ba70cb5ea59c03a023f31db080b1abbdcf0993dff894b9f66a244b3f5230497c7727cb600425ab59dac49a1292cec853b3b1eb83507b665ded11b786ad614d12f215fe65c74201b1d25e937cd32e4d230facc7bb2", 0xda, 0x401}, {&(0x7f0000000580)="d8945e7599bd365503a1dcbb2d7555f748e609314cf1791870f35f0fde6dd5831d2cec07eb8cca205da10bd14b09d7b021c474caf8eb34cb1e0f8957184b19fc8d08e22f4f9273a6b8f327cc7bba6e809d613239de292db469f3035095e5337d1a3661e77c3441cfe982aa94b89f953318aa9df9ccb2f34a7078187a94bce8cb4da523581f0bdd78a1bb50d280463e4c6f11a8f1e77dc0", 0x97}, {&(0x7f0000000180)="8c9de76c2f147aef408dc7e4b6a2118d6b659100066a472dc410ddf68d71c5e8e22fb562f81973bbe96fba3e384d7c0b3912ec65c5e2a9a62f748d0585752c7382e36726de9f3cfe0b67e006a92b93d9bbb1795fcc6475b4f7cf762e283fe53eb41bda19a79a157d1745d4", 0x6b, 0x401}, {&(0x7f0000000640)="3458192b84b5bb7a72d3228638e1b1829d37b0c58609344c27dd6bfbb27315a4b8268693682b96b9f55272fcc7d3ad34df5b9990c266b3c5ad7605b648278e073c6b7ff3e7b2447bb5dd2ae482c76b2bd887d450ade8da3841bbd01811928f061067b022efcc3b48d9846bf453f3e7024e2522fcfaef99e9e63e1953665c5340b4dbfcbb8860925085ada10320c85b08b9f1d6aff51594c4b4c0a03646696c3ea20725cf23", 0xa5, 0x7f}, {&(0x7f0000001580)="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", 0x1000, 0x1}, {&(0x7f0000000700)="1fd00fec43b6cc8df0dc29a84e973de0a57cf0f94224ac4004584e8c709966f9ea377ace751c88a8e1b1e17b5b32ee39ba9a3ad6c217a3459e8c05b5f1aa3e0d5faed2407a519bb9bae780e7b7bbdd1ce31f6e7d9aab701ce5b5c1a13efebc8b9680ef3edc0b4bb816fdcadb408867dc61c01e17ae795e7b4e8bc2e47f81f6e706818ccd0d90e7ae216e4e1cb9fd0d9db0bad4cc33e3ca84f8c0bc3befc1869439452ee7f72c01817ba254deff5c1bc7f77f9db2abe8d87e4e8d726104562ef7c6", 0xc1, 0x2400000}, {&(0x7f0000000800)="9bda30077a8fe51ae167670a4f54e55571579704d89add545729864a3caf3fa92e252b4118f822abbc826b9fdffe425af55fa2ad34440c5d2b82d31ca1462a76925d76f70e3bfc9de7d5a0417135b362d87730b1a11388e5ed472067fdcfb27e5f1d235ec14a7a73a105616edaca953b16af4ab1", 0x74, 0x9}], 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="6771756f74612c696e6f6465339e47522d89d728ed3451d4cd1fd54e00322c7071756f74612c6e6f646973636172642c7375626a5f757365723d2f6465762f62696e64057223002c00"]) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x3, 0x202) io_setup(0x101, &(0x7f0000000040)=0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000002c0)={0xa, 0xa, 0x4, 0xfff}, 0xa) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000340)={0x0, 0x5a}) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x1b00, r4, &(0x7f0000000000), 0xfffffce4}]) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) gettid() 11:55:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 184.311398][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.337271][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 11:55:25 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x10008, 0xfffffffffffffe01) getsockopt(r2, 0x4, 0x1f, &(0x7f0000000400)=""/4096, &(0x7f0000000040)=0x1000) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x12) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x100000000000008, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000003c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x80000) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000180)=""/195) prctl$PR_SET_PDEATHSIG(0x1, 0x4) sendto(r2, 0x0, 0x0, 0x850, 0x0, 0x0) [ 184.368351][ T8705] input: syz1 as /devices/virtual/input/input6 [ 184.407063][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.450930][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.491982][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.532520][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.542746][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.560157][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.567601][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.611936][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.669925][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.722411][ T17] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 184.758037][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.771802][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.787366][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.795068][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.805223][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.812925][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.820512][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.826148][ T8733] XFS (loop4): unknown mount option [inode3žGR-‰×(í4QÔÍÕN]. [ 184.828053][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.843046][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.850815][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.860954][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.875787][ T17] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 185.032952][ T8733] XFS (loop4): unknown mount option [inode3žGR-‰×(í4QÔÍÕN]. 11:55:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x40) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000080)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x1000000077, 0x0, [0xc0010202], [0xc1]}) 11:55:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/29) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x6, 0xc758, 0x8000, 0x58, 0x0, 0x7, 0x0, 0x8, 0x101, 0x101, 0x4, 0x1, 0x8, 0x95, 0x6, 0x9, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x89, 0x2, 0x4, 0xce6, 0x65e, 0xbe39, 0x9, 0xd2e5, 0x2, 0x876, 0x5, 0x1, 0x2, 0x1000, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x100, 0xfff, 0x0, 0x7, 0x9, 0x7fff}, r2, 0x6, r1, 0xa) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) timerfd_create(0x7, 0x80000) ioctl$UI_DEV_DESTROY(r3, 0x5502) 11:55:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:27 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000001c0)=""/11, 0xb}, 0x11c) readv(r0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000000), 0xfcce) write$UHID_DESTROY(r0, &(0x7f0000000280)={0x3}, 0xfed0) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x189800) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240)=0x9, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x105000, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x800, 0x81}, 'port1\x00', 0x80, 0x80030, 0x401, 0x6, 0x7, 0x0, 0xc16, 0x0, 0x4, 0x6}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCSTI(r3, 0x5412, 0x5) 11:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xf, 0x4, 0x0, 0x10001, 0x0, 0x1}, 0x2c) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8001, &(0x7f0000000000)=0x7, 0x100000001, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2100, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x5, {0x101, 0x8, 0x9, 0x9}}) [ 186.170624][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 186.171526][ T17] Bluetooth: hci0: command 0xfc11 tx timeout [ 186.243774][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 11:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x400000000000005, 0x6, 0x100000000, 0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x400000, 0x0, 0x10020000000, 0x0}, 0x2c) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 186.289699][ T8774] input: syz1 as /devices/virtual/input/input7 [ 186.309194][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 11:55:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 186.358053][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 11:55:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4be0, 0x44e00) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') lseek(r1, 0x0, 0x4) [ 186.408860][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.436980][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 11:55:27 executing program 4: capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffffc}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0xcc01}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) r1 = dup2(r0, r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x20000) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) [ 186.478668][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 11:55:27 executing program 3: r0 = io_uring_setup(0x400000fd2, &(0x7f0000000140)={0x0, 0x0, 0x4, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") io_uring_enter(r0, 0x8001, 0x0, 0x2, 0x0, 0xff8b) [ 186.533265][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.568610][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 11:55:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000140)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{HS\x00\xd8\x1fl\xfd\vk\xbf\x83\x16m\xca\x0e\xa6\xe2#\x9a\xe5\xc0\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2}\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8001, 0x10001) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x10001) [ 186.604320][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.633197][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.645729][ T17] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.657960][ T17] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 11:55:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb646d717ed14a4d8427276d91f0c9059e15746e1ffe77ee4d9026b99235d005efafbd33752985b5a8d373a604289175a36aa36f795e6ef21420f779fdbc2fb4761f66d2c9b7aa239f5833ca134c28d0ef6ac78f2104757d0409819bc34cb4bfcd9e21781d7e15b2d181e2566ae907"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4, 0x9, 0x1ff, 0x9}, {0x7, 0xfffffffffffffffa, 0x1, 0x5d}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x2c}) 11:55:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r3, 0x540c) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x0, 0x7fff, 0x7f, 0x405}) 11:55:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x34) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='overlay\x00', 0x0, 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) r2 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @initdev}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x81004000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9c040000240008062dbd7000fcdbdf2500000000e5be9aac0849eaec2648fdf86dbe92ea", @ANYRES32=r3, @ANYBLOB="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"], 0x49c}}, 0x4004000) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x81, 0x200) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000540)={0x5, 0x400, 0xffff, 0xfffffffffffffff8}) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000040)={0x2, 0x1, 0x0, {0x2a3, 0x23, 0x9, 0x8}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000006000000000000000000000000fc437a4385eb2f811246f91fc6e11d7600d1038ea3c6503aa4001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x5}, {r0, 0x8100}, {0xffffffffffffffff, 0x100}, {}, {r1}], 0x5, &(0x7f0000000140), &(0x7f0000000180)={0x8}, 0x8) 11:55:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) read(r0, &(0x7f0000000100)=""/197, 0xc5) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000a04fcff", 0x58}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e23, @local}}) [ 188.409347][ T17] Bluetooth: hci0: command 0xfc11 tx timeout [ 188.409364][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 188.481094][ T8819] overlayfs: missing 'lowerdir' [ 188.519121][ T26] audit: type=1326 audit(1561463729.566:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8815 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c35a code=0x0 11:55:29 executing program 5: ioperm(0x0, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000040)={0xf95, 0x0, 0x8, 0x2, 0x3, 0x10, 0x1f, "948fa4c73c82119a7d58380eea4bbb9d76b9d595", "dae5904af50cd4f5f7227104f2ff9a5f90466935"}) [ 188.588276][ T8831] overlayfs: missing 'lowerdir' 11:55:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:29 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x40000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x10001, 0x1}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000000c0)={0x7, 0x0, 0x1000, 0x3, 0x4}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x10) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0xea}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="3d00aed30c3562a8d233e3abbf2575ea6d10e7d4c0f62fb275121b1c2d876272a73166d78a67973cb323489f08b60413c92f28c73f21077696f86a48a4482ce8bd7bb14589639514ec30170f7ab5fae1f4ccc5897728932f0cd81c7817eda4a7cfe1e9ffb973548777e974fb1bba578331244e1a5a94215251a595b70f628d8ddac4d51d01c755031f37295d2228c8e2801b898b9bca5dffa09c76ef7d"]}) 11:55:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x404100, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000080)=0x183d) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x100004, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x2, 0x12) 11:55:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r3, 0x540c) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x0, 0x7fff, 0x7f, 0x405}) [ 189.278777][ T26] audit: type=1326 audit(1561463730.326:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8815 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c35a code=0x0 11:55:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r3, 0x540c) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x0, 0x7fff, 0x7f, 0x405}) 11:55:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20000000020011, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000096475258000000000000"]], 0x0, 0x0, 0x0}) 11:55:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r3, 0x540c) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x0, 0x7fff, 0x7f, 0x405}) 11:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) [ 190.660038][ T12] Bluetooth: hci0: command 0xfc11 tx timeout [ 190.666328][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 190.739055][ T8871] binder: 8869:8871 unknown command 536871488 [ 190.746846][ T8871] binder: 8869:8871 ioctl c0306201 20000440 returned -22 [ 190.777504][ T8881] binder: 8869:8881 unknown command 536871488 11:55:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @default, @remote, @null, @default, @default]}, &(0x7f00000000c0)=0x48) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100), 0x4) r3 = request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='^mime_typeppp0eth0\'trustedvmnet1\x00', 0xfffffffffffffff9) r4 = add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="7fdd3477271d88384e21811a5fe35e51fe0e195b9bf0c150957b9ced1fec6632f2eeb76ca25eef26ae167153e3cae6b1ff02b41a9ef07834623a42bd73216c3dd602769e65ea3d65372eefb7d0726cb38fdb58a11680a009208a3cae56547e13850e784a6f6875e585aca7f56dd3d6fdcbe66c870451890672e97d6901b36ad6", 0x80, 0xfffffffffffffff8) keyctl$search(0xa, r3, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, r4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80000000) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0xc0000102, 0x0, 0xc0010004], [0xc1]}) r6 = syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x3, 0x24000) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000440)=0x404000) fallocate(r0, 0x18, 0x2, 0x90) [ 190.795077][ T8881] binder: 8869:8881 ioctl c0306201 20000440 returned -22 [ 190.812555][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 11:55:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r3, 0x540c) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x0, 0x7fff, 0x7f, 0x405}) 11:55:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:31 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40002015}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x346, 0xfffffffffffffff7, 0x0, 0xfffffffffffffe0d) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000200)={0x11}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 11:55:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r3, 0x540c) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x0, 0x7fff, 0x7f, 0x405}) 11:55:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/167, &(0x7f0000000000)=0xa7) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0x10, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 191.222633][ T8919] IPVS: length: 167 != 8 [ 191.292594][ T8919] IPVS: length: 167 != 8 11:55:33 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40002015}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x346, 0xfffffffffffffff7, 0x0, 0xfffffffffffffe0d) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000200)={0x11}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 11:55:33 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40002015}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x346, 0xfffffffffffffff7, 0x0, 0xfffffffffffffe0d) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000200)={0x11}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 11:55:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/167, &(0x7f0000000000)=0xa7) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0x10, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 11:55:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r2, 0x540c) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) accept4$unix(r2, 0x0, 0x0, 0x0) [ 192.889360][ T8323] Bluetooth: hci0: command 0xfc11 tx timeout [ 192.889405][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 192.986569][ T8942] IPVS: length: 167 != 8 11:55:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:34 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40002015}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x346, 0xfffffffffffffff7, 0x0, 0xfffffffffffffe0d) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000200)={0x11}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 11:55:34 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40002015}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x346, 0xfffffffffffffff7, 0x0, 0xfffffffffffffe0d) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000200)={0x11}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 11:55:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCEXCL(r2, 0x540c) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) 11:55:34 executing program 5: r0 = socket$inet6(0xa, 0x7, 0x6) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x14, 0x8}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x28000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) bind$packet(r2, &(0x7f0000000180)={0x11, 0xc, r3, 0x1, 0x97e2, 0x6, @remote}, 0x14) getpgid(r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000001c0)={0xbf, @local, 0x4e22, 0x2, 'rr\x00', 0x54fb47a85dde680, 0x81, 0x56}, 0x2c) getpgid(r1) 11:55:34 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x210300, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x101, 0x0, 0x3, 0x2, 0xdb, 0x7f0000, 0x7, 0xffffffff, 0x800, 0x20}, 0xb) unshare(0x8000400) r1 = mq_open(&(0x7f0000000040)='.selinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) fcntl$getown(r1, 0x9) mq_getsetattr(r1, &(0x7f0000000000), 0x0) 11:55:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) 11:55:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="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", 0x121, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100)="10", 0x1, 0xfffffffffffffffd) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000300)) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}, &(0x7f0000000180)}) 11:55:36 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x12) r1 = accept4(r0, &(0x7f00000014c0)=@un=@abs, &(0x7f0000001540)=0x80, 0x80000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @rand_addr="55aef073e2d3ca31b61b4ac7062de742", 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001580)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080), 0x4) [ 195.049400][ T1501] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 195.049446][ T17] Bluetooth: hci0: command 0xfc11 tx timeout 11:55:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x201000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(r1, 0x208200) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) 11:55:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) 11:55:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)='k', 0x1) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000065ffff0600000006003950323030306913ca460ca724997cfa8458dd6c94b0ee90df076ea6ef6fb26489c3"], 0x13) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 195.209826][ T8527] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 195.209878][ T17] Bluetooth: hci1: command 0xfc11 tx timeout [ 195.281520][ T320] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.287921][ T320] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.320254][ T7] Bluetooth: hci1: Frame reassembly failed (-84) [ 195.326828][ T320] Bluetooth: hci1: Frame reassembly failed (-84) 11:55:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)='k', 0x1) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000065ffff0600000006003950323030306913ca460ca724997cfa8458dd6c94b0ee90df076ea6ef6fb26489c3"], 0x13) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 195.355128][ T26] audit: type=1804 audit(1561463736.406:38): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir091758492/syzkaller.1Uooei/18/file0/file0" dev="ramfs" ino=30247 res=1 [ 195.434798][ T26] audit: type=1804 audit(1561463736.436:39): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir091758492/syzkaller.1Uooei/18/file0/file0" dev="ramfs" ino=30247 res=1 11:55:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb64"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) 11:55:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8200, 0x0) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x8, 0x4f, 0xfffffffffffffe00, 0x100000001}, 0x6) [ 195.476613][ T26] audit: type=1804 audit(1561463736.516:40): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir091758492/syzkaller.1Uooei/18/file0/file0" dev="ramfs" ino=30247 res=1 11:55:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) [ 195.527845][ T26] audit: type=1804 audit(1561463736.516:41): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir091758492/syzkaller.1Uooei/18/file0/file0" dev="ramfs" ino=30247 res=1 11:55:36 executing program 5: pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001840)=@buf={0x1000, &(0x7f0000000840)="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"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @rand_addr=0x4}], 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x1a, 0x0, 0x29) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/226, 0xe2}], 0x6}, 0x2000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000740)={@remote, 0x0, 0x3, 0x1, 0x8, 0x7, 0x933000000}, &(0x7f0000000780)=0x20) dup3(r1, r4, 0x0) 11:55:36 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff8000, 0x40) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)=0x3) write(r0, &(0x7f0000000180)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b003a000000", 0x24) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000200)) ioctl$int_out(r1, 0x5460, &(0x7f00000002c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x63c, 0xa3, &(0x7f0000000000)="884380d62ec9739493e6353445c94e290cf069c8785bf05326b7ec9464b964a6a23988eb361a13497271c078338a1f4659f49e944c56d6602c9289f4dd4c10c19ce7592954ceab56ea17bf2f57b48716d9a06040b3b6d3c827d4fe5a66a5034bad0901d0751fabfce06744d15e1a2c7791a59d2a7d3bf78ea701e7cd0cc1aa888802462c76c8c0b1d7c32ae03d4a2c64c01897444d4032a14a6f5742efaafff77e1d6c", 0x9d3e, 0x2, 0x2d2, 0xffffffff, 0x2f8, 0x2, 0x4, 'syz1\x00'}) 11:55:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000b59d138a07020d93001000fafcc57500e23f0003000000002560b700ff00000000000023002f94826f41e0da8162a9dbeea191f6093597304869c14c0bed8641cc705b5e46ccd227e97abf5f6284d60ec587690dc9fa5bad54ab4d64f8e3548db4cb64"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xf8, 0x2, [{0x491}]}) [ 195.764159][ T9053] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 195.786931][ T9053] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:55:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$KDADDIO(r0, 0x400455c8, 0x9) 11:55:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)="2e0000001d008104e08f80ecdb4cb9d9026319016993bc1a454ada35a564f3f7af5312140002003bb214bbe10001", 0x2e}], 0x1}, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x3, r2}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0x100000000}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/242) 11:55:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x240000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'teql0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) [ 197.289396][ T8527] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 197.289404][ T8323] Bluetooth: hci0: command 0xfc11 tx timeout [ 197.327635][ T9066] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.373032][ T22] Bluetooth: hci1: command 0xfc11 tx timeout [ 197.379125][ T1501] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 197.398430][ T9071] WARNING: CPU: 0 PID: 9071 at fs/kernfs/dir.c:493 kernfs_create_dir_ns+0x205/0x230 [ 197.407917][ T9071] Kernel panic - not syncing: panic_on_warn set ... [ 197.414504][ T9071] CPU: 0 PID: 9071 Comm: syz-executor.1 Not tainted 5.2.0-rc6 #6 [ 197.422210][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.432245][ T9071] Call Trace: [ 197.435535][ T9071] dump_stack+0x1d8/0x2f8 [ 197.439888][ T9071] panic+0x28a/0x7c9 [ 197.443767][ T9071] ? __kernfs_new_node+0xd9/0x6e0 [ 197.448779][ T9071] ? __warn+0x126/0x220 [ 197.452942][ T9071] ? nmi_panic+0x97/0x97 [ 197.457189][ T9071] ? kernfs_create_dir_ns+0x205/0x230 [ 197.462588][ T9071] ? is_valid_bugaddr+0x81/0x100 [ 197.467535][ T9071] __warn+0x216/0x220 [ 197.471522][ T9071] ? kernfs_create_dir_ns+0x205/0x230 [ 197.472846][ T3879] kobject: 'loop3' (0000000014264aba): kobject_uevent_env [ 197.476898][ T9071] report_bug+0x190/0x290 [ 197.476911][ T9071] ? kernfs_create_dir_ns+0x205/0x230 [ 197.476926][ T9071] do_error_trap+0xd7/0x450 [ 197.476942][ T9071] do_invalid_op+0x36/0x40 [ 197.476950][ T9071] ? kernfs_create_dir_ns+0x205/0x230 [ 197.476972][ T9071] invalid_op+0x14/0x20 [ 197.476982][ T9071] RIP: 0010:kernfs_create_dir_ns+0x205/0x230 [ 197.476992][ T9071] Code: ff 4c 89 ff e8 7c cd ff ff 4c 63 fb eb 05 e8 e2 27 9a ff 4c 89 f8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 cb 27 9a ff <0f> 0b e9 e9 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff [ 197.476996][ T9071] RSP: 0018:ffff88805a66f590 EFLAGS: 00010287 [ 197.477004][ T9071] RAX: ffffffff81db8a25 RBX: ffff88808fad88c0 RCX: 0000000000040000 [ 197.477009][ T9071] RDX: ffffc90007ff6000 RSI: 000000000001e1a2 RDI: 000000000001e1a3 [ 197.487760][ T3879] kobject: 'loop3' (0000000014264aba): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 197.488517][ T9071] RBP: ffff88805a66f5c8 R08: ffffffff81db8907 R09: ffffed1011f5b119 [ 197.488529][ T9071] R10: ffffed1011f5b119 R11: 1ffff11011f5b118 R12: ffff888098366600 [ 197.585978][ T9071] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880a8f66620 [ 197.594155][ T9071] ? kernfs_create_dir_ns+0xe7/0x230 [ 197.599512][ T9071] ? kernfs_create_dir_ns+0x205/0x230 [ 197.604882][ T9071] sysfs_create_dir_ns+0x161/0x300 [ 197.609986][ T9071] ? sysfs_warn_dup+0xb0/0xb0 [ 197.614667][ T9071] ? do_raw_spin_unlock+0x49/0x260 [ 197.619775][ T9071] kobject_add_internal+0x459/0xd50 [ 197.624971][ T9071] kobject_add+0x138/0x200 [ 197.629370][ T9071] ? mutex_unlock+0x10/0x10 [ 197.633852][ T9071] ? kobject_init+0x1e0/0x1e0 [ 197.638523][ T9071] ? kasan_check_read+0x11/0x20 [ 197.643355][ T9071] ? mutex_unlock+0xd/0x10 [ 197.647777][ T9071] ? get_device_parent+0x33c/0x4e0 [ 197.652868][ T9071] device_add+0x508/0x1570 [ 197.657290][ T9071] ? debugfs_create_dir+0x3c6/0x440 [ 197.662484][ T9071] ? dev_set_name+0x110/0x110 [ 197.667162][ T9071] ? up_write+0xb0/0x1b0 [ 197.671395][ T9071] ? debugfs_create_dir+0x3c6/0x440 [ 197.676616][ T9071] hci_register_dev+0x331/0x6c0 [ 197.681481][ T9071] hci_uart_tty_ioctl+0x815/0x970 [ 197.686503][ T9071] ? hci_uart_tty_write+0x10/0x10 [ 197.691537][ T9071] tty_ioctl+0xf66/0x15d0 [ 197.695859][ T9071] ? tty_do_resize+0x180/0x180 [ 197.700622][ T9071] ? rcu_lock_release+0x9/0x30 [ 197.705373][ T9071] ? tomoyo_path_number_perm+0x5f0/0x740 [ 197.710982][ T9071] ? trace_lock_acquire+0x190/0x190 [ 197.716163][ T9071] ? tomoyo_check_path_acl+0x180/0x180 [ 197.721600][ T9071] ? smk_access+0x4f0/0x4f0 [ 197.726082][ T9071] ? smk_access+0x18c/0x4f0 [ 197.730564][ T9071] ? tty_do_resize+0x180/0x180 [ 197.735333][ T9071] do_vfs_ioctl+0x7d4/0x1890 [ 197.739931][ T9071] ? ioctl_preallocate+0x240/0x240 [ 197.745035][ T9071] ? fget_many+0x30/0x30 [ 197.749273][ T9071] ? tomoyo_file_ioctl+0x23/0x30 [ 197.754197][ T9071] ? security_file_ioctl+0xa1/0xd0 [ 197.766957][ T9071] __x64_sys_ioctl+0xe3/0x120 [ 197.771636][ T9071] do_syscall_64+0xfe/0x140 [ 197.776131][ T9071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 197.782014][ T9071] RIP: 0033:0x459519 [ 197.785890][ T9071] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 197.805500][ T9071] RSP: 002b:00007fb578425c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.813908][ T9071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459519 [ 197.821883][ T9071] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 197.829834][ T9071] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 197.837787][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5784266d4 [ 197.845742][ T9071] R13: 00000000004c21a5 R14: 00000000004d5330 R15: 00000000ffffffff [ 197.855454][ T9071] Kernel Offset: disabled [ 197.860141][ T9071] Rebooting in 86400 seconds..